Known vulnerabilities in Red Hat OpenShift Container Platform 4

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-58222	A security flaw combining LDAP filter injection and improper authorization checks was found in Samba Active Directory…	8.8 High	Jul 30, 2026
CVE-2026-58218	A flaw was found in Samba's internal DNS server where unauthenticated TKEY registration requests were added to the…	5.3 Medium	Jul 30, 2026
CVE-2026-16531	Pcp: pcp: arbitrary file creation via path traversal in pmproxy logger servlet	5.3 Medium	Jul 30, 2026
CVE-2026-16530	Pcp: pcp: remote denial of service and information leakage	6.5 Medium	Jul 30, 2026
CVE-2026-16529	Pcp: pcp: denial of service due to signed integer overflow	7.5 High	Jul 30, 2026
CVE-2026-16527	Pcp: pcp pmproxy: unauthenticated access to /store endpoint allows bypassing pmcd access rules	7.3 High	Jul 30, 2026
CVE-2026-16526	Pcp: pcp: privilege escalation to root via linux_sockets pmda vulnerability	8.8 High	Jul 30, 2026
CVE-2026-16524	Pcp: pcp linux_sockets pmda: arbitrary command execution via command injection	7.8 High	Jul 30, 2026
CVE-2026-18220	An out-of-bounds write vulnerability was found in the BFD library's DLX ELF backend (bfd/elf32-dlx.c) in GNU binutils	7.8 High	Jul 29, 2026
CVE-2026-18107	Criu: criu: container escape via rseq critical section hijack during checkpoint/restore	7.8 High	Jul 28, 2026
CVE-2026-16313	Sg3_utils: sg3_utils: arbitrary command execution via udev property injection in sg_inq --export	7.6 High	Jul 28, 2026
CVE-2026-49332	A flaw was found in openshift/oauth-proxy	8.5 High	Jul 28, 2026
CVE-2026-15003	Binutils: gnu binutils: heap-buffer-overflow in linker leads to information disclosure and denial of service	5.6 Medium	Jul 27, 2026
CVE-2026-16730	Dbus-broker: dbus-broker: session bus denial of service via emfile during peer setup	5.5 Medium	Jul 24, 2026
CVE-2026-6390	Nano: gnu nano: arbitrary memory writes, information disclosure, or denial of service via format string vulnerability in error handling.	6.8 Medium	Jul 23, 2026
CVE-2026-16552	A flaw was found in systemd-tmpfiles	6.3 Medium	Jul 22, 2026
CVE-2026-16517	Libarchive: libarchive: signed integer overflow in archive_write_zip_header	2.9 Low	Jul 21, 2026
CVE-2026-16445	Dracut: dracut: root code execution via dhcp options command injection in networkmanager initrd module	7.5 High	Jul 21, 2026
CVE-2026-16461	Rpcbind: rpcbind: stack buffer overflow in rpcinfo rpcbdump() short-mode version-list formatting	6.5 Medium	Jul 21, 2026
CVE-2026-15811	Kronosnet: kronosnet: encryption key exposure in memory after cryptographic configuration changes	5.8 Medium	Jul 21, 2026
CVE-2026-15812	Kronosnet: kronosnet: access control list bypass via link id spoofing on unencrypted dynamic links	4.8 Medium	Jul 21, 2026
CVE-2026-16277	Rpcbind: rpcbind: stack buffer overflow in rpcinfo rpcbaddrlist()	6.5 Medium	Jul 20, 2026
CVE-2026-12080	Qemu-kvm: qemu-guest-agent: local privilege escalation via symlink attack in guest-ssh-add-authorized-keys	7.3 High	Jul 20, 2026
CVE-2026-15588	Gdbusserver: glib2: gdbusserver pre-authentication dos via unbounded sasl line buffering	5.3 Medium	Jul 20, 2026
CVE-2026-15813	Kronosnet: kronosnet: memory corruption and out-of-bounds access via malformed network packet defragmentation	6.5 Medium	Jul 20, 2026

Other Red Hat products