Red Hat Openshift Container Platform 418

Vulnerabilities related to Red Hat Openshift Container Platform 418 61

• High 7.4 openshift-ansibleのインストーラーに改ざんされたスクリプトを実行される脆弱性 openshift-ansibleのインストーラーコンテナーは、インベントリや動的スクリプトを取得する際に整合性を確認しません。通信経路での中間者攻撃や配信サーバーの侵害により任意の実行ファイルを差し替えられると、インストーラーの権限で任意のコードを実行され、クラスター構築に関わる強い権限が悪用されるおそれがあります。CVSSは7.4で、悪用の情報は公表されていません。修正版の有無は確認できていないため、最新の情報を確認してください。 CVE-2026-92092 Oct 30, 04:51
• Medium 6.8 The system certificate authority (CA) store in Red Hat products, distributed via ca-certificates... CVE-2026-114406 Oct 22, 05:56
• High 7.7 SSRF (Server-Side Request Forgery) in OpenShift console SSRF in OpenShift console (CVE-2026-75888). Confidential information can be exposed externally. CVE-2026-75888 Oct 13, 02:17
• High 7.7 The `insights-operator-gather` ClusterRole grants the operator's service account read access to... Vulnerability reported (CVE-2026-93017). Confidential information can be exposed externally. CVE-2026-93017 Oct 9, 00:33
• High 7.1 Vulnerability in oc-mirror CVE-2026-96577 Oct 1, 19:17
• Medium 6.1 Open Redirect in oauth-proxy Vulnerability in oauth-proxy (CVE-2026-83589). Risk of unauthorized operations or information disclosure. CVE-2026-83589 Oct 1, 19:17
• High 7.5 Path Traversal in OpenShift console CVE-2026-75887 Sep 24, 07:16
• High 7.4 Vulnerability in openshift/oc-mirror CVE-2026-75939 Sep 22, 00:17
• Critical 9.3 SSRF (Server-Side Request Forgery) in OpenShift console SSRF in OpenShift console (CVE-2026-75885). Confidential information can be exposed externally. CVE-2026-75885 Sep 19, 07:17
• High 7.5 Vulnerability in openshift/oauth-server CVE-2026-49329 Sep 2, 01:16
• High 7.5 OS Command Injection in dracut CVE-2026-15816 Aug 7, 20:17
• High 7.6 Vulnerability in sg3_utils CVE-2026-16313 Jul 29, 02:16
• High 7.8 Vulnerability in CRI-O CVE-2026-15809 Jul 16, 00:33
• High 8.0 A path traversal flaw was found in SSSD's AD GPO provider. The ad_gpo_extract_smb_components()... Vulnerability reported (CVE-2026-14476). Successful exploitation can lead to full system takeover. CVE-2026-14476 Jul 7, 19:16
• High 8.8 Vulnerability in SSSD's LDAP sudo provider CVE-2026-14474 Jul 7, 19:16
• High 7.3 Vulnerability in GLib CVE-2026-58014 Jul 1, 00:30
• High 7.5 A double free issue has been identified in libarchive's RAR5 reader. During parsing of a... Vulnerability reported (CVE-2026-14164). Risk of unauthorized operations or information disclosure. CVE-2026-14164 Jun 30, 18:31
• High 7.5 OS Command Injection in dracut CVE-2026-6893 Jun 11, 06:31
• High 7.7 SSRF (Server-Side Request Forgery) in OpenShift Router SSRF in OpenShift Router (CVE-2026-42965). Confidential information can be exposed externally. CVE-2026-42965 May 29, 21:31
• Critical 9.0 OS Command Injection in Samba CVE-2026-4408 May 28, 18:31
• Medium 6.5 Vulnerability in Samba CVE-2026-2340 May 28, 00:33
• High 7.1 Vulnerability in Samba CVE-2026-1933 May 28, 00:33
• High 8.0 Vulnerability in Samba CVE-2026-3012 May 27, 20:16
• High 8.2 Vulnerability in libgnutls CVE-2026-5260 May 27, 07:16
• High 8.2 Vulnerability in gnutls CVE-2026-42013 May 27, 07:16
• High 7.8 Out-of-Bounds Write in libsolv CVE-2026-48864 May 27, 02:16
• High 7.5 Vulnerability in gnutls CVE-2026-42009 May 18, 22:16
• High 7.4 Vulnerability in gnutls CVE-2026-42011 May 8, 00:16
• High 7.1 Vulnerability in gnutls CVE-2026-42010 May 7, 21:16
• High 7.8 Use-After-Free in java Vulnerability in java (CVE-2025-7425). Data can be tampered with by attackers. Mitigation: upgrade to 1.8.0, 8.0.481 or later. CVE-2025-7425 May 6, 23:45