Known vulnerabilities in Red Hat OpenShift Container Platform 4

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-13002	A flow has been identified into dnssec.c library, causing an infinite loop to dnsmasq service	4.4 Medium	Aug 14, 2026
CVE-2026-58224	Samba: ctdb fails to do integrity checking of received packets	6.5 Medium	Aug 14, 2026
CVE-2026-19617	Libdm: lvm2: libdm: denial of service via uncontrolled recursion in config parser	5.5 Medium	Aug 14, 2026
CVE-2026-19730	Podman: podman: quadlet install --replace non-truncating write retains removed host-access directives	4.2 Medium	Aug 13, 2026
CVE-2026-19548	Binutils: binutils: multiple use-after-free in add_archive_element via lto plugin processing	5.5 Medium	Aug 12, 2026
CVE-2026-19078	A flaw was found in the oauth-server component	4.3 Medium	Aug 11, 2026
CVE-2026-50236	An authenticated SSRF flaw was found in the OpenShift Console Dev Console webhook helpers	7.4 High	Aug 11, 2026
CVE-2026-50237	A Server-Side Request Forgery and supply chain flaw was found in the OpenShift Console Helm catalog proxy	7.4 High	Aug 11, 2026
CVE-2026-72693	Kbd: local privilege escalation in openvt via incorrect process owner verification allowing passwordless root login	7.8 High	Aug 11, 2026
CVE-2026-6426	Qemu-kvm: vhost inflight migration vmstate integer type mismatch causes out-of-bounds access	4.4 Medium	Aug 10, 2026
CVE-2026-15816	A flaw was found in dracut	7.5 High	Aug 7, 2026
CVE-2026-18938	A flaw was found in p11-kit	6.2 Medium	Aug 7, 2026
CVE-2026-19079	Policycoreutils: policycoreutils: toctou race condition in fixfiles allows arbitrary selinux label manipulation	4.4 Medium	Aug 7, 2026
CVE-2026-18839	Popt-devel: popt-static: size_t underflow in singleoptionhelp	2.2 Low	Aug 5, 2026
CVE-2026-49331	A flaw was found in openshift/oauth-proxy	6.5 Medium	Aug 5, 2026
CVE-2026-71227	A flaw was found in libkcapi	5.1 Medium	Aug 5, 2026
CVE-2026-71226	Libkcapi: memory corruption via uncanceled aio requests on error in libkcapi's one-shot aio path	7.3 High	Aug 5, 2026
CVE-2026-71225	A flaw was found in libkcapi	6.5 Medium	Aug 5, 2026
CVE-2026-68743	Sssd: sssd: pam responder out-of-bounds read via unchecked auth_token_length in protocol v1	5.5 Medium	Aug 4, 2026
CVE-2026-18739	Popt-devel: popt-static: off-by-one in poptstuffargs	2.5 Low	Aug 4, 2026
CVE-2026-68744	Sssd: sssd: nss responder uninitialized heap disclosure in initgroups reply	3.3 Low	Aug 4, 2026
CVE-2026-18477	Tar: tar: toctou in incremental dumpdir 'x' rename handling allows restore path escape	4.4 Medium	Aug 3, 2026
CVE-2026-18508	Tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite	4.4 Medium	Aug 3, 2026
CVE-2026-68742	Sssd: sssd: nss responder out-of-bounds read via unchecked addrlen in gethostbyaddr	5.5 Medium	Aug 3, 2026
CVE-2026-58216	An out-of-bounds read flaw was found in Samba's Kerberos Key Distribution Center's (KDC) password change (kpasswd)…	5.3 Medium	Jul 30, 2026

Other Red Hat products