en
Severity across 9 analyzed records
A short verification protects source data and prevents automated AI requests.
The GCVE catalog currently lists 14 vulnerability records affecting Red Hat OpenShift Update Service.
Among the 9 records analyzed by CyStack, 0 are High or Critical and 0 appear in the CISA KEV catalog.
Compare the version you run with each vulnerability and the provider guidance below. The data only includes records analyzed so far.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan
| CVE | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-74247Quay: ssrf via build archive_url in quay build api | Exploitation statusNot known exploited | FixNot confirmed | Published08/14/2026 | SeverityMedium |
CVE-2026-74245Quay: unauthenticated exported logs download in quay | Exploitation statusNot known exploited | FixNot confirmed | Published08/14/2026 | SeverityMedium |
CVE-2026-74244Quay: stripe webhook accepts forged events without signature verification in quay | Exploitation statusNot known exploited | FixNot confirmed | Published08/14/2026 | SeverityMedium |
CVE-2026-74243Quay: unauthenticated secscan notification endpoint in quay when psk is unset | Exploitation statusNot known exploited | FixNot confirmed | Published08/14/2026 | SeverityMedium |
CVE-2026-74242Quay: repository notification uuid idor in quay api | Exploitation statusNot known exploited | FixNot confirmed | Published08/14/2026 | SeverityMedium |
CVE-2026-74241Quay: ldap referral filter injection in quay external ldap authentication | Exploitation statusNot known exploited | FixNot confirmed | Published08/14/2026 | SeverityMedium |
CVE-2026-74240Quay: jwt claim validation bypasses in quay federated robot and sso authentication | Exploitation statusNot known exploited | FixNot confirmed | Published08/14/2026 | SeverityMedium |
CVE-2026-16910Quay: ssrf in red hat quay notification webhooks (slack/generic) | Exploitation statusNot known exploited | FixNot confirmed | Published07/24/2026 | SeverityMedium |
CVE-2026-7598libssh2 userauth.c userauth_password integer overflow | Exploitation statusPublic exploit | FixYes | Published05/01/2026 | SeverityMedium |
CVE-2025-57854Osus-operator: privilege escalation via excessive /etc/passwd permissions | Exploitation statusNot known exploited | FixNot confirmed | Published04/08/2026 | SeverityMedium |
CVE-2026-31812Quinn affected by unauthenticated remote DoS via panic in QUIC transport parameter parsing | Exploitation statusPublic exploit | FixYes | Published03/10/2026 | SeverityHigh |
CVE-2026-3338PKCS7_verify Signature Validation Bypass in AWS-LC | Exploitation statusNot known exploited | FixYes | Published03/02/2026 | SeverityHigh |
CVE-2026-3336PKCS7_verify Certificate Chain Validation Bypass in AWS-LC | Exploitation statusNot known exploited | FixYes | Published03/02/2026 | SeverityHigh |
CVE-2026-21441urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API) | Exploitation statusNot known exploited | FixNot confirmed | Published01/07/2026 | SeverityHigh |
