Known vulnerabilities in Red Hat Hardened Images

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-42154	Prometheus is an open-source monitoring system and time series database	7.5 High	May 4, 2026
CVE-2026-42151	Prometheus is an open-source monitoring system and time series database	7.5 High	May 4, 2026
CVE-2026-29004	BusyBox before commit 42202bf contains a heap buffer overflow vulnerability in the DHCPv6 client (udhcpc6) DNS_SERVERS…	7.2 High	May 4, 2026
CVE-2026-23918	Double Free and possible RCE vulnerability in Apache HTTP Server with the HTTP/2 protocol	Not rated	May 4, 2026
CVE-2026-33846	Gnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassembly	7.5 High	May 4, 2026
CVE-2026-7598	A security vulnerability has been detected in libssh2 up to 1.11.1	6.9 Medium	May 1, 2026
CVE-2026-33845	Gnutls: gnutls: denial of service via dtls zero-length fragment	7.5 High	Apr 30, 2026
CVE-2026-3832	Gnutls: gnutls: security bypass allows acceptance of revoked server certificates via crafted ocsp response	3.7 Low	Apr 30, 2026
CVE-2026-3833	Gnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparison	6.5 Medium	Apr 30, 2026
CVE-2025-14576	Insufficient validation of node IDs in Qt SVG module allows arbitrary QML/JavaScript code injection when loading…	7.4 High	Apr 30, 2026
CVE-2026-42039	Axios is a promise based HTTP client for the browser and Node.js	6.9 Medium	Apr 24, 2026
CVE-2026-42041	Axios is a promise based HTTP client for the browser and Node.js	4.8 Medium	Apr 24, 2026
CVE-2026-42043	Axios is a promise based HTTP client for the browser and Node.js	7.2 High	Apr 24, 2026
CVE-2026-42044	Axios is a promise based HTTP client for the browser and Node.js	6.5 Medium	Apr 24, 2026
CVE-2026-42033	Axios is a promise based HTTP client for the browser and Node.js	7.4 High	Apr 24, 2026
CVE-2026-41316	ERB is a templating system for Ruby	8.1 High	Apr 24, 2026
CVE-2026-6732	Libxml2: libxml2: denial of service via crafted xsd-validated document	6.5 Medium	Apr 23, 2026
CVE-2026-6862	Efivar: efivar: denial of service due to stack overflow in device path node parsing	5.5 Medium	Apr 22, 2026
CVE-2026-6846	Binutils: binutils: arbitrary code execution via malformed xcoff object file processing	7.8 High	Apr 22, 2026
CVE-2026-6844	Binutils: binutils: denial of service vulnerabilities in readelf via crafted elf files	5.5 Medium	Apr 22, 2026
CVE-2026-6845	Binutils: binutils: denial of service via crafted elf file	5.0 Medium	Apr 22, 2026
CVE-2026-34282	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE…	7.5 High	Apr 21, 2026
CVE-2026-22016	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE…	7.5 High	Apr 21, 2026
CVE-2026-40895	follow-redirects is an open source, drop-in replacement for Node's `http` and `https` modules that automatically follows…	6.9 Medium	Apr 21, 2026
CVE-2026-40372	Improper verification of cryptographic signature in ASP.NET Core allows an unauthorized attacker to elevate privileges…	9.1 Critical	Apr 21, 2026

Other Red Hat products