Red Hat Openshift Container Platform 419

Vulnerabilities related to Red Hat Openshift Container Platform 419 48

• Medium 6.8 The system certificate authority (CA) store in Red Hat products, distributed via ca-certificates... CVE-2026-114406 Oct 22, 05:56
• High 8.8 The insights-runtime-extractor runs as a privileged DaemonSet (`hostPID: true`) that scans... Vulnerability reported (CVE-2026-104795). Successful exploitation can lead to full system takeover. Exploitable via VersionExecutable. CVE-2026-104795 Oct 14, 20:16
• High 7.7 SSRF (Server-Side Request Forgery) in OpenShift console SSRF in OpenShift console (CVE-2026-75888). Confidential information can be exposed externally. CVE-2026-75888 Oct 13, 02:17
• High 7.7 The `insights-operator-gather` ClusterRole grants the operator's service account read access to... Vulnerability reported (CVE-2026-93017). Confidential information can be exposed externally. CVE-2026-93017 Oct 9, 00:33
• Medium 6.8 Vulnerability in cluster-samples-operator CVE-2026-107176 Oct 8, 06:33
• High 7.1 Vulnerability in oc-mirror CVE-2026-96577 Oct 1, 19:17
• Medium 6.1 Open Redirect in oauth-proxy Vulnerability in oauth-proxy (CVE-2026-83589). Risk of unauthorized operations or information disclosure. CVE-2026-83589 Oct 1, 19:17
• High 7.5 Path Traversal in OpenShift console CVE-2026-75887 Sep 24, 07:16
• Critical 9.3 SSRF (Server-Side Request Forgery) in OpenShift console SSRF in OpenShift console (CVE-2026-75885). Confidential information can be exposed externally. CVE-2026-75885 Sep 19, 07:17
• High 7.5 Vulnerability in openshift/oauth-server CVE-2026-49329 Sep 2, 01:16
• High 7.5 OS Command Injection in dracut CVE-2026-15816 Aug 7, 20:17
• High 7.6 Vulnerability in sg3_utils CVE-2026-16313 Jul 29, 02:16
• High 7.8 Vulnerability in CRI-O CVE-2026-15809 Jul 16, 00:33
• High 8.0 A path traversal flaw was found in SSSD's AD GPO provider. The ad_gpo_extract_smb_components()... Vulnerability reported (CVE-2026-14476). Successful exploitation can lead to full system takeover. CVE-2026-14476 Jul 7, 19:16
• High 8.8 Vulnerability in SSSD's LDAP sudo provider CVE-2026-14474 Jul 7, 19:16
• High 7.5 A double free issue has been identified in libarchive's RAR5 reader. During parsing of a... Vulnerability reported (CVE-2026-14164). Risk of unauthorized operations or information disclosure. CVE-2026-14164 Jun 30, 18:31
• High 7.5 OS Command Injection in dracut CVE-2026-6893 Jun 11, 06:31
• High 7.8 Vulnerability in ansible-core CVE-2026-11332 Jun 5, 18:33
• High 7.7 SSRF (Server-Side Request Forgery) in OpenShift Router SSRF in OpenShift Router (CVE-2026-42965). Confidential information can be exposed externally. CVE-2026-42965 May 29, 21:31
• Critical 9.0 OS Command Injection in Samba CVE-2026-4408 May 28, 18:31
• Medium 6.5 Vulnerability in Samba CVE-2026-2340 May 28, 00:33
• High 7.1 Vulnerability in Samba CVE-2026-1933 May 28, 00:33
• High 8.0 Vulnerability in Samba CVE-2026-3012 May 27, 20:16
• High 8.2 Vulnerability in libgnutls CVE-2026-5260 May 27, 07:16
• High 8.2 Vulnerability in gnutls CVE-2026-42013 May 27, 07:16
• High 7.8 Out-of-Bounds Write in libsolv CVE-2026-48864 May 27, 02:16
• High 7.5 Vulnerability in gnutls CVE-2026-42009 May 18, 22:16
• High 7.4 Vulnerability in gnutls CVE-2026-42011 May 8, 00:16
• High 7.1 Vulnerability in gnutls CVE-2026-42010 May 7, 21:16
• High 7.8 Use-After-Free in java Vulnerability in java (CVE-2025-7425). Data can be tampered with by attackers. Mitigation: upgrade to 1.8.0, 8.0.481 or later. CVE-2025-7425 May 6, 23:45