Red Hat Openshift Container Platform 5

Vulnerabilities related to Red Hat Openshift Container Platform 5 167

• Medium 6.2 A flaw was found in libmodulemd. When parsing module metadata, the xmd field is converted into... CVE-2026-92822 Oct 21, 13:18
• Medium 5.1 A flaw was found in device-mapper-multipath. A local user can trigger an out-of-bounds read by... CVE-2026-114038 Oct 21, 10:17
• High 7.4 Vulnerability in bootc and ostree CVE-2026-16460 Oct 19, 16:16
• Medium 5.9 Vulnerability in nfs-utils CVE-2026-89096 Oct 17, 09:31
• Medium 5.3 Vulnerability in libtirpc CVE-2026-85977 Oct 17, 06:32
• Medium 6.5 Vulnerability in libtirpc CVE-2026-85231 Oct 17, 06:32
• Medium 5.5 Vulnerability in nfs-utils CVE-2026-89098 Oct 17, 03:19
• Medium 6.0 Vulnerability in luksmeta CVE-2026-111555 Oct 17, 00:38
• High 7.8 Vulnerability in cifs-utils CVE-2026-104715 Oct 16, 18:30
• High 8.5 Vulnerability in Ansible Operator Plugins CVE-2026-92982 Oct 16, 03:32
• Medium 5.5 Vulnerability in clevis PKCS#11 pin CVE-2026-109968 Oct 15, 00:32
• High 8.8 The insights-runtime-extractor runs as a privileged DaemonSet (`hostPID: true`) that scans... Vulnerability reported (CVE-2026-104795). Successful exploitation can lead to full system takeover. Exploitable via VersionExecutable. CVE-2026-104795 Oct 14, 20:16
• Medium 4.7 Vulnerability in clevis PKCS#11 pin CVE-2026-109971 Oct 14, 19:17
• Medium 4.7 Vulnerability in clevis PKCS#11 pin CVE-2026-109970 Oct 14, 19:17
• Medium 4.7 Vulnerability in clevis PKCS#11 pin CVE-2026-109969 Oct 14, 19:17
• Low 3.3 Vulnerability in device-mapper-persistent-data CVE-2026-110036 Oct 14, 04:18
• Medium 4.7 Out-of-Bounds Write in clevis PKCS#11 pin CVE-2026-109976 Oct 13, 22:17
• High 7.7 SSRF (Server-Side Request Forgery) in OpenShift console SSRF in OpenShift console (CVE-2026-75888). Confidential information can be exposed externally. CVE-2026-75888 Oct 13, 02:17
• Critical 9.3 A path traversal vulnerability was found in gvproxy, the network forwarder provided by the gvisor... Path traversal reported (CVE-2026-107935). Data can be tampered with by attackers. CVE-2026-107935 Oct 9, 19:16
• High 7.7 The `insights-operator-gather` ClusterRole grants the operator's service account read access to... Vulnerability reported (CVE-2026-93017). Confidential information can be exposed externally. CVE-2026-93017 Oct 9, 00:33
• Medium 5.1 Vulnerability in luksmeta CVE-2026-107565 Oct 9, 00:33
• Medium 6.8 Vulnerability in cluster-samples-operator CVE-2026-107176 Oct 8, 06:33
• High 7.5 A heap-based buffer overflow flaw was found in Cyrus SASL. The add_to_challenge() function in the... Vulnerability reported (CVE-2026-107161). Successful exploitation can lead to full system takeover. CVE-2026-107161 Oct 8, 06:33
• Medium 5.5 Vulnerability in sssd-kcm CVE-2026-80048 Oct 7, 09:31
• Medium 6.2 Vulnerability in SSSD CVE-2026-104046 Oct 7, 06:17
• Medium 4.7 Vulnerability in SSSD CVE-2026-104045 Oct 7, 06:17
• Medium 6.8 Vulnerability in SSSD CVE-2026-104048 Oct 7, 05:17
• Medium 5.3 Vulnerability in SSSD CVE-2026-104047 Oct 7, 05:17
• Medium 4.7 Vulnerability in sssd CVE-2026-88252 Oct 7, 03:31
• Medium 6.2 Vulnerability in sssd CVE-2026-104044 Oct 6, 11:17