CYBERSECURITYTRACKER
Vulnerabilities

March 2026 vulnerabilities

Browse this month's returned vendor patches and exploitation signals, with filtering and stable pages for browsing without JavaScript.

Microsoft reports 0 vulnerabilities with exploitation detected in the wild this month. This defender-focused view covers 1,070 vulnerabilities across 3,315 returned patch records from 4 vendors. Filter the complete month, or browse the static page trail without JavaScript.

3,315all patch recordsClear filters79criticalShow these records0Microsoft exploitation detectedShow these records2Microsoft in the Known Exploited Vulnerabilities catalogShow these records2,459tracked hereShow these records
Patch records
Returned Microsoft and cross-vendor release records. One Common Vulnerabilities and Exposures (CVE) identifier can appear in more than one record.
Tracked here
Records joined to a vulnerability record in this tracker.
Defender priority
Sorts Microsoft exploitation status, Cybersecurity and Infrastructure Security Agency (CISA) Known Exploited Vulnerabilities (KEV) catalog status, severity, and tracker coverage first.
More likely
Microsoft's Exploitability Index rating that exploitation is more likely. It is not a claim that exploitation was detected.

Narrow the complete month

Filters use every patch record in this month, including records on later static pages.

Clear all

My Stack only keeps records whose vendor you have pinned. Pins are the vendors you added to My Stack on the home page. Your pin list is saved only in this browser. Shared view and feed requests include the selected vendor names in their URLs. Pins never change what the tracker collects or scores.

Microsoft-only signal filters exclude records without Microsoft signal data as unknown, report them separately, and never count them as absent. “Tracked here” covers both Microsoft and cross-vendor records.

Loading the complete-month filter index…

An Exploit Prediction Scoring System (EPSS) percentage is the global 30-day exploitation probability in the wild, not specific to you. Do not read it as a complete risk score or as evidence about your environment or impact.

Page 1 of 17 · records 1 to 200 of 3,315

Microsoft Security Response Center

CVEDateProductMSRC severityOut-of-bandEPSSTitle
CVE-2026-3909 ↗Microsoft Edge (Chromium-based)N/AOut-of-band2%Microsoft rating unavailableCISA KEVVulnCheckENISA1 mentionsChromium: CVE-2026-3909 Out of bounds write in Skia
CVE-2026-3910 ↗Microsoft Edge (Chromium-based)N/AOut-of-band3%Microsoft rating unavailableCISA KEVVulnCheckENISA1 mentionsChromium: CVE-2026-3910 Inappropriate implementation in V8
CVE-2026-4177 ↗azl3 perl-YAML 1.30-2 on Azure Linux 3.0CriticalOut-of-band<1%Microsoft rating unavailableYAML::Syck versions through 1.36 for Perl has several potential security vulnerabilities including a high-severity heap buffer overflow in the YAML emitter
CVE-2026-4739 ↗cbl2 cmake 3.21.4-23 on CBL Mariner 2.0CriticalOut-of-band<1%Microsoft rating unavailableInteger overflow vulnerabilities in InsightSoftwareConsortium/ITK
CVE-2026-4176 ↗cbl2 boost 1.76.0-4 on CBL Mariner 2.0CriticalOut-of-band1%Microsoft rating unavailablePerl versions from 5.9.4 before 5.40.4-RC1, from 5.41.0 before 5.42.2-RC1, from 5.43.0 before 5.43.9 contain a vulnerable version of Compress::Raw::Zlib
CVE-2026-33937 ↗cbl2 reaper 3.1.1-22 on CBL Mariner 2.0CriticalOut-of-band2%Microsoft rating unavailableHandlebars.js has JavaScript Injection via AST Type Confusion
CVE-2026-4746 ↗cbl2 cloud-hypervisor 32.0-7 on CBL Mariner 2.0CriticalOut-of-band<1%Microsoft rating unavailableHeap Buffer Over-Write Vulenrabilty in timeplus-io/proton
CVE-2026-23395 ↗cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0CriticalOut-of-band<1%Microsoft rating unavailableBluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ
CVE-2025-69720 ↗azl3 ncurses 6.4-2 on Azure Linux 3.0CriticalOut-of-band<1%Microsoft rating unavailableThe infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.
CVE-2026-23658 ↗Azure DevOps: msazureCriticalOut-of-band1%Microsoft rates: N/AAzure DevOps: msazure Elevation of Privilege Vulnerability
CVE-2026-23659 ↗Azure Data FactoryCriticalOut-of-band1%Microsoft rates: N/AAzure Data Factory Information Disclosure Vulnerability
CVE-2026-24299 ↗Microsoft 365 CopilotCriticalOut-of-band1%Microsoft rates: N/AM365 Copilot Information Disclosure Vulnerability
CVE-2026-26120 ↗Microsoft BingCriticalOut-of-band1%Microsoft rates: N/AMicrosoft Bing Tampering Vulnerability
CVE-2026-26136 ↗Microsoft CopilotCriticalOut-of-band1%Microsoft rating unavailableMicrosoft Copilot Information Disclosure Vulnerability
CVE-2026-26137 ↗Microsoft Exchange OnlineCriticalOut-of-band1%Microsoft rates: N/AMicrosoft Exchange Elevation of Privilege Vulnerability
CVE-2026-26138 ↗Microsoft PurviewCriticalOut-of-band1%Microsoft rates: N/AMicrosoft Purview Elevation of Privilege Vulnerability
CVE-2026-26139 ↗Microsoft PurviewCriticalOut-of-band1%Microsoft rates: N/AMicrosoft Purview Elevation of Privilege Vulnerability
CVE-2026-32169 ↗Azure Cloud ShellCriticalOut-of-band1%Microsoft rates: N/AAzure Cloud Shell Elevation of Privilege Vulnerability
CVE-2026-32191 ↗Microsoft Bing ImagesCriticalOut-of-band1%Microsoft rates: N/AMicrosoft Bing Images Remote Code Execution Vulnerability
CVE-2026-32194 ↗Microsoft Bing ImagesCriticalOut-of-band1%Microsoft rates: N/A1 mentionsMicrosoft Bing Images Remote Code Execution Vulnerability
CVE-2026-26110 ↗Microsoft Office 2019 for 32-bit editionsCritical1%Microsoft rates: Exploitation Less LikelyKB50028381 mentionsMicrosoft Office Remote Code Execution Vulnerability
CVE-2026-26113 ↗Microsoft SharePoint Enterprise Server 2016Critical1%Microsoft rates: Exploitation Less LikelyKB5002843KB5002845
and 4 moreKB5002847KB5002848KB5002850KB5002851
1 mentionsMicrosoft Office Remote Code Execution Vulnerability
CVE-2026-26144 ↗Microsoft 365 Apps for Enterprise for 64-bit SystemsCritical1%Microsoft rates: Exploitation Unlikely1 mentionsMicrosoft Excel Information Disclosure Vulnerability
CVE-2026-3381 ↗cbl2 cloud-hypervisor 32.0-7 on CBL Mariner 2.0CriticalOut-of-band1%Microsoft rating unavailableCompress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib
CVE-2026-21536 ↗Microsoft Devices Pricing ProgramCriticalOut-of-band2%Microsoft rates: Exploitation UnlikelyMicrosoft Devices Pricing Program Remote Code Execution Vulnerability
CVE-2026-23651 ↗Microsoft ACI Confidential ContainersCriticalOut-of-band1%Microsoft rates: Exploitation Less LikelyMicrosoft ACI Confidential Containers Elevation of Privilege Vulnerability
CVE-2026-26122 ↗Microsoft ACI Confidential ContainersCriticalOut-of-band1%Microsoft rates: Exploitation Less LikelyMicrosoft ACI Confidential Containers Information Disclosure Vulnerability
CVE-2026-26124 ↗Microsoft ACI Confidential ContainersCriticalOut-of-band<1%Microsoft rates: Exploitation Less LikelyMicrosoft ACI Confidential Containers Elevation of Privilege Vulnerability
CVE-2026-26125 ↗Payment Orchestrator ServiceCriticalOut-of-band1%Microsoft rates: N/APayment Orchestrator Service Elevation of Privilege Vulnerability
CVE-2026-32597 ↗azl3 python-jwt 2.8.0-2 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailablePyJWT accepts unknown `crit` header extensions (RFC 7515 §4.1.11 MUST violation)
CVE-2026-31788 ↗cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0ImportantOut-of-band<1%Microsoft rating unavailablexen/privcmd: restrict usage in unprivileged domU
CVE-2025-70873 ↗azl3 sqlite 3.44.0-2 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailableAn information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to obtain heap memory via supplying a crafted ZIP file.
CVE-2026-32287 ↗cbl2 telegraf 1.29.4-22 on CBL Mariner 2.0ImportantOut-of-band1%Microsoft rating unavailableInfinite loop in github.com/antchfx/xpath
CVE-2026-29785 ↗cbl2 telegraf 1.29.4-22 on CBL Mariner 2.0ImportantOut-of-band1%Microsoft rating unavailableNATS Server panic via malicious compression on leafnode port
CVE-2026-33216 ↗cbl2 telegraf 1.29.4-22 on CBL Mariner 2.0ImportantOut-of-band<1%Microsoft rating unavailableNATS has MQTT plaintext password disclosure
CVE-2026-4732 ↗azl3 libsndfile 1.2.2-4 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailableOut-of-bounds Read Overflow in tildearrow/furnace
CVE-2026-5121 ↗cbl2 libarchive 3.6.1-9 on CBL Mariner 2.0ImportantOut-of-band1%Microsoft rating unavailableLibarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing
CVE-2026-5201 ↗cbl2 gdk-pixbuf2 2.40.0-8 on CBL Mariner 2.0ImportantOut-of-band1%Microsoft rating unavailableGdk-pixbuf: gdk-pixbuf: denial of service via heap-based buffer overflow when processing a specially crafted jpeg image
CVE-2026-33554 ↗cbl2 freeipmi 1.6.6-3 on CBL Mariner 2.0ImportantOut-of-band<1%Microsoft rating unavailableipmi-oem in FreeIPMI before 1.16.17 has exploitable buffer overflows on response messages. The Intelligent Platform Management Interface (IPMI) specification defines a set of interfaces for platform management. It is implemented by a large number of hardware manufacturers to support system management. It is most commonly used for sensor reading (e.g., CPU temperatures through the ipmi-sensors command within FreeIPMI) and remote power control (the ipmipower command). The ipmi-oem client command implements a set of a IPMI OEM commands for specific hardware vendors. If a user has supported hardware, they may wish to use the ipmi-oem command to send a request to a server to retrieve specific information. Three subcommands were found to have exploitable buffer overflows on response messages. They are: "ipmi-oem dell get-last-post-code - get the last POST code and string describing the error on some Dell servers," "ipmi-oem supermicro extra-firmware-info - get extra firmware info on Supermic
CVE-2026-4046 ↗cbl2 glibc 2.35-10 on CBL Mariner 2.0ImportantOut-of-band<1%Microsoft rating unavailableiconv crash due to assertion failure with untrusted input
CVE-2026-21710 ↗cbl2 nodejs18 18.20.3-12ImportantOut-of-band25%Microsoft rating unavailableA flaw in Node.js HTTP request handling causes an uncaught `TypeError` when a request is received with a header named `__proto__` and the application accesses `req.headersDistinct`. When this occurs, `dest["__proto__"]` resolves to `Object.prototype` rather than `undefined`, causing `.push()` to be called on a non-array. This exception is thrown synchronously inside a property getter and cannot be intercepted by `error` event listeners, meaning it cannot be handled without wrapping every `req.headersDistinct` access in a `try/catch`. * This vulnerability affects all Node.js HTTP servers on **20.x, 22.x, 24.x, and v25.x**
CVE-2026-34714 ↗cbl2 vim 9.2.0240-1 on CBL Mariner 2.0ImportantOut-of-band1%Microsoft rating unavailableVim before 9.2.0272 allows code execution that happens immediately upon opening a crafted file in the default configuration, because %{expr} injection occurs with tabpanel lacking P_MLE.
CVE-2026-33940 ↗cbl2 reaper 3.1.1-22 on CBL Mariner 2.0ImportantOut-of-band1%Microsoft rating unavailableHandlebars.js has JavaScript Injection via AST Type Confusion when passing an object as dynamic partial
CVE-2026-33939 ↗cbl2 reaper 3.1.1-22 on CBL Mariner 2.0ImportantOut-of-band1%Microsoft rating unavailableHandlebars.js has Denial of Service via Malformed Decorator Syntax in Template Compilation
CVE-2026-33941 ↗cbl2 reaper 3.1.1-22 on CBL Mariner 2.0ImportantOut-of-band<1%Microsoft rating unavailableHandlebars.js has JavaScript Injection in CLI Precompiler via Unescaped Names and Options
CVE-2026-33938 ↗cbl2 reaper 3.1.1-22 on CBL Mariner 2.0ImportantOut-of-band1%Microsoft rating unavailableHandlebars.js has JavaScript Injection via AST Type Confusion by tampering @partial-block
CVE-2026-33891 ↗cbl2 reaper 3.1.1-22 on CBL Mariner 2.0ImportantOut-of-band1%Microsoft rating unavailableForge has Denial of Service via Infinite Loop in BigInteger.modInverse() with Zero Input
CVE-2026-33896 ↗azl3 python-tensorboard 2.16.2-6 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailableForge has a basicConstraints bypass in its certificate chain verification (RFC 5280 violation)
CVE-2026-33895 ↗azl3 python-tensorboard 2.16.2-6 on Azure Linux 3.0ImportantOut-of-band1%Microsoft rating unavailableForge has signature forgery in Ed25519 due to missing S > L check

Cross-vendor patches

VendorCVESeverityProductFixed versionPatchAdvisory
Red HatCVE-2026-1615trackedCVSS 9.8Red Hat Ansible Automation Platform 2.5registry.redhat.io/ansible-automation-platform-25/lightspeed-rhel8@sha256:0682e9e4bc9ad2b2b564fa2fa8b022e46729b27e26ec7b14ed2f1fae3e52a0d1_s390xPatch ↗Advisory ↗
Red HatCVE-2026-1615trackedCVSS 9.8Red Hat Ansible Automation Platform 2.6registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9@sha256:293b2d26b9a82fa6a55dafb4c594287838cae765c358f3bdfea5b89d83f0391e_s390xPatch ↗Advisory ↗
Red HatCVE-2026-28498trackedCVSS 9.1Red Hat Ansible Automation Platform 2.6registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:111c3fa869282760a7408db240e5fbddd74816fa5ffc12578c267427eae8eb96_ppc64lePatch ↗Advisory ↗
Red HatCVE-2026-28802trackedCVSS 9.1Red Hat Ansible Automation Platform 2.6registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:111c3fa869282760a7408db240e5fbddd74816fa5ffc12578c267427eae8eb96_ppc64lePatch ↗Advisory ↗
Red HatCVE-2024-3884trackedCritical (Red Hat rating)Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 Servereap7-undertow-0:2.0.41-7.SP8_redhat_00001.1.el7eap.noarchPatch ↗Advisory ↗
Red HatCVE-2026-24046trackedCVSS 9.1Red Hat Developer Hub 1.8registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:2e8ed97c6e6d232f66bb81dc074b8bb2712dc54004cc565fcb1d2b43a9bb2046_amd64Patch ↗Advisory ↗
Red HatCVE-2026-27606trackedCVSS 9.1Red Hat Developer Hub 1.8registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:2e8ed97c6e6d232f66bb81dc074b8bb2712dc54004cc565fcb1d2b43a9bb2046_amd64Patch ↗Advisory ↗
Red HatCVE-2026-33186trackedCVSS 9.1Red Hat Developer Hub 1.8registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:72d72d0e8b67012bfaaeae0e1fbbcf8e35c74d4d6252051eabef3e9dd979d48e_amd64Patch ↗Advisory ↗
Red HatCVE-2026-33211trackedCVSS 9.6Red Hat OpenShift Pipelines 1.21registry.redhat.io/openshift-pipelines/pipelines-resolvers-rhel9@sha256:0eeefa13b3b9d1a03e25ec2e3e413bcd3d6d321a6acca853d6201f8943a62894_s390xPatch ↗Advisory ↗
Red HatCVE-2026-33211trackedCVSS 9.6Red Hat OpenShift Pipelines 1.21registry.redhat.io/openshift-pipelines/pipelines-operator-bundle@sha256:6585794d76cffb3f87fc7eacb905f0dd5f02476f717c911f2c0faf7c4081a080_amd64Patch ↗Advisory ↗
Red HatCVE-2026-22797trackedCVSS 9.9Red Hat OpenShift Container Platform 4.18registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:5790d9114681ad940a65723e23bed39b2f5eac1dbde017f368861222058064e8_arm64Patch ↗Advisory ↗
Red HatCVE-2026-27606trackedCVSS 9.1Red Hat Trusted Artifact Signer 1.3registry.redhat.io/rhtas/rhtas-console-ui-rhel9@sha256:d23bf73126fb5c18ff24369bb05c7adb03e9f3fefdbb49795b8aeb3d7c223cdb_amd64Patch ↗Advisory ↗
Red HatCVE-2026-27606trackedCVSS 9.1Red Hat Quay 3.1registry.redhat.io/quay/quay-rhel8@sha256:6e13793ca8f309ec0b69ae609b840ff0f41989d88cd4bba127e1b0040631367e_ppc64lePatch ↗Advisory ↗
Red HatCVE-2026-27962trackedCVSS 9.1Red Hat Quay 3.1registry.redhat.io/quay/quay-rhel8@sha256:6e13793ca8f309ec0b69ae609b840ff0f41989d88cd4bba127e1b0040631367e_ppc64lePatch ↗Advisory ↗
Red HatCVE-2026-28802trackedCVSS 9.1Red Hat Quay 3.1registry.redhat.io/quay/quay-rhel8@sha256:6e13793ca8f309ec0b69ae609b840ff0f41989d88cd4bba127e1b0040631367e_ppc64lePatch ↗Advisory ↗
Red HatCVE-2025-15467trackedCVSS 9.8Red Hat OpenShift Container Platform 4.15rhcos-aarch64-415.92.202603101737-0Patch ↗Advisory ↗
Red HatCVE-2026-27606trackedCVSS 9.1Red Hat OpenShift Service Mesh 2.6registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:5a8a46e92a178be088251e0dcb67612d16bafeee910af6bd55de82a4727daa02_amd64Patch ↗Advisory ↗
Red HatCVE-2026-28802trackedCVSS 9.1Red Hat Quay 3.9registry.redhat.io/quay/quay-rhel8@sha256:3e5ce0a56241c9804249dfb302cde02d2ffe30ba8fcd8aef8f1bce916d2324ad_ppc64lePatch ↗Advisory ↗
Red HatCVE-2025-12543trackedCVSS 9.6Red Hat JBoss EAP 7.4 ELS for RHEL 7 Servereap7-undertow-0:2.2.39-1.Final_redhat_00001.1.el7eap.noarchPatch ↗Advisory ↗
Red HatCVE-2025-12543trackedCVSS 9.6Red Hat JBoss EAP 7.4 ELS for RHEL 8eap7-undertow-0:2.2.39-1.Final_redhat_00001.1.el8eap.noarchPatch ↗Advisory ↗
Red HatCVE-2025-12543trackedCVSS 9.6Red Hat JBoss EAP 7.4 ELS for RHEL 9eap7-undertow-0:2.2.39-1.Final_redhat_00001.1.el9eap.noarchPatch ↗Advisory ↗
Red HatCVE-2025-12543trackedCVSS 9.6Red Hat JBoss Enterprise Application Platform 7.4.24io.undertow.undertow-core-2.2.39.Final-redhat-00001.jarPatch ↗Advisory ↗
Red HatCVE-2025-15467trackedCVSS 9.8Red Hat Update Infrastructure 5registry.redhat.io/rhui5/cds-rhel9@sha256:200c27e9b396276bd505c6b41127ac5eb1d94d620172cb818ae733f2a21ac524_amd64Patch ↗Advisory ↗
Red HatCVE-2026-22797trackedCVSS 9.9Red Hat OpenShift Container Platform 4.19registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:64f69dda395c7912c23def5367853f2f34ad32581a76785202d864ae99c56219_arm64Patch ↗Advisory ↗
Red HatCVE-2026-28802trackedCVSS 9.1Red Hat Quay 3.12registry.redhat.io/quay/quay-rhel8@sha256:2f62df99c2b7697461a2865380344c90a6fb8aec7b279f8f2f6e0684b662d19f_amd64Patch ↗Advisory ↗
Red HatCVE-2026-22797trackedCVSS 9.9Red Hat OpenShift Container Platform 4.20registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:7e57a906f55fdc4522dd130c76942999c5c28f469579dcdda2e78949a860b8f8_arm64Patch ↗Advisory ↗
Red HatCVE-2026-27446trackedCVSS 9.1Red Hat AMQ Broker 7.13.4Not reportedPatch ↗Advisory ↗
Red HatCVE-2025-12543trackedCVSS 9.6Red Hat JBoss EAP 8.0 for RHEL 8eap8-bouncycastle-0:1.83.0-1.redhat_00001.1.el8eap.noarchPatch ↗Advisory ↗
Red HatCVE-2025-12543trackedCVSS 9.6Red Hat build of Apache Camel 4.14.4 for Spring Boot 3.5.11Not reportedPatch ↗Advisory ↗
Red HatCVE-2025-12543trackedCVSS 9.6Red Hat JBoss EAP 8.0 for RHEL 9eap8-bouncycastle-0:1.83.0-1.redhat_00001.1.el9eap.noarchPatch ↗Advisory ↗
Red HatCVE-2025-12543trackedCVSS 9.6Red Hat JBoss Enterprise Application Platform 8.0Not reportedPatch ↗Advisory ↗
Red HatCVE-2025-15467trackedCVSS 9.8Red Hat OpenShift Container Platform 4.13rhcos-x86_64-413.92.202602240113-0Patch ↗Advisory ↗
AndroidCVE-2026-0028trackedCritical (Android rating):linux_kernel:Not reportedPatch ↗Advisory ↗
AndroidCVE-2026-0030trackedCritical (Android rating):linux_kernel:Not reportedPatch ↗Advisory ↗
AndroidCVE-2026-0031trackedCritical (Android rating):linux_kernel:Not reportedPatch ↗Advisory ↗
AndroidCVE-2026-0037trackedCritical (Android rating):linux_kernel:Not reportedPatch ↗Advisory ↗
AndroidCVE-2026-0038trackedCritical (Android rating):linux_kernel:Not reportedPatch ↗Advisory ↗
AndroidCVE-2026-0114trackedCritical (Android rating)Not reportedNot reportedno patch linkAdvisory ↗
AndroidCVE-2026-0120trackedCritical (Android rating)Not reportedNot reportedno patch linkAdvisory ↗
AndroidCVE-2026-0122trackedCritical (Android rating)Not reportedNot reportedno patch linkAdvisory ↗
AndroidCVE-2026-0124trackedCritical (Android rating)Not reportedNot reportedno patch linkAdvisory ↗
Red HatCVE-2026-27446trackedCVSS 9.1Red Hat AMQ Broker 7.12.6Not reportedPatch ↗Advisory ↗
CiscoCVE-2026-20079trackedCVSS 10.0Cisco Secure Firewall Management Center (FMC) Appliances7.0Patch ↗Advisory ↗
CiscoCVE-2026-20131trackedCVSS 10.0Cisco Secure Firewall Management Center (FMC) Appliances7.0Patch ↗Advisory ↗
Red HatCVE-2026-22778trackedCVSS 9.8Red Hat OpenShift AI 3.3registry.redhat.io/rhoai/odh-vllm-gaudi-rhel9@sha256:30dd95f0c900b81b80e435796d82dd556814dd6d46c6b43b7dd879bcfdb8420e_amd64Patch ↗Advisory ↗
Red HatCVE-2026-22778trackedCVSS 9.8Red Hat OpenShift AI 2.25registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:10ea60405654199ff5d09b50fc8b83f6d9bb9dda8057e18441dead800b8fa974_ppc64lePatch ↗Advisory ↗
Red HatCVE-2026-22797trackedCVSS 9.9Red Hat OpenShift Container Platform 4.21registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:1d1766c76d70f3378b45f9065e5576251f3fee3d56ee379a9c55af86e1e70c44_arm64Patch ↗Advisory ↗
AndroidCVE-2025-48631trackedCritical (Android rating)platform/frameworks/baseNot reportedPatch ↗Advisory ↗
AndroidCVE-2026-0006trackedCritical (Android rating)platform/external/libopenapvNot reportedPatch ↗Advisory ↗
AndroidCVE-2026-0047trackedCritical (Android rating)platform/frameworks/baseNot reportedPatch ↗Advisory ↗
AndroidCVE-2024-43859Critical (Android rating):linux_kernel:Not reportedPatch ↗Advisory ↗
AndroidCVE-2026-0027Critical (Android rating):linux_kernel:Not reportedPatch ↗Advisory ↗
Red HatCVE-2025-14905trackedCVSS 7.2Red Hat Enterprise Linux Server (v. 7 ELS)389-ds-base-0:1.3.11.1-11.el7_9.ppc64lePatch ↗Advisory ↗
Red HatCVE-2025-14905trackedCVSS 7.2Red Hat Enterprise Linux AppStream AUS (v.8.4)389-ds-base-0:1.4.3.34-3.module+el8.4.0+24054+665bc8dc.src::389-ds:1.4Patch ↗Advisory ↗
Red HatCVE-2025-47907trackedCVSS 7.0Red Hat multicluster global hub 1.6.0registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:4736201438be34ef50de48b9a3d66db5afc5e5831f43c03b0997868601f6a9df_ppc64lePatch ↗Advisory ↗
Red HatCVE-2025-59343trackedCVSS 7.5Red Hat multicluster global hub 1.6.0registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:035d205705b2efd62713bea9d05cffdc5db7a437f050c4a3e3f12746b05c29d4_arm64Patch ↗Advisory ↗
Red HatCVE-2025-61726trackedCVSS 7.5Red Hat multicluster global hub 1.6.0registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:4736201438be34ef50de48b9a3d66db5afc5e5831f43c03b0997868601f6a9df_ppc64lePatch ↗Advisory ↗
Red HatCVE-2025-61726trackedCVSS 7.5OpenShift API for Data Protection 1.4registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:713a90e0460a0739f6a173413b7b4a4f007b9dc385a13d473eb90f42fc8488dc_amd64Patch ↗Advisory ↗
Red HatCVE-2025-61726trackedCVSS 7.5Red Hat Ansible Automation Platform 2.6 for RHEL 9automation-gateway-proxy-0:2.6.14-1.el9.aarch64Patch ↗Advisory ↗
Red HatCVE-2025-61726trackedCVSS 7.5Red Hat Ansible Automation Platform 2.5 for RHEL 8automation-gateway-proxy-0:2.5.10-4.el8ap.aarch64Patch ↗Advisory ↗
Red HatCVE-2025-61729trackedCVSS 7.5Red Hat multicluster global hub 1.6.0registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:4736201438be34ef50de48b9a3d66db5afc5e5831f43c03b0997868601f6a9df_ppc64lePatch ↗Advisory ↗
Red HatCVE-2025-66418trackedCVSS 7.5Red Hat Satellite 6.18registry.redhat.io/satellite/iop-insights-engine-rhel9@sha256:79b070bb3101ac3fd8c9b7d0ba9425dccf9f9e76cb9430373d0c963edc0a52bb_amd64Patch ↗Advisory ↗
Red HatCVE-2025-66471trackedCVSS 7.5Red Hat Satellite 6.18registry.redhat.io/satellite/iop-insights-engine-rhel9@sha256:79b070bb3101ac3fd8c9b7d0ba9425dccf9f9e76cb9430373d0c963edc0a52bb_amd64Patch ↗Advisory ↗
Red HatCVE-2025-69223trackedCVSS 7.5Red Hat Ansible Automation Platform 2.5registry.redhat.io/ansible-automation-platform-25/lightspeed-chatbot-rhel8@sha256:2f9ec28f18893b516b9dadcce88a8efaa908e916305f7b802f250c2283c37cb5_ppc64lePatch ↗Advisory ↗
Red HatCVE-2025-69223trackedCVSS 7.5Red Hat Ansible Automation Platform 2.6registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:111c3fa869282760a7408db240e5fbddd74816fa5ffc12578c267427eae8eb96_ppc64lePatch ↗Advisory ↗
Red HatCVE-2026-1207trackedCVSS 8.3Red Hat Satellite 6.18registry.redhat.io/satellite/iop-advisor-backend-rhel9@sha256:563d17f7250c9a5ccb9f7213332b0a8e0b876e8e4e9814a7f397e51972c60a2c_amd64Patch ↗Advisory ↗
Red HatCVE-2026-1287trackedCVSS 8.3Red Hat Satellite 6.18registry.redhat.io/satellite/iop-advisor-backend-rhel9@sha256:563d17f7250c9a5ccb9f7213332b0a8e0b876e8e4e9814a7f397e51972c60a2c_amd64Patch ↗Advisory ↗
Red HatCVE-2026-21441trackedCVSS 7.5Red Hat Satellite 6.18registry.redhat.io/satellite/iop-advisor-frontend-rhel9@sha256:b16098ff4d22e3fc7cad21e8fe6988c8f38ef080e04df342deb1e2896b538f5d_amd64Patch ↗Advisory ↗
Red HatCVE-2026-21441trackedCVSS 7.5Red Hat Satellite 6.18registry.redhat.io/satellite/iop-insights-engine-rhel9@sha256:79b070bb3101ac3fd8c9b7d0ba9425dccf9f9e76cb9430373d0c963edc0a52bb_amd64Patch ↗Advisory ↗
Red HatCVE-2026-25639trackedCVSS 7.5Red Hat Ansible Automation Platform 2.6 for RHEL 9automation-platform-ui-0:2.6.7-1.el9ap.noarchPatch ↗Advisory ↗
Red HatCVE-2026-25639trackedCVSS 7.5Red Hat Ansible Automation Platform 2.5registry.redhat.io/ansible-automation-platform-25/lightspeed-rhel8@sha256:0682e9e4bc9ad2b2b564fa2fa8b022e46729b27e26ec7b14ed2f1fae3e52a0d1_s390xPatch ↗Advisory ↗
Red HatCVE-2026-25639trackedCVSS 7.5Red Hat Ansible Automation Platform 2.6registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:01fd1e73fd125672778315487a4aa0ae13b7aac2b386d70facd7439d23ee0219_amd64Patch ↗Advisory ↗
Red HatCVE-2026-25990trackedCVSS 7.3Red Hat Ansible Automation Platform 2.6 for RHEL 9python3.12-pillow-0:12.1.1-1.el9ap.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-25990trackedCVSS 7.3Red Hat Ansible Automation Platform 2.5 for RHEL 8python3.12-pillow-0:12.1.1-1.el8ap.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-25990trackedCVSS 7.3Red Hat Ansible Automation Platform 2.5registry.redhat.io/ansible-automation-platform-25/lightspeed-chatbot-rhel8@sha256:2f9ec28f18893b516b9dadcce88a8efaa908e916305f7b802f250c2283c37cb5_ppc64lePatch ↗Advisory ↗
Red HatCVE-2026-25990trackedCVSS 7.3Red Hat Ansible Automation Platform 2.6registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:111c3fa869282760a7408db240e5fbddd74816fa5ffc12578c267427eae8eb96_ppc64lePatch ↗Advisory ↗
Red HatCVE-2026-26007trackedCVSS 7.4Red Hat Ansible Automation Platform 2.5registry.redhat.io/ansible-automation-platform-25/lightspeed-chatbot-rhel8@sha256:2f9ec28f18893b516b9dadcce88a8efaa908e916305f7b802f250c2283c37cb5_ppc64lePatch ↗Advisory ↗
Red HatCVE-2026-26007trackedCVSS 7.4Red Hat Ansible Automation Platform 2.6registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:5fa148a59fbc353c61b41544f5947ea654625ea5343a97ab84193c314e72c4b5_s390xPatch ↗Advisory ↗
Red HatCVE-2026-29074trackedCVSS 7.5Red Hat Ansible Automation Platform 2.6 for RHEL 9automation-platform-ui-0:2.6.7-1.el9ap.noarchPatch ↗Advisory ↗
Red HatCVE-2026-29074trackedCVSS 7.5Red Hat Ansible Automation Platform 2.6registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:01fd1e73fd125672778315487a4aa0ae13b7aac2b386d70facd7439d23ee0219_amd64Patch ↗Advisory ↗
Red HatCVE-2026-2920trackedCVSS 7.8Red Hat Enterprise Linux AppStream (v. 10)gstreamer1-plugins-bad-free-0:1.24.11-3.el10_1.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-2920trackedCVSS 7.8Red Hat Enterprise Linux AppStream (v. 9)gstreamer1-plugins-bad-free-0:1.22.12-5.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-2921trackedCVSS 7.8Red Hat Enterprise Linux AppStream (v. 10)gstreamer1-plugins-bad-free-0:1.24.11-3.el10_1.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-2921trackedCVSS 7.8Red Hat Enterprise Linux AppStream (v. 9)gstreamer1-plugins-bad-free-0:1.22.12-5.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-2922trackedCVSS 7.8Red Hat Enterprise Linux AppStream (v. 10)gstreamer1-plugins-bad-free-0:1.24.11-3.el10_1.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-2922trackedCVSS 7.8Red Hat Enterprise Linux AppStream (v. 9)gstreamer1-plugins-bad-free-0:1.22.12-5.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-2923trackedCVSS 7.8Red Hat Enterprise Linux AppStream (v. 10)gstreamer1-plugins-bad-free-0:1.24.11-3.el10_1.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-2923trackedCVSS 7.8Red Hat Enterprise Linux AppStream (v. 9)gstreamer1-plugins-bad-free-0:1.22.12-5.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-3082trackedCVSS 7.8Red Hat Enterprise Linux AppStream (v. 10)gstreamer1-plugins-bad-free-0:1.24.11-3.el10_1.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-3082trackedCVSS 7.8Red Hat Enterprise Linux AppStream (v. 9)gstreamer1-plugins-bad-free-0:1.22.12-5.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-30827trackedCVSS 7.5Red Hat Ansible Automation Platform 2.6registry.redhat.io/ansible-automation-platform-tech-preview/mcp-server-rhel9@sha256:2a6bb1683b692eb0ae3afbd09d13626e044e4bc23c139a3c5ec8311db7c28c8a_ppc64lePatch ↗Advisory ↗
Red HatCVE-2026-3083trackedCVSS 8.8Red Hat Enterprise Linux AppStream (v. 10)gstreamer1-plugins-bad-free-0:1.24.11-3.el10_1.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-3083trackedCVSS 8.8Red Hat Enterprise Linux AppStream (v. 9)gstreamer1-plugins-bad-free-0:1.22.12-5.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-3085trackedCVSS 8.8Red Hat Enterprise Linux AppStream (v. 10)gstreamer1-plugins-bad-free-0:1.24.11-3.el10_1.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-3085trackedCVSS 8.8Red Hat Enterprise Linux AppStream (v. 9)gstreamer1-plugins-bad-free-0:1.22.12-5.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-30922trackedCVSS 7.5Red Hat Ansible Automation Platform 2.6registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:111c3fa869282760a7408db240e5fbddd74816fa5ffc12578c267427eae8eb96_ppc64lePatch ↗Advisory ↗
Red HatCVE-2024-3884trackedImportant (Red Hat rating)Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7 Servereap7-undertow-0:1.4.18-19.SP17_redhat_00001.1.ep7.el7.noarchPatch ↗Advisory ↗
Red HatCVE-2025-37849trackedCVSS 7.0Red Hat Enterprise Linux AppStream EUS (v. 10.0)kernel-64k-debug-debuginfo-0:6.12.0-55.65.1.el10_0.aarch64Patch ↗Advisory ↗
Red HatCVE-2025-38141trackedCVSS 7.0Red Hat Enterprise Linux AppStream EUS (v. 10.0)kernel-64k-debug-debuginfo-0:6.12.0-55.65.1.el10_0.aarch64Patch ↗Advisory ↗
Red HatCVE-2025-38180trackedCVSS 7.1Red Hat Enterprise Linux NFV (v. 8)kernel-rt-0:4.18.0-553.115.1.rt7.456.el8_10.srcPatch ↗Advisory ↗
Red HatCVE-2025-38180trackedCVSS 7.1Red Hat Enterprise Linux BaseOS (v. 8)bpftool-0:4.18.0-553.115.1.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2025-38180trackedCVSS 7.1Red Hat Enterprise Linux AppStream (v. 9)kernel-64k-debug-debuginfo-0:5.14.0-611.45.1.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2025-38248trackedCVSS 7.3Red Hat Enterprise Linux AppStream EUS (v. 10.0)kernel-64k-debug-debuginfo-0:6.12.0-55.65.1.el10_0.aarch64Patch ↗Advisory ↗
Red HatCVE-2025-40096trackedCVSS 7.0Red Hat Enterprise Linux AppStream (v. 9)kernel-64k-debug-debuginfo-0:5.14.0-611.45.1.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2025-40096trackedCVSS 7.0Red Hat Enterprise Linux AppStream EUS (v.9.6)kernel-64k-debug-debuginfo-0:5.14.0-570.103.1.el9_6.aarch64Patch ↗Advisory ↗
Red HatCVE-2025-40096trackedCVSS 7.0Red Hat Enterprise Linux AppStream EUS (v. 10.0)kernel-64k-debug-debuginfo-0:6.12.0-55.65.1.el10_0.aarch64Patch ↗Advisory ↗
Red HatCVE-2025-61726trackedCVSS 7.5Red Hat Openshift Data Foundation 4.19registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:15da48ce459ac77baf3ba6fd5c5c231310d9f6323fea8ea68f39326031fe8d75_arm64Patch ↗Advisory ↗
Red HatCVE-2025-61726trackedCVSS 7.5Red Hat OpenShift Dev Spaces 3.27registry.redhat.io/devspaces/code-rhel9@sha256:1033ffe714e728e289eddaa3809e9d21915de193813339fa5c049373e3e78719_amd64Patch ↗Advisory ↗
Red HatCVE-2025-61729trackedCVSS 7.5Red Hat Openshift Data Foundation 4.19registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:15da48ce459ac77baf3ba6fd5c5c231310d9f6323fea8ea68f39326031fe8d75_arm64Patch ↗Advisory ↗
Red HatCVE-2025-61729trackedCVSS 7.5Red Hat OpenShift Dev Spaces 3.27registry.redhat.io/devspaces/udi-rhel9@sha256:58111d940c17ffcef32fc2d86f19c8d0f629b89c6412fb9933ca1ad411eec48f_s390xPatch ↗Advisory ↗
Red HatCVE-2025-64756trackedCVSS 7.5Red Hat OpenShift Dev Spaces 3.27registry.redhat.io/devspaces/udi-rhel9@sha256:58111d940c17ffcef32fc2d86f19c8d0f629b89c6412fb9933ca1ad411eec48f_s390xPatch ↗Advisory ↗
Red HatCVE-2025-65637trackedCVSS 7.5Red Hat Enterprise Linux AppStream E4S (v.8.8)aardvark-dns-2:1.5.0-2.module+el8.8.0+23884+2031fc78.ppc64le::container-tools:rhel8Patch ↗Advisory ↗
Red HatCVE-2025-66471trackedCVSS 7.5Red Hat OpenShift Builds 1.7.3registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:19f9361c334808b39276a59adbc42c9081eaaafcbb82837f47a4e7f8571270b0_amd64Patch ↗Advisory ↗
Red HatCVE-2025-66506trackedCVSS 7.5Red Hat OpenShift Pipelines 1.21registry.redhat.io/openshift-pipelines/pipelines-cli-tkn-rhel9@sha256:30c78cb17c2dbb124077332e5aba2626fc34833f17d9ffc43265ead4512b1215_ppc64lePatch ↗Advisory ↗
Red HatCVE-2025-66506trackedCVSS 7.5Red Hat OpenShift Pipelines 1.21registry.redhat.io/openshift-pipelines/pipelines-operator-bundle@sha256:6585794d76cffb3f87fc7eacb905f0dd5f02476f717c911f2c0faf7c4081a080_amd64Patch ↗Advisory ↗
Red HatCVE-2025-68349trackedCVSS 7.5Red Hat Enterprise Linux AppStream EUS (v. 10.0)kernel-64k-debug-debuginfo-0:6.12.0-55.65.1.el10_0.aarch64Patch ↗Advisory ↗
Red HatCVE-2025-68800trackedCVSS 7.3Red Hat Enterprise Linux AppStream EUS (v.9.6)kernel-64k-debug-debuginfo-0:5.14.0-570.103.1.el9_6.aarch64Patch ↗Advisory ↗
Red HatCVE-2025-71238trackedCVSS 7.3Red Hat Enterprise Linux AppStream (v. 10)kernel-64k-debug-debuginfo-0:6.12.0-124.47.1.el10_1.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-0603trackedCVSS 8.3Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 Servereap7-hibernate-0:5.3.38-1.Final_redhat_00001.1.el7eap.noarchPatch ↗Advisory ↗
Red HatCVE-2026-0603trackedCVSS 8.3Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7 Servereap7-hibernate-0:5.1.17-4.Final_redhat_00005.1.ep7.el7.noarchPatch ↗Advisory ↗
Red HatCVE-2026-23171trackedCVSS 7.0Red Hat Enterprise Linux AppStream (v. 9)kernel-64k-debug-debuginfo-0:5.14.0-611.45.1.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-23191trackedCVSS 7.1Red Hat Enterprise Linux AppStream (v. 9)kernel-64k-debug-debuginfo-0:5.14.0-611.45.1.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-23193trackedCVSS 7.1Red Hat Enterprise Linux AppStream (v. 9)kernel-64k-debug-debuginfo-0:5.14.0-611.45.1.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-23204trackedCVSS 7.3Red Hat Enterprise Linux NFV (v. 8)kernel-rt-0:4.18.0-553.115.1.rt7.456.el8_10.srcPatch ↗Advisory ↗
Red HatCVE-2026-23204trackedCVSS 7.3Red Hat Enterprise Linux BaseOS (v. 8)bpftool-0:4.18.0-553.115.1.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-23204trackedCVSS 7.3Red Hat Enterprise Linux AppStream (v. 9)kernel-64k-debug-debuginfo-0:5.14.0-611.45.1.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-23209trackedCVSS 7.0Red Hat Enterprise Linux NFV (v. 8)kernel-rt-0:4.18.0-553.115.1.rt7.456.el8_10.srcPatch ↗Advisory ↗
Red HatCVE-2026-23209trackedCVSS 7.0Red Hat Enterprise Linux BaseOS (v. 8)bpftool-0:4.18.0-553.115.1.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-23209trackedCVSS 7.0Red Hat Enterprise Linux AppStream (v. 9)kernel-64k-debug-debuginfo-0:5.14.0-611.45.1.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-23209trackedCVSS 7.0Red Hat Enterprise Linux AppStream EUS (v.9.6)kernel-64k-debug-debuginfo-0:5.14.0-570.103.1.el9_6.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-23231trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 10)kernel-64k-debug-debuginfo-0:6.12.0-124.47.1.el10_1.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-2359trackedCVSS 7.5Red Hat Developer Hub 1.8registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:2e8ed97c6e6d232f66bb81dc074b8bb2712dc54004cc565fcb1d2b43a9bb2046_amd64Patch ↗Advisory ↗
Red HatCVE-2026-23745trackedCVSS 8.2Red Hat OpenShift Dev Spaces 3.27registry.redhat.io/devspaces/udi-rhel9@sha256:58111d940c17ffcef32fc2d86f19c8d0f629b89c6412fb9933ca1ad411eec48f_s390xPatch ↗Advisory ↗
Red HatCVE-2026-23950trackedCVSS 8.8Red Hat OpenShift Dev Spaces 3.27registry.redhat.io/devspaces/udi-rhel9@sha256:58111d940c17ffcef32fc2d86f19c8d0f629b89c6412fb9933ca1ad411eec48f_s390xPatch ↗Advisory ↗
Red HatCVE-2026-24049trackedCVSS 7.1Red Hat OpenShift Dev Spaces 3.27registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:d25e5effc8f3e6f0a02f3f1795cb83b585508b79e236b66e9a67be1511593864_amd64Patch ↗Advisory ↗
Red HatCVE-2026-24842trackedCVSS 8.2Red Hat OpenShift Dev Spaces 3.27registry.redhat.io/devspaces/code-rhel9@sha256:1033ffe714e728e289eddaa3809e9d21915de193813339fa5c049373e3e78719_amd64Patch ↗Advisory ↗
Red HatCVE-2026-25153trackedCVSS 7.7Red Hat Developer Hub 1.8registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:2e8ed97c6e6d232f66bb81dc074b8bb2712dc54004cc565fcb1d2b43a9bb2046_amd64Patch ↗Advisory ↗
Red HatCVE-2026-25223trackedCVSS 7.5Red Hat OpenShift Dev Spaces 3.27registry.redhat.io/devspaces/dashboard-rhel9@sha256:272a65ee82a9484e1d4362a9f33b6cc1b0eb13d93e70b19cc3d0208f021c2bda_arm64Patch ↗Advisory ↗
Red HatCVE-2026-25639trackedCVSS 7.5Red Hat OpenShift Pipelines 1.21registry.redhat.io/openshift-pipelines/pipelines-operator-bundle@sha256:6585794d76cffb3f87fc7eacb905f0dd5f02476f717c911f2c0faf7c4081a080_amd64Patch ↗Advisory ↗
Red HatCVE-2026-25639trackedCVSS 7.5Red Hat Developer Hub 1.8registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:2e8ed97c6e6d232f66bb81dc074b8bb2712dc54004cc565fcb1d2b43a9bb2046_amd64Patch ↗Advisory ↗
Red HatCVE-2026-25639trackedCVSS 7.5Red Hat OpenShift Dev Spaces 3.27registry.redhat.io/devspaces/code-rhel9@sha256:1033ffe714e728e289eddaa3809e9d21915de193813339fa5c049373e3e78719_amd64Patch ↗Advisory ↗
Red HatCVE-2026-25896trackedCVSS 7.1Red Hat Developer Hub 1.8registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:2e8ed97c6e6d232f66bb81dc074b8bb2712dc54004cc565fcb1d2b43a9bb2046_amd64Patch ↗Advisory ↗
Red HatCVE-2026-25949trackedCVSS 7.5Red Hat OpenShift Dev Spaces 3.27registry.redhat.io/devspaces/traefik-rhel9@sha256:12ae1997a6df944284ecfb3501138c25f1a39eba23b52685b48008174a6a363a_s390xPatch ↗Advisory ↗
Red HatCVE-2026-26278trackedCVSS 7.5Red Hat Developer Hub 1.8registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:2e8ed97c6e6d232f66bb81dc074b8bb2712dc54004cc565fcb1d2b43a9bb2046_amd64Patch ↗Advisory ↗
Red HatCVE-2026-26960trackedCVSS 7.1Red Hat OpenShift Dev Spaces 3.27registry.redhat.io/devspaces/code-rhel9@sha256:1033ffe714e728e289eddaa3809e9d21915de193813339fa5c049373e3e78719_amd64Patch ↗Advisory ↗
Red HatCVE-2026-3304trackedCVSS 7.5Red Hat Developer Hub 1.8registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:2e8ed97c6e6d232f66bb81dc074b8bb2712dc54004cc565fcb1d2b43a9bb2046_amd64Patch ↗Advisory ↗
Red HatCVE-2026-3520trackedCVSS 7.5Red Hat Developer Hub 1.8registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:2e8ed97c6e6d232f66bb81dc074b8bb2712dc54004cc565fcb1d2b43a9bb2046_amd64Patch ↗Advisory ↗
Red HatCVE-2026-4371trackedCVSS 8.2Red Hat Enterprise Linux AppStream (v. 9)thunderbird-0:140.9.0-1.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4684trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 9)thunderbird-0:140.9.0-1.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4685trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 9)thunderbird-0:140.9.0-1.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4686trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 9)thunderbird-0:140.9.0-1.el9_7.aarch64Patch ↗Advisory ↗

Glossary