Known vulnerabilities in Red Hat Hardened Images

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-110927	A flaw was found in OpenSSH	4.3 Medium	Oct 15, 2026
CVE-2026-110924	A flaw was found in OpenSSH	4.8 Medium	Oct 15, 2026
CVE-2026-110926	A flaw was found in OpenSSH	5.3 Medium	Oct 15, 2026
CVE-2026-110925	A flaw was found in OpenSSH	5.4 Medium	Oct 15, 2026
CVE-2026-110923	A flaw was found in OpenSSH	6.5 Medium	Oct 15, 2026
CVE-2026-88842	A flaw was found in BusyBox dpkg	3.3 Low	Oct 14, 2026
CVE-2026-88829	A flaw was found in BusyBox httpd's reverse proxy feature	7.2 High	Oct 14, 2026
CVE-2026-90954	A flaw was found in BusyBox's dpkg-deb archive extraction	7.8 High	Oct 14, 2026
CVE-2026-88834	A flaw was found in BusyBox's httpd web server	3.7 Low	Oct 13, 2026
CVE-2026-88838	A flaw was found in BusyBox's mount utility	5.5 Medium	Oct 13, 2026
CVE-2026-88833	A flaw was found in BusyBox's udhcpc DHCP client	6.5 Medium	Oct 13, 2026
CVE-2026-108119	Busybox: busybox: tar extraction-root escape via deferred symlink/hardlink creation bypasses cve-2026-26158 fix	6.3 Medium	Oct 9, 2026
CVE-2026-107935	Gvisor-tap-vsock: gvisor-tap-vsock: unathenticated arbitrary file deletion on the host via /expose	9.3 Critical	Oct 9, 2026
CVE-2026-107655	Cups: null pointer dereference via embedded job ticket comments allows remote denial of service	4.0 Medium	Oct 9, 2026
CVE-2026-107445	A flaw was found in Katello where the Flatpak Remote Repositories API does not properly enforce authorization when…	5.4 Medium	Oct 8, 2026
CVE-2026-107444	A flaw was found in Katello where the Docker Tags repositories API does not properly enforce organization scoping when…	4.3 Medium	Oct 8, 2026
CVE-2026-107161	Cyrus-sasl: heap buffer overflow in cyrus-sasl add_to_challenge() allows malicious server to crash or compromise digest-md5 clients	7.5 High	Oct 7, 2026
CVE-2026-106033	Ansible: ansible-ui: ansible ui dom xss in /redirect next parameter	5.4 Medium	Oct 6, 2026
CVE-2026-105326	Cups: cups: argument injection in mailto notifier via notify-recipient-uri	2.5 Low	Oct 5, 2026
CVE-2026-95512	Freetype: freetype: denial of service via repeated subroutine allocations in cid font loader	5.5 Medium	Oct 2, 2026
CVE-2026-103242	Rpm: heap-based buffer overflow write in hex2binv() via a mistyped rpmtag_filesignatures header tag	7.1 High	Sep 30, 2026
CVE-2026-95520	Rpm: rpm: integer overflow in iterreadarchivenext() leads to heap-based buffer overflow when parsing untrusted rpm packages	7.1 High	Sep 29, 2026
CVE-2026-102010	Gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: denial of service via use-after-free in binary heap erase_if	7.0 High	Sep 28, 2026
CVE-2026-95521	Rpm: rpm: shell command injection via macro expansion of source/spec file basenames when installing a source rpm	7.8 High	Sep 24, 2026
CVE-2026-95519	Rpm: code execution via macro expansion of manifest entries in `rpmgi` (`-q -p` / verify manifest flows)	7.8 High	Sep 24, 2026

Other Red Hat products