Vulnerabilidades en RED HAT
2131 resultadosAnálisis Vexday
Red Hat apresenta footprint mínimo na base Vexday com apenas 1 CVE registrado, sem incidentes sob exploração ativa no momento. A vulnerabilidade identificada relaciona-se a deficiências em armazenamento de credenciais (CWE-522), mas não figura entre as críticas e permanece sem atividade recente de ataque.
CVE-2020-1735MEDIUMA flaw was found in the Ansible Engine when the fetch module is used. An attacker could intercept the module, inject a new path, and then chEPSS 0.5%CVE-2026-9795HIGHKeycloak: keycloak: privilege escalation via improper scope mapping enforcementEPSS 0.5%CVE-2026-18047MEDIUMDogtag-pki: pki-core: redhat-pki: pki: acme admin enable/disable endpoint authentication bypass via trailing slashEPSS 0.5%CVE-2024-3508MEDIUMBzip2: compressed content bomb leads to denial of service of bombastic apiEPSS 0.5%CVE-2026-59087HIGHGimp: heap buffer overflow in `file-seattle-filmworks` load — `fread` writes attacker-controlled length into undersized allocationEPSS 0.5%CVE-2026-9798MEDIUMKeycloak: keycloak: brute-force protection bypass in ciba flowEPSS 0.5%CVE-2024-1753HIGHBuildah: buildah: container escape via improper bind mount validationEPSS 0.5%CVE-2023-38201MEDIUMKeylime: challenge-response protocol bypass during agent registrationEPSS 0.5%CVE-2026-9099HIGHKeycloak: group-admin escalation to realm-adminEPSS 0.5%CVE-2026-59851HIGHLibssh: libssh: authentication bypass via missing gssapi principal checkEPSS 0.5%CVE-2026-94449HIGHQuarkus-smallrye-fault-tolerance: quarkus-smallrye-fault-tolerance: memory leak in @applyguard leads to denial of serviceEPSS 0.5%CVE-2026-66795CRITICALManagedcluster-import-controller: csr auto-approver does not validate certificate subject or signername (spoke→hub cluster-admin)EPSS 0.5%CVE-2026-42012HIGHGnutls: gnutls: certificate validation bypass due to improper handling of uri and srv sansEPSS 0.5%CVE-2025-2241HIGHHive: exposure of vcenter credentials via clusterprovision in hive / mce / acmEPSS 0.5%CVE-2026-14940MEDIUM389-ds-base: 389-ds-base: heap-buffer-overflow in dn normalization via quoted multivalued rdnEPSS 0.5%CVE-2025-10990HIGHRexml: rexml: denial of service via inefficient regex parsingEPSS 0.5%CVE-2026-4629MEDIUMKeycloak: keycloak: privilege escalation through hardcoded role mapper injectionEPSS 0.5%CVE-2024-4418MEDIUMLibvirt: stack use-after-free in virnetclientioeventloop()EPSS 0.5%CVE-2026-81303MEDIUMHawtio-operator: hawtio-operator: routes/custom-host confused-deputy via spec.routehostnameEPSS 0.5%CVE-2026-28296MEDIUMGvfs: ftp gvfs backend: arbitrary ftp command injection via crlf sequences in file pathsEPSS 0.5%