Red Hat Openshift Container Platform 422

Vulnerabilities related to Red Hat Openshift Container Platform 422 31

• Medium 6.8 The system certificate authority (CA) store in Red Hat products, distributed via ca-certificates... CVE-2026-114406 Oct 22, 05:56
• High 8.8 The insights-runtime-extractor runs as a privileged DaemonSet (`hostPID: true`) that scans... Vulnerability reported (CVE-2026-104795). Successful exploitation can lead to full system takeover. Exploitable via VersionExecutable. CVE-2026-104795 Oct 14, 20:16
• High 7.7 SSRF (Server-Side Request Forgery) in OpenShift console SSRF in OpenShift console (CVE-2026-75888). Confidential information can be exposed externally. CVE-2026-75888 Oct 13, 02:17
• High 7.7 The `insights-operator-gather` ClusterRole grants the operator's service account read access to... Vulnerability reported (CVE-2026-93017). Confidential information can be exposed externally. CVE-2026-93017 Oct 9, 00:33
• Medium 6.8 Vulnerability in cluster-samples-operator CVE-2026-107176 Oct 8, 06:33
• High 7.1 Vulnerability in oc-mirror CVE-2026-96577 Oct 1, 19:17
• Medium 6.1 Open Redirect in oauth-proxy Vulnerability in oauth-proxy (CVE-2026-83589). Risk of unauthorized operations or information disclosure. CVE-2026-83589 Oct 1, 19:17
• High 7.5 Path Traversal in OpenShift console CVE-2026-75887 Sep 24, 07:16
• High 7.5 Vulnerability in rpcbind CVE-2026-94640 Sep 23, 01:18
• Critical 9.3 SSRF (Server-Side Request Forgery) in OpenShift console SSRF in OpenShift console (CVE-2026-75885). Confidential information can be exposed externally. CVE-2026-75885 Sep 19, 07:17
• High 7.5 Vulnerability in openshift/oauth-server CVE-2026-49329 Sep 2, 01:16
• High 7.8 `openvt -u` is intended to identify the owner of the current VT and then execute `login` as that... Vulnerability reported (CVE-2026-72693). Successful exploitation can lead to full system takeover. Exploitable via login. CVE-2026-72693 Aug 11, 18:32
• High 7.5 OS Command Injection in dracut CVE-2026-15816 Aug 7, 20:17
• High 7.3 Use-After-Free in Hardened Images Vulnerability in Hardened Images (CVE-2026-71226). Risk of unauthorized operations or information disclosure. CVE-2026-71226 Aug 5, 22:24
• High 7.6 Vulnerability in sg3_utils CVE-2026-16313 Jul 29, 02:16
• High 7.3 Vulnerability in QEMU Guest Agent CVE-2026-12080 Jul 21, 00:32
• High 7.8 Vulnerability in CRI-O CVE-2026-15809 Jul 16, 00:33
• High 8.0 A path traversal flaw was found in SSSD's AD GPO provider. The ad_gpo_extract_smb_components()... Vulnerability reported (CVE-2026-14476). Successful exploitation can lead to full system takeover. CVE-2026-14476 Jul 7, 19:16
• High 8.8 Vulnerability in SSSD's LDAP sudo provider CVE-2026-14474 Jul 7, 19:16
• Medium 5.9 Path Traversal in GLib CVE-2026-58015 Jul 1, 00:30
• High 7.3 Vulnerability in GLib CVE-2026-58014 Jul 1, 00:30
• High 7.5 A double free issue has been identified in libarchive's RAR5 reader. During parsing of a... Vulnerability reported (CVE-2026-14164). Risk of unauthorized operations or information disclosure. CVE-2026-14164 Jun 30, 18:31
• High 7.8 Vulnerability in cifs-utils package CVE-2026-12505 Jun 18, 15:32
• High 7.7 SSRF (Server-Side Request Forgery) in OpenShift Router SSRF in OpenShift Router (CVE-2026-42965). Confidential information can be exposed externally. CVE-2026-42965 May 29, 21:31
• High 7.1 Vulnerability in Samba CVE-2026-1933 May 28, 00:33
• High 8.2 Vulnerability in libgnutls CVE-2026-5260 May 27, 07:16
• High 8.2 Vulnerability in gnutls CVE-2026-42013 May 27, 07:16
• High 7.1 Vulnerability in gnutls CVE-2026-42012 May 27, 07:16
• High 7.5 Vulnerability in gnutls CVE-2026-42009 May 18, 22:16
• High 7.4 Vulnerability in gnutls CVE-2026-42011 May 8, 00:16