CVE-2026-82343Gimp: heap out-of-bounds read and stack out-of-bounds access in psd loader from channel-count handling Exploitation status Not known exploited Fix Not confirmed Affected product G GIMP Published 08/28/2026 Severity Medium CVE-2026-82330Gimp: heap out-of-bounds read in pvr vq (compressed) decoder due to missing bounds check Exploitation status Public exploit Fix Not confirmed Affected product G GIMP Published 08/28/2026 Severity Medium CVE-2026-82328Gimp: heap out-of-bounds read in ico loader via unvalidated used_clrs palette count Exploitation status Public exploit Fix Not confirmed Affected product G GIMP Published 08/28/2026 Severity Medium CVE-2026-82324Gimp: heap out-of-bounds reads in iff/ilbm loader from ham row size mismatch and nplanes=0 Exploitation status Not known exploited Fix Not confirmed Affected product G GIMP Published 08/28/2026 Severity Medium CVE-2026-80101Gimp: multiple heap out-of-bounds reads in xwd loader from unrelated width and bytes-per-line validation Exploitation status Public exploit Fix Not confirmed Affected product G GIMP Published 08/25/2026 Severity Medium CVE-2026-78475Gimp: unbounded stack vla and 21-byte stack over-read in pix (esm) loader Exploitation status Not known exploited Fix Not confirmed Affected product G GIMP Published 08/24/2026 Severity Medium CVE-2026-11861Freeipa: idm: ipa: freeipa: obtaining tgs with impersonating cname through trust relationships Exploitation status Not known exploited Fix Not confirmed Affected product R Red Hat Enterprise Linux 10 Published 08/20/2026 Severity Critical CVE-2026-73198Ipa: freeipa: unauthenticated dos in `/ipa/i18n_messages` via unbounded request body read Exploitation status Not known exploited Fix Not confirmed Affected product R Red Hat Enterprise Linux 10 Published 08/20/2026 Severity High CVE-2026-13097Ipa: privilege escalation via krbcanonicalname manipulation due to realm-unaware uniqueness enforcement in freeipa ldap datastore Exploitation status Not known exploited Fix Not confirmed Affected product R Red Hat Enterprise Linux 10 Published 08/20/2026 Severity High CVE-2026-73196Ipa: freeipa: authenticated dos in `otptoken-add` via unbounded otp key decoding/re-encoding Exploitation status Not known exploited Fix Not confirmed Affected product R Red Hat Enterprise Linux 10 Published 08/20/2026 Severity Medium CVE-2026-73197Ipa: freeipa: unauthenticated dos in `/ipa/migration/migration.py` via unbounded request body read Exploitation status Not known exploited Fix Not confirmed Affected product R Red Hat Enterprise Linux 10 Published 08/20/2026 Severity High CVE-2026-74247Quay: ssrf via build archive_url in quay build api Exploitation status Not known exploited Fix Not confirmed Affected product R Red Hat OpenShift Update Service Published 08/14/2026 Severity Medium CVE-2026-74245Quay: unauthenticated exported logs download in quay Exploitation status Not known exploited Fix Not confirmed Affected product R Red Hat OpenShift Update Service Published 08/14/2026 Severity Medium CVE-2026-74244Quay: stripe webhook accepts forged events without signature verification in quay Exploitation status Not known exploited Fix Not confirmed Affected product R Red Hat OpenShift Update Service Published 08/14/2026 Severity Medium CVE-2026-74243Quay: unauthenticated secscan notification endpoint in quay when psk is unset Exploitation status Not known exploited Fix Not confirmed Affected product R Red Hat OpenShift Update Service Published 08/14/2026 Severity Medium CVE-2026-74242Quay: repository notification uuid idor in quay api Exploitation status Not known exploited Fix Not confirmed Affected product R Red Hat OpenShift Update Service Published 08/14/2026 Severity Medium CVE-2026-74241Quay: ldap referral filter injection in quay external ldap authentication Exploitation status Not known exploited Fix Not confirmed Affected product R Red Hat OpenShift Update Service Published 08/14/2026 Severity Medium CVE-2026-74240Quay: jwt claim validation bypasses in quay federated robot and sso authentication Exploitation status Not known exploited Fix Not confirmed Affected product R Red Hat OpenShift Update Service Published 08/14/2026 Severity Medium CVE-2026-13002Dnsmasq: infinite loop dos in dnssec nsec/nsec3 type bitmap parsing Exploitation status Not known exploited Fix Not confirmed Affected product R Red Hat Enterprise Linux 10 Published 08/14/2026 Severity Medium CVE-2026-58224Samba: ctdb fails to do integrity checking of received packets Exploitation status Not known exploited Fix Not confirmed Affected product R Red Hat Enterprise Linux 7 Published 08/14/2026 Severity Medium CVE-2026-19617Libdm: lvm2: libdm: denial of service via uncontrolled recursion in config parser Exploitation status Not known exploited Fix Not confirmed Affected product R Red Hat Enterprise Linux 10 Published 08/14/2026 Severity Medium CVE-2026-73584Sblim-sfcb: sblim-sfcb: privileged file corruption and denial of service via insecure temporary file handling Exploitation status Not known exploited Fix Not confirmed Affected product R Red Hat Enterprise Linux 10 Published 08/13/2026 Severity Medium CVE-2026-73583Sblim-sfcb: unsafe deserialization in sblim-sfcb provider-manager ipc allows out-of-bounds memory access via malformed operationhdr Exploitation status Not known exploited Fix Not confirmed Affected product R Red Hat Enterprise Linux 10 Published 08/13/2026 Severity Medium CVE-2026-73585Sblim-cmpi-base: insecure temporary file creation in sblim-cmpi-base provider registration scripts allows local symlink attack Exploitation status Not known exploited Fix Not confirmed Affected product R Red Hat Enterprise Linux 10 Published 08/13/2026 Severity Medium CVE-2026-18728Open-iscsi: open-iscsi: integer underflow in iscsiuio ipv4 dhcp parsing Exploitation status Not known exploited Fix Not confirmed Affected product R Red Hat Enterprise Linux 10 Published 08/13/2026 Severity Medium CVE-2026-71846Insights-client: insights-client: clusterrole grants cluster-wide secrets get/list/watch beyond least privilege Exploitation status Not known exploited Fix Not confirmed Affected product R Red Hat Advanced Cluster Management for Kubernetes 2.11 Published 08/12/2026 Severity Medium CVE-2026-18727Open-iscsi: open-iscsi: integer underflow in iscsiuio dhcpv6 parsing Exploitation status Not known exploited Fix Not confirmed Affected product R Red Hat Enterprise Linux 10 Published 08/12/2026 Severity Medium CVE-2026-18726Open-iscsi: open-iscsi: denial of service in iscsiuio router advertisement parsing Exploitation status Not known exploited Fix Not confirmed Affected product R Red Hat Enterprise Linux 10 Published 08/12/2026 Severity Medium CVE-2026-19654Rsyslog: a configuration-dependent issue in rsyslog's optional imptcp input module can allow an unauthenticated remote peer to crash rsyslogd Exploitation status Not known exploited Fix Not confirmed Affected product R Red Hat Enterprise Linux 10.0 Extended Update Support Published 08/12/2026 Severity High CVE-2026-73433Gstreamer1-plugins-good: gstreamer: unsigned integer underflow in avidemux fujifilm strd parsing leading to out-of-bounds read/write Exploitation status Not known exploited Fix Affected product G gst-plugins-good Published 08/12/2026 Severity Medium CVE-2026-73434Gstreamer1-plugins-good: gstreamer: out-of-bounds read in avidemux vprp video field descriptor parsing Exploitation status Not known exploited Fix Affected product G gst-plugins-good Published 08/12/2026 Severity Medium CVE-2026-19548Binutils: binutils: multiple use-after-free in add_archive_element via lto plugin processing Exploitation status Not known exploited Fix Not confirmed Affected product R Red Hat Enterprise Linux 10 Published 08/12/2026 Severity Medium CVE-2026-19550Freeipa: ipa: freeipa: trust-fetch-domains uses trust-read aci to gate a privileged ad trust refresh, allowing unauthorized ldap writes Exploitation status Not known exploited Fix Not confirmed Affected product R Red Hat Enterprise Linux 10 Published 08/11/2026 Severity High CVE-2026-71474Insights-client-rhel9: insights-client: pull-secret bearer token written to logs on non-200 ccx response Exploitation status Not known exploited Fix Not confirmed Affected product R Red Hat Advanced Cluster Management for Kubernetes 2.11 Published 08/11/2026 Severity High CVE-2026-71475Insights-client-rhel9: insights-client: spoke-controlled clusterid injected unencoded into insights api url path Exploitation status Not known exploited Fix Not confirmed Affected product R Red Hat Advanced Cluster Management for Kubernetes 2.13 Published 08/11/2026 Severity Medium CVE-2026-71845Insights-client: insights-client: ccx_token bearer credential logged in clear text at startup via setdefault() Exploitation status Not known exploited Fix Not confirmed Affected product R Red Hat Advanced Cluster Management for Kubernetes 2.11 Published 08/11/2026 Severity Medium CVE-2026-59091Gimp: gimp: multiple vulnerabilities in file format plugins via crafted image file Exploitation status Not known exploited Fix Not confirmed Affected product G gimp Published 08/10/2026 Severity High CVE-2026-59090Gimp: gimp: arbitrary code execution in psd plugin due to unsigned underflow Exploitation status Public exploit Fix Not confirmed Affected product G gimp Published 08/10/2026 Severity High CVE-2026-59088Gimp: gimp: denial of service via signed integer overflow in fli file processing Exploitation status Not known exploited Fix Not confirmed Affected product G gimp Published 08/10/2026 Severity Medium CVE-2026-59087Gimp: heap buffer overflow in `file-seattle-filmworks` load — `fread` writes attacker-controlled length into undersized allocation Exploitation status Not known exploited Fix Not confirmed Affected product G gimp Published 08/10/2026 Severity High CVE-2026-42170Gimp: gimp dds plug-in heap-based buffer overflow via bpp mismatch in load_layer() (ddsread.c) Exploitation status Not known exploited Fix Not confirmed Affected product R Red Hat Enterprise Linux 6 Published 08/08/2026 Severity High CVE-2026-18967Keycloak-services: keycloak-services: saml onetimeuse assertion replay in idp-initiated broker flow Exploitation status Not known exploited Fix Not confirmed Affected product R Red Hat Build of Keycloak Published 08/06/2026 Severity Medium CVE-2026-15572Keycloak-services: keycloak-services: dcr protocol mapper type-swap policy bypass allows privilege escalation Exploitation status Not known exploited Fix Not confirmed Affected product R Red Hat build of Keycloak 26.4 Published 08/05/2026 Severity High CVE-2026-16442Keycloak-services: keycloak-services: saml idp-initiated broker login bypasses link-only restriction Exploitation status Not known exploited Fix Not confirmed Affected product R Red Hat build of Keycloak 26.4 Published 08/05/2026 Severity High CVE-2026-16100Keycloak-services: keycloak-services: unbounded metric cardinality in user event metrics via request-controlled error text Exploitation status Not known exploited Fix Not confirmed Affected product R Red Hat build of Keycloak 26.6 Published 08/05/2026 Severity Medium CVE-2026-16071Keycloak-services: keycloak-services: ldap entry-dn user search bypasses configured users dn boundary Exploitation status Not known exploited Fix Not confirmed Affected product R Red Hat build of Keycloak 26.4 Published 08/05/2026 Severity Medium CVE-2026-16102Keycloak-services: keycloak-services: default dcr policy allows role forgery via user property mappers Exploitation status Not known exploited Fix Not confirmed Affected product R Red Hat build of Keycloak 26.4 Published 08/05/2026 Severity High CVE-2026-15573Keycloak-services: keycloak-services: authorization bypass via unnormalized uri matching in pathmatcher Exploitation status Not known exploited Fix Not confirmed Affected product R Red Hat build of Keycloak 26.4 Published 08/05/2026 Severity High CVE-2026-16443Keycloak-services: keycloak-services: saml broker metadata import disables response signature validation Exploitation status Not known exploited Fix Not confirmed Affected product R Red Hat build of Keycloak 26.4 Published 08/05/2026 Severity High CVE-2026-71227Libkcapi: infinite loop denial of service in libkcapi _kcapi_aio_read_all() due to unhandled io_getevents() timeout return Exploitation status Not known exploited Fix Affected product L libkcapi Published 08/05/2026 Severity Medium CVE-2026-71226Libkcapi: memory corruption via uncanceled aio requests on error in libkcapi's one-shot aio path Exploitation status Not known exploited Fix Affected product L libkcapi Published 08/05/2026 Severity High CVE-2026-71225Libkcapi: iv reuse in libkcapi one-shot symmetric cipher chunking causes cipher state reset across chunk boundaries Exploitation status Not known exploited Fix Affected product L libkcapi Published 08/05/2026 Severity Medium CVE-2026-68743Sssd: sssd: pam responder out-of-bounds read via unchecked auth_token_length in protocol v1 Exploitation status Not known exploited Fix Not confirmed Affected product R Red Hat Enterprise Linux 10 Published 08/04/2026 Severity Medium CVE-2026-68744Sssd: sssd: nss responder uninitialized heap disclosure in initgroups reply Exploitation status Not known exploited Fix Not confirmed Affected product R Red Hat Enterprise Linux 10 Published 08/04/2026 Severity Low CVE-2026-18569Keycloak-services: keycloak-services: oidc backchannel logout accepts unsigned forged logout tokens Exploitation status Not known exploited Fix Not confirmed Affected product R Red Hat Build of Keycloak Published 08/04/2026 Severity Low CVE-2026-18477Tar: tar: toctou in incremental dumpdir 'x' rename handling allows restore path escape Exploitation status Not known exploited Fix Not confirmed Affected product R Red Hat Enterprise Linux 10 Published 08/03/2026 Severity Medium CVE-2026-18651389-ds-base: 389-ds-base: sasl plain bind installs connection credentials before account-lock check, allowing continued access as a locked account Exploitation status Not known exploited Fix Not confirmed Affected product R Red Hat Directory Server 11 Published 08/03/2026 Severity Medium CVE-2026-18508Tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite Exploitation status Not known exploited Fix Not confirmed Affected product R Red Hat Enterprise Linux 10 Published 08/03/2026 Severity Medium CVE-2026-68742Sssd: sssd: nss responder out-of-bounds read via unchecked addrlen in gethostbyaddr Exploitation status Not known exploited Fix Not confirmed Affected product R Red Hat Enterprise Linux 10 Published 08/03/2026 Severity Medium CVE-2026-6695Gimp: gimp: remote code execution via crafted paa file Exploitation status Not known exploited Fix Not confirmed Affected product R Red Hat Enterprise Linux 6 Published 08/03/2026 Severity Medium CVE-2026-6694Gimp: gimp file-png plugin: denial of service via oversized apng trns chunk Exploitation status Not known exploited Fix Not confirmed Affected product R Red Hat Enterprise Linux 6 Published 08/03/2026 Severity Medium CVE-2026-18573Keycloak-services: keycloak-services: client access-type policy condition bypass during client update Exploitation status Not known exploited Fix Not confirmed Affected product R Red Hat Build of Keycloak Published 08/02/2026 Severity Medium CVE-2026-18572Keycloak-services: keycloak-services: uma claim token can override authorization time-policy evaluation attributes Exploitation status Not known exploited Fix Not confirmed Affected product R Red Hat Build of Keycloak Published 08/02/2026 Severity Medium CVE-2026-18571Keycloak-services: keycloak-services: fgap v2 group assignment bypass during user creation Exploitation status Not known exploited Fix Not confirmed Affected product R Red Hat Build of Keycloak Published 08/02/2026 Severity Medium CVE-2026-18570Keycloak-services: keycloak-services: full-scope-disabled client policy validation bypass via omitted fullscopeallowed Exploitation status Not known exploited Fix Not confirmed Affected product R Red Hat Build of Keycloak Published 08/02/2026 Severity Medium CVE-2026-11770389-ds-base: 389-ds-base: pre-auth ldap filter injection in cleanallruv status check Exploitation status Not known exploited Fix Not confirmed Affected product R Red Hat Directory Server 11.7 E4S for RHEL 8 Published 07/31/2026 Severity High CVE-2026-15722389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica id parsing Exploitation status Not known exploited Fix Not confirmed Affected product R Red Hat Directory Server 11.7 E4S for RHEL 8 Published 07/31/2026 Severity High CVE-2026-18209Keycloak-services: keycloak-services: oidc redirect_uri fragment bypass in http parameter pollution check Exploitation status Not known exploited Fix Not confirmed Affected product R Red Hat Build of Keycloak Published 07/31/2026 Severity Low CVE-2026-18206Keycloak-services: keycloak-services: client policy source-host wildcard domain matching bypass Exploitation status Not known exploited Fix Not confirmed Affected product R Red Hat Build of Keycloak Published 07/31/2026 Severity Low CVE-2026-18214Keycloak-services: keycloak-services: google external access-token exchange bypasses hosted-domain restriction Exploitation status Not known exploited Fix Not confirmed Affected product R Red Hat Build of Keycloak Published 07/31/2026 Severity Medium CVE-2026-18203Keycloak-services: keycloak-services: group policy extendchildren matches sibling group path prefixes Exploitation status Not known exploited Fix Not confirmed Affected product R Red Hat Build of Keycloak Published 07/31/2026 Severity Medium CVE-2026-18211Keycloak-services: keycloak-services: secure-client-uris policy bypass via localhost-prefixed domains Exploitation status Not known exploited Fix Not confirmed Affected product R Red Hat Build of Keycloak Published 07/31/2026 Severity Medium CVE-2026-18208Keycloak-services: keycloak-services: inactive out-of-audience token introspection leaks signed jwt claim Exploitation status Not known exploited Fix Not confirmed Affected product R Red Hat Build of Keycloak Published 07/31/2026 Severity Medium CVE-2026-16105Keycloak-services: keycloak-services: missing per-role authorization on rolecontainerresource composite endpoints Exploitation status Not known exploited Fix Not confirmed Affected product R Red Hat Build of Keycloak Published 07/31/2026 Severity Medium CVE-2026-18215Keycloak-services: keycloak-services: microsoft external access-token exchange bypasses configured tenant Exploitation status Not known exploited Fix Not confirmed Affected product R Red Hat Build of Keycloak Published 07/31/2026 Severity Medium CVE-2026-18217Keycloak-services: keycloak-services: saml http-redirect binding response preserves query string leading to parameter pollution Exploitation status Not known exploited Fix Not confirmed Affected product R Red Hat Build of Keycloak Published 07/31/2026 Severity Low CVE-2026-18218Keycloak-services: keycloak-services: client not-before revocation ignored when realm not-before is older but nonzero Exploitation status Not known exploited Fix Not confirmed Affected product R Red Hat Build of Keycloak Published 07/31/2026 Severity Medium CVE-2026-18382Project-koku/koku-metrics-operator: koku-metrics-operator: service-account client credentials sent to user-controlled token_url Exploitation status Not known exploited Fix Not confirmed Affected product C Cost Management Metrics Operator Published 07/30/2026 Severity Medium CVE-2026-18378Project-koku/koku-metrics-operator: koku-metrics-operator: cluster pull-secret token exfiltration via user-controlled api_url (ssrf / confused deputy) Exploitation status Not known exploited Fix Not confirmed Affected product C Cost Management Metrics Operator Published 07/30/2026 Severity High CVE-2026-18381Project-koku/koku-metrics-operator: koku-metrics-operator: operator service-account token exfiltration via user-controlled prometheus service_address Exploitation status Not known exploited Fix Not confirmed Affected product C Cost Management Metrics Operator Published 07/30/2026 Severity High CVE-2026-18201Keycloak-services: keycloak-services: generic identity-provider creation can bind brokers to organizations without manage-organizations Exploitation status Not known exploited Fix Not confirmed Affected product R Red Hat Build of Keycloak Published 07/29/2026 Severity Medium CVE-2026-18207Keycloak-services: keycloak-services: client policy source-group condition bypass via duplicate group name matching Exploitation status Not known exploited Fix Not confirmed Affected product R Red Hat Build of Keycloak Published 07/29/2026 Severity Medium CVE-2026-66759Gimp: out-of-bounds read in file-icns plugin causes information disclosure or crash on crafted icns images Exploitation status Public exploit Fix Not confirmed Affected product G GIMP Published 07/27/2026 Severity High CVE-2026-66757Gimp: signed integer overflow in file-sgi (sgi-lib) causes the plugin to crash on rle sgi images Exploitation status Public exploit Fix Not confirmed Affected product G GIMP Published 07/27/2026 Severity Medium CVE-2026-66758Gimp: integer overflow in file-fits plugin causes a heap-based buffer overflow on crafted fits images Exploitation status Not known exploited Fix Not confirmed Affected product G GIMP Published 07/27/2026 Severity High CVE-2026-66337Libsoup: libsoup: heap buffer over-read via integer underflow in soup_filter_input_stream_read_until() Exploitation status Not known exploited Fix Not confirmed Affected product R Red Hat Enterprise Linux 10 Published 07/24/2026 Severity Medium CVE-2026-66338Libsoup: libsoup: http request smuggling via permissive chunk-size parsing in soup_body_input_stream_read_chunked() Exploitation status Not known exploited Fix Not confirmed Affected product R Red Hat Enterprise Linux 10 Published 07/24/2026 Severity Medium CVE-2026-66339Libsoup: libsoup: proxy credentials leak to destination server via proxy-authorization header in connect tunnels Exploitation status Not known exploited Fix Not confirmed Affected product R Red Hat Enterprise Linux 10 Published 07/24/2026 Severity Medium CVE-2026-17059Keycloak-services: keycloak-services: information disclosure via role-users endpoint bypasses per-user view filter Exploitation status Not known exploited Fix Not confirmed Affected product R Red Hat Build of Keycloak Published 07/24/2026 Severity Medium CVE-2026-17048Keycloak-services: keycloak-services: vault-resolved rotated client secrets leaked via admin rest api Exploitation status Not known exploited Fix Not confirmed Affected product R Red Hat build of Keycloak 26.6 Published 07/24/2026 Severity Medium CVE-2026-12548Libsoup: heap out-of-bounds read in libsoup due to integer truncation Exploitation status Public exploit Fix Not confirmed Affected product R Red Hat Enterprise Linux 10 Published 07/21/2026 Severity Medium CVE-2026-59851Libssh: libssh: authentication bypass via missing gssapi principal check Exploitation status Not known exploited Fix Not confirmed Affected product R Red Hat Enterprise Linux 10 Published 07/21/2026 Severity High CVE-2026-59850Libssh: libssh: use-after-free via data callbacks on closed channels Exploitation status Not known exploited Fix Not confirmed Affected product R Red Hat Enterprise Linux 10 Published 07/21/2026 Severity Medium CVE-2026-59849Libssh: libssh: denial of service via automatic certificate authentication loop Exploitation status Not known exploited Fix Not confirmed Affected product R Red Hat Enterprise Linux 10 Published 07/21/2026 Severity Low CVE-2026-59848Libssh: libssh: denial of service via sftp responses with unknown request ids Exploitation status Not known exploited Fix Not confirmed Affected product R Red Hat Enterprise Linux 10 Published 07/21/2026 Severity Medium CVE-2026-59847Libssh: libssh: integrity downgrade via openssl aes-gcm tag verification Exploitation status Not known exploited Fix Not confirmed Affected product R Red Hat Enterprise Linux 10 Published 07/21/2026 Severity Medium CVE-2026-59846Libssh: libssh: information disclosure via proxycommand %r username expansion Exploitation status Not known exploited Fix Not confirmed Affected product R Red Hat Enterprise Linux 10 Published 07/21/2026 Severity Low CVE-2026-59844Libssh: libssh: denial of service via oversized sftp read length Exploitation status Not known exploited Fix Not confirmed Affected product R Red Hat Enterprise Linux 10 Published 07/21/2026 Severity Medium CVE-2026-59845Libssh: libssh: denial of service via unchecked proxycommand fork() failure Exploitation status Not known exploited Fix Not confirmed Affected product R Red Hat Enterprise Linux 10 Published 07/21/2026 Severity Medium CVE-2026-59843Libssh: libssh: denial of service via zero advertised channel packet size Exploitation status Not known exploited Fix Not confirmed Affected product R Red Hat Enterprise Linux 10 Published 07/21/2026 Severity Medium 
