Patch Day month

September 2026 vulnerabilities

Microsoft reports 2 vulnerabilities with exploitation detected in the wild this month. This defender-focused view covers 2,269 vulnerabilities across 4,267 returned patch records from 4 vendors. Filter the month to date, or browse the static page trail without JavaScript.

4,267all patch recordsClear filters 229criticalShow these records 2Microsoft exploitation detectedShow these records 4Microsoft in the Known Exploited Vulnerabilities catalogShow these records 1,579tracked hereShow these records

Patch records: Returned Microsoft and cross-vendor release records. One Common Vulnerabilities and Exposures (CVE) identifier can appear in more than one record.
Tracked here: Records joined to a vulnerability record in this tracker.
Defender priority: Sorts Microsoft exploitation status, Cybersecurity and Infrastructure Security Agency (CISA) Known Exploited Vulnerabilities (KEV) catalog status, severity, and tracker coverage first.
More likely: Microsoft's Exploitability Index rating that exploitation is more likely. It is not a claim that exploitation was detected.

Red Hat 2,756 Microsoft 1,228 Android 271 Cisco 12

Narrow the complete month

Filters use every patch record in this month, including records on later static pages.

Clear all

Microsoft-only signal filters exclude records without Microsoft signal data as unknown, report them separately, and never count them as “no.” “Tracked here” covers both Microsoft and cross-vendor records.

Loading the complete-month filter index…

#patch-filter-form, #patch-filter-loading { display: none !important; } Complete-month filters require JavaScript. The responsive records and ordinary page links below remain complete and usable.

An Exploit Prediction Scoring System (EPSS) percentage is the global 30-day exploitation probability in the wild, not specific to you. Do not read it as a complete risk score or as evidence about your environment or impact.

Page 15 of 22 · records 2,801 to 3,000 of 4,267

Microsoft Security Response Center

CVEDateProductMSRC severityOut-of-bandEPSSTitle

CVE-2026-75538 ↗2026-09-03azl3 erlang 26.2.5.21-4 on Azure Linux 3.0ImportantOut-of-bandNot availableMicrosoft rating unavailableA Signed Length Overflow in Erlang/OTP's inet TCP Driver Overflows the Receive Buffer Into BEAM VM Memory From an Unauthenticated Peer

CVE-2026-74835 ↗2026-09-03azl3 erlang 26.2.5.21-4 on Azure Linux 3.0ImportantOut-of-bandNot availableMicrosoft rating unavailableinets,httpd: Memory Exhaustion via Unenforced max_body_size During Chunked Body Reception

CVE-2026-73812 ↗2026-09-03azl3 erlang 26.2.5.21-4 on Azure Linux 3.0ImportantOut-of-bandNot availableMicrosoft rating unavailableinets, httpd: HTTP Request Smuggling via Transfer-Encoding and Content-Length

CVE-2026-73276 ↗2026-09-03azl3 erlang 26.2.5.21-6 on Azure Linux 3.0ImportantOut-of-bandNot availableMicrosoft rating unavailableinets, httpd: HTTP Request Smuggling via Whitespace-Before-Colon Header Dropping i

CVE-2026-73270 ↗2026-09-03azl3 erlang 26.2.5.21-4 on Azure Linux 3.0ImportantOut-of-bandNot availableMicrosoft rating unavailablehttpd mod_auth directory protection bypassed by request path casing on case-insensitive filesystems

CVE-2026-71380 ↗2026-09-03azl3 erlang 26.2.5.21-6 on Azure Linux 3.0ImportantOut-of-bandNot availableMicrosoft rating unavailablehttpd applies no timeout while receiving a request body, parking a worker on a stalled client

CVE-2026-66835 ↗2026-09-03azl3 erlang 26.2.5.21-4 on Azure Linux 3.0ImportantOut-of-bandNot availableMicrosoft rating unavailablehttpd mod_auth directory protection bypassed by a doubled slash in the request path

CVE-2026-66357 ↗2026-09-03azl3 erlang 26.2.5.21-6 on Azure Linux 3.0ImportantOut-of-bandNot availableMicrosoft rating unavailableinets,httpd:HTTP Request Smuggling via obs-fold Header Continuation

CVE-2026-55951 ↗2026-09-03azl3 erlang 26.2.5.21-6 on Azure Linux 3.0ImportantOut-of-bandNot availableMicrosoft rating unavailablehttpc memory exhaustion via unbounded response header accumulation

CVE-2026-72649 ↗2026-09-03azl3 rubygem-elasticsearch 8.9.0-1 on Azure Linux 3.0ImportantOut-of-bandNot availableMicrosoft rating unavailableDeserialization of Untrusted Data in Elasticsearch Leading to Remote Code Execution

Cross-vendor patches

VendorCVESeverityProductFixed versionPatchAdvisory

Red HatCVE-2026-74581CVSS 7.8Red Hat Enterprise Linux AppStream (v. 10)kernel-64k-debug-debuginfo-0:6.12.0-211.51.1.el10_2.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-74582CVSS 7.8Red Hat Enterprise Linux BaseOS E4S (v.8.8)bpftool-0:4.18.0-477.165.1.el8_8.ppc64lePatch ↗Advisory ↗

Red HatCVE-2026-84292CVSS 7.5Red Hat Hardened Imagesgrafana12-4-main@aarch64Patch ↗Advisory ↗

Red HatCVE-2026-84394CVSS 7.5Red Hat Hardened Imagesgrafana12-4-main@aarch64Patch ↗Advisory ↗

Red HatCVE-2026-85152CVSS 7.4Red Hat Hardened Imagesgrafana12-4-main@aarch64Patch ↗Advisory ↗

Red HatCVE-2025-11234CVSS 7.5Red Hat OpenShift Container Platform 4.12rhcos-x86_64-412.86.202608241157-0Patch ↗Advisory ↗

Red HatCVE-2025-5222CVSS 7.0Red Hat OpenShift Container Platform 4.17rhcos-aarch64-417.94.202608250221-0Patch ↗Advisory ↗

Red HatCVE-2025-68121CVSS 7.4Red Hat OpenShift Container Platform 4.12openshift-0:4.12.0-202608131627.p2.g0e18cfc.assembly.stream.el8.srcPatch ↗Advisory ↗

Red HatCVE-2025-68121CVSS 7.4Red Hat OpenShift Container Platform 4.12registry.redhat.io/openshift4/cloud-network-config-controller-rhel8@sha256:ccbfc8f6066c1c18da33d8eafdeda759accac31b42bcabc83e7e7a94362ffb7a_amd64Patch ↗Advisory ↗

Red HatCVE-2025-68121CVSS 7.4Red Hat OpenShift Container Platform 4.12registry.redhat.io/openshift4/ose-ansible-operator@sha256:bdf4e5777ea10f55962201c76ac8d641389ad4aa51311406a1b385244f3f9976_amd64Patch ↗Advisory ↗

Red HatCVE-2025-68121CVSS 7.4Red Hat OpenShift Container Platform 4.17openshift-clients-0:4.17.0-202608201812.p2.g7189593.assembly.stream.el8.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-11332CVSS 7.8Red Hat Satellite 6.19 for RHEL 9ansible-core-1:2.16.19-1.el9sat.noarchPatch ↗Advisory ↗

Red HatCVE-2026-11332CVSS 7.8Red Hat Satellite 6.18 for RHEL 9ansible-core-1:2.16.19-1.el9sat.noarchPatch ↗Advisory ↗

Red HatCVE-2026-11332CVSS 7.8Red Hat Satellite 6.17 for RHEL 9ansible-core-1:2.16.19-1.el9sat.noarchPatch ↗Advisory ↗

Red HatCVE-2026-11822CVSS 7.8Cert Manager support for Red Hat OpenShift release 1.19registry.redhat.io/cert-manager/cert-manager-operator-rhel9@sha256:636dd466ed2874ecc0bc5985dd7c80eb4c4113b4a4989362b616ff7778e19e43_arm64Patch ↗Advisory ↗

Red HatCVE-2026-11822CVSS 7.8Cert Manager support for Red Hat OpenShift release 1.19registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:03d6509e8064ac056a47ca9ab43df0639236f09806cd551f13a0e808f469c0ee_s390xPatch ↗Advisory ↗

Red HatCVE-2026-11822CVSS 7.8Cert Manager support for Red Hat OpenShift release 1.19registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:a5b8d2a99391fa45f9090f5cab9ef209ee3ddff67abb3104766241dbaf9e64ad_amd64Patch ↗Advisory ↗

Red HatCVE-2026-11824CVSS 7.8Cert Manager support for Red Hat OpenShift release 1.19registry.redhat.io/cert-manager/cert-manager-operator-rhel9@sha256:636dd466ed2874ecc0bc5985dd7c80eb4c4113b4a4989362b616ff7778e19e43_arm64Patch ↗Advisory ↗

Red HatCVE-2026-11824CVSS 7.8Cert Manager support for Red Hat OpenShift release 1.19registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:03d6509e8064ac056a47ca9ab43df0639236f09806cd551f13a0e808f469c0ee_s390xPatch ↗Advisory ↗

Red HatCVE-2026-11824CVSS 7.8Cert Manager support for Red Hat OpenShift release 1.19registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:a5b8d2a99391fa45f9090f5cab9ef209ee3ddff67abb3104766241dbaf9e64ad_amd64Patch ↗Advisory ↗

Red HatCVE-2026-11940CVSS 7.3Red Hat Enterprise Linux AppStream EUS (v. 10.0)python-unversioned-command-0:3.12.9-2.el10_0.11.noarchPatch ↗Advisory ↗

Red HatCVE-2026-11940CVSS 7.3Red Hat Enterprise Linux AppStream EUS (v.9.6)python3.12-0:3.12.9-1.el9_6.10.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-12143CVSS 7.5Red Hat Satellite 6.19registry.redhat.io/satellite/iop-host-inventory-frontend-rhel9@sha256:41f3be239e4b29085e6e373c8c095580f33e140a4965ca3515cf78188e407182_amd64Patch ↗Advisory ↗

Red HatCVE-2026-12143CVSS 7.5Red Hat Satellite 6.18registry.redhat.io/satellite/iop-host-inventory-frontend-rhel9@sha256:fd37a07733418f4372eee13028d427201043b476b77ae562dc9c133f27477941_amd64Patch ↗Advisory ↗

Red HatCVE-2026-1519CVSS 7.5Red Hat OpenShift Container Platform 4.17rhcos-aarch64-417.94.202608250221-0Patch ↗Advisory ↗

Red HatCVE-2026-1933CVSS 7.1Red Hat OpenShift Container Platform 4.12rhcos-x86_64-412.86.202608241157-0Patch ↗Advisory ↗

Red HatCVE-2026-1933CVSS 7.1Red Hat OpenShift Container Platform 4.17rhcos-aarch64-417.94.202608250221-0Patch ↗Advisory ↗

Red HatCVE-2026-25679CVSS 7.5Red Hat OpenShift Container Platform 4.12cri-o-0:1.25.5-34.rhaos4.12.git6120b13.el8.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-25679CVSS 7.5Red Hat OpenShift Container Platform 4.17cri-o-0:1.30.14-11.rhaos4.17.git1e2a16d.el8.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-25681CVSS 8.1Red Hat OpenShift Container Platform 4.17registry.redhat.io/openshift4/ose-cli-rhel9@sha256:07665c43d9ae56cb387c448b2d4230ceb68a6e104bd9a3ec1da20b924ec63d11_arm64Patch ↗Advisory ↗

Red HatCVE-2026-25681CVSS 8.1Red Hat Enterprise Linux AppStream EUS (v. 10.0)osbuild-composer-0:134.1-10.el10_0.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-27136CVSS 8.1Red Hat Advanced Cluster Management for Kubernetes 2.17registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:329806e6d9cee8c20823f45a67c1b0cdb4a8af957c520ef8303557576e8a32f0_amd64Patch ↗Advisory ↗

Red HatCVE-2026-27136CVSS 8.1Red Hat Enterprise Linux AppStream EUS (v. 10.0)osbuild-composer-0:134.1-10.el10_0.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-27143CVSS 8.1Red Hat OpenShift Container Platform 4.12registry.redhat.io/openshift4/cloud-network-config-controller-rhel8@sha256:ccbfc8f6066c1c18da33d8eafdeda759accac31b42bcabc83e7e7a94362ffb7a_amd64Patch ↗Advisory ↗

Red HatCVE-2026-27144CVSS 8.1Red Hat OpenShift Container Platform 4.12registry.redhat.io/openshift4/cloud-network-config-controller-rhel8@sha256:ccbfc8f6066c1c18da33d8eafdeda759accac31b42bcabc83e7e7a94362ffb7a_amd64Patch ↗Advisory ↗

Red HatCVE-2026-27145CVSS 7.5Red Hat OpenShift Container Platform 4.17registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:3eafd395ad333a9886c4a3678f25433dce84c7b20e1053b518682ab6b14d97d5_arm64Patch ↗Advisory ↗

Red HatCVE-2026-27145CVSS 7.5Red Hat Advanced Cluster Management for Kubernetes 2.17registry.redhat.io/rhacm2/subctl-rhel9@sha256:1b38ba10de27535bc6e76dac4db2e66b95e7c666f20136c15d7ac11531c541df_arm64Patch ↗Advisory ↗

Red HatCVE-2026-28390CVSS 7.5Red Hat OpenShift Container Platform 4.12rhcos-x86_64-412.86.202608241157-0Patch ↗Advisory ↗

Red HatCVE-2026-29111CVSS 7.8Red Hat OpenShift Container Platform 4.12rhcos-x86_64-412.86.202608241157-0Patch ↗Advisory ↗

Red HatCVE-2026-29111CVSS 7.8Red Hat OpenShift Container Platform 4.17rhcos-aarch64-417.94.202608250221-0Patch ↗Advisory ↗

Red HatCVE-2026-29181CVSS 7.5Cert Manager support for Red Hat OpenShift release 1.19registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:a5b8d2a99391fa45f9090f5cab9ef209ee3ddff67abb3104766241dbaf9e64ad_amd64Patch ↗Advisory ↗

Red HatCVE-2026-3012CVSS 8.0Red Hat OpenShift Container Platform 4.12rhcos-x86_64-412.86.202608241157-0Patch ↗Advisory ↗

Red HatCVE-2026-3012CVSS 8.0Red Hat OpenShift Container Platform 4.17rhcos-aarch64-417.94.202608250221-0Patch ↗Advisory ↗

Red HatCVE-2026-32280CVSS 7.5Red Hat OpenShift Container Platform 4.12containernetworking-plugins-1:1.4.0-7.rhaos4.12.el8.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-32280CVSS 7.5Red Hat OpenShift Container Platform 4.12registry.redhat.io/openshift4/ose-sdn-rhel8@sha256:ad6036cb29835b23c60fe8b97d88f4b0683c0d53c17935991c99659735a999a3_amd64Patch ↗Advisory ↗

Red HatCVE-2026-32280CVSS 7.5Red Hat OpenShift Container Platform 4.12registry.redhat.io/openshift4/ose-ansible-operator@sha256:bdf4e5777ea10f55962201c76ac8d641389ad4aa51311406a1b385244f3f9976_amd64Patch ↗Advisory ↗

Red HatCVE-2026-32280CVSS 7.5Red Hat OpenShift Container Platform 4.17cri-o-0:1.30.14-11.rhaos4.17.git1e2a16d.el8.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-33811CVSS 7.5Red Hat OpenShift Container Platform 4.17cri-tools-0:1.30.0-9.el8.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-33811CVSS 7.5Red Hat OpenShift Container Platform 4.17registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:3eafd395ad333a9886c4a3678f25433dce84c7b20e1053b518682ab6b14d97d5_arm64Patch ↗Advisory ↗

Red HatCVE-2026-33814CVSS 7.5Red Hat OpenShift Container Platform 4.12registry.redhat.io/openshift4/ose-cli-artifacts@sha256:0ba8d0b61cf9fb6fb602603c59348776bf1251c1067537587acb01b0715c4272_amd64Patch ↗Advisory ↗

Red HatCVE-2026-33814CVSS 7.5Red Hat OpenShift Container Platform 4.17registry.redhat.io/openshift4/egress-router-cni-rhel9@sha256:70faa87dcc78c5423e4d33b1703eeacab5df8a24be809c20aaf5ebdcd0b060d3_amd64Patch ↗Advisory ↗

Red HatCVE-2026-33814CVSS 7.5Red Hat OpenShift Container Platform 4.17registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:158e67187fca8fe1bd8a461db31e27f1c03e26bd35a391d0f1322d16d0e86e46_arm64Patch ↗Advisory ↗

Red HatCVE-2026-33818CVSS 7.5Red Hat Enterprise Linux AppStream (v. 10)grafana-0:10.2.6-28.el10_2.5.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-33818CVSS 7.5Red Hat Enterprise Linux AppStream (v. 10)grafana-pcp-0:5.3.0-8.el10_2.1.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-33818CVSS 7.5Red Hat Enterprise Linux AppStream (v. 8)grafana-pcp-0:5.1.1-18.el8_10.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-33818CVSS 7.5Red Hat Enterprise Linux AppStream (v. 9)rhc-1:0.2.7-11.el9_8.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-33818CVSS 7.5Red Hat Enterprise Linux AppStream (v. 9)grafana-pcp-0:5.1.1-17.el9_8.1.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-33845CVSS 7.5Red Hat OpenShift Container Platform 4.12rhcos-x86_64-412.86.202608241157-0Patch ↗Advisory ↗

Red HatCVE-2026-33845CVSS 7.5Red Hat OpenShift Container Platform 4.17rhcos-aarch64-417.94.202608250221-0Patch ↗Advisory ↗

Red HatCVE-2026-33846CVSS 7.5Red Hat OpenShift Container Platform 4.12rhcos-x86_64-412.86.202608241157-0Patch ↗Advisory ↗

Red HatCVE-2026-33846CVSS 7.5Red Hat OpenShift Container Platform 4.17rhcos-aarch64-417.94.202608250221-0Patch ↗Advisory ↗

Red HatCVE-2026-34982CVSS 8.2Red Hat OpenShift Container Platform 4.12rhcos-x86_64-412.86.202608241157-0Patch ↗Advisory ↗

Red HatCVE-2026-34982CVSS 8.2Red Hat OpenShift Container Platform 4.17rhcos-aarch64-417.94.202608250221-0Patch ↗Advisory ↗

Red HatCVE-2026-34986CVSS 7.5Red Hat OpenShift Container Platform 4.17registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:6273f9de7769e45c412df94db5b85b3286f92b60af631fb3b821d9383e04d7be_ppc64lePatch ↗Advisory ↗

Red HatCVE-2026-34993CVSS 7.2Red Hat Satellite 6.16 for RHEL 8python-aiohttp-0:3.14.3-1.el8pc.srcPatch ↗Advisory ↗

Red HatCVE-2026-34993CVSS 7.2Red Hat Satellite 6.19 for RHEL 9python3.12-aiohttp-0:3.14.3-1.el9pc.srcPatch ↗Advisory ↗

Red HatCVE-2026-34993CVSS 7.2Red Hat Satellite 6.18 for RHEL 9pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarchPatch ↗Advisory ↗

Red HatCVE-2026-34993CVSS 7.2Red Hat Satellite 6.17 for RHEL 9ansible-core-1:2.16.19-1.el9sat.noarchPatch ↗Advisory ↗

Red HatCVE-2026-39820CVSS 7.5Red Hat OpenShift Container Platform 4.12cri-o-0:1.25.5-34.rhaos4.12.git6120b13.el8.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-39820CVSS 7.5Red Hat OpenShift Container Platform 4.12registry.redhat.io/openshift4/ose-installer@sha256:c6d6bc61fb515c0e70baa70e5ee1ea58236ff1f0009ef8d159418605e20bc015_amd64Patch ↗Advisory ↗

Red HatCVE-2026-39820CVSS 7.5Red Hat OpenShift Container Platform 4.17cri-o-0:1.30.14-11.rhaos4.17.git1e2a16d.el8.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-39820CVSS 7.5Red Hat OpenShift Container Platform 4.17registry.redhat.io/openshift4/ose-cli-rhel9@sha256:07665c43d9ae56cb387c448b2d4230ceb68a6e104bd9a3ec1da20b924ec63d11_arm64Patch ↗Advisory ↗

Red HatCVE-2026-39820CVSS 7.5Red Hat Enterprise Linux AppStream (v. 10)grafana-0:10.2.6-28.el10_2.5.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-39821CVSS 8.2Red Hat Enterprise Linux AppStream EUS (v. 10.0)osbuild-composer-0:134.1-10.el10_0.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-39883CVSS 8.8Cert Manager support for Red Hat OpenShift release 1.19registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:a5b8d2a99391fa45f9090f5cab9ef209ee3ddff67abb3104766241dbaf9e64ad_amd64Patch ↗Advisory ↗

Red HatCVE-2026-41035CVSS 7.4Red Hat OpenShift Container Platform 4.12rhcos-x86_64-412.86.202608241157-0Patch ↗Advisory ↗

Red HatCVE-2026-41178CVSS 7.5Red Hat Advanced Cluster Management for Kubernetes 2.17registry.redhat.io/rhacm2/subctl-rhel9@sha256:1b38ba10de27535bc6e76dac4db2e66b95e7c666f20136c15d7ac11531c541df_arm64Patch ↗Advisory ↗

Red HatCVE-2026-41411CVSS 7.3Red Hat OpenShift Container Platform 4.12rhcos-x86_64-412.86.202608241157-0Patch ↗Advisory ↗

Red HatCVE-2026-41411CVSS 7.3Red Hat OpenShift Container Platform 4.17rhcos-aarch64-417.94.202608250221-0Patch ↗Advisory ↗

Red HatCVE-2026-42009CVSS 7.5Red Hat OpenShift Container Platform 4.12rhcos-x86_64-412.86.202608241157-0Patch ↗Advisory ↗

Red HatCVE-2026-42009CVSS 7.5Red Hat OpenShift Container Platform 4.17rhcos-aarch64-417.94.202608250221-0Patch ↗Advisory ↗

Red HatCVE-2026-42010CVSS 7.1Red Hat OpenShift Container Platform 4.12rhcos-x86_64-412.86.202608241157-0Patch ↗Advisory ↗

Red HatCVE-2026-42010CVSS 7.1Red Hat OpenShift Container Platform 4.17rhcos-aarch64-417.94.202608250221-0Patch ↗Advisory ↗

Red HatCVE-2026-42011CVSS 7.4Red Hat OpenShift Container Platform 4.12rhcos-x86_64-412.86.202608241157-0Patch ↗Advisory ↗

Red HatCVE-2026-42011CVSS 7.4Red Hat OpenShift Container Platform 4.17rhcos-aarch64-417.94.202608250221-0Patch ↗Advisory ↗

Red HatCVE-2026-42013CVSS 8.2Red Hat OpenShift Container Platform 4.12rhcos-x86_64-412.86.202608241157-0Patch ↗Advisory ↗

Red HatCVE-2026-42013CVSS 8.2Red Hat OpenShift Container Platform 4.17rhcos-aarch64-417.94.202608250221-0Patch ↗Advisory ↗

Red HatCVE-2026-42154CVSS 7.5Red Hat OpenShift Container Platform 4.12registry.redhat.io/openshift4/ose-prometheus@sha256:f589b3378137b9ddac7caf4bd9f5c4267e80d22f4510895e9feeb69c981cc465_amd64Patch ↗Advisory ↗

Red HatCVE-2026-42215CVSS 7.5Red Hat Satellite 6.19 for RHEL 9python3.12-gitpython-0:3.1.59-1.el9pc.noarchPatch ↗Advisory ↗

Red HatCVE-2026-42284CVSS 7.5Red Hat Satellite 6.19 for RHEL 9python3.12-gitpython-0:3.1.59-1.el9pc.noarchPatch ↗Advisory ↗

Red HatCVE-2026-42499CVSS 7.5Red Hat OpenShift Container Platform 4.12cri-o-0:1.25.5-34.rhaos4.12.git6120b13.el8.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-42499CVSS 7.5Red Hat OpenShift Container Platform 4.12registry.redhat.io/openshift4/ose-installer@sha256:c6d6bc61fb515c0e70baa70e5ee1ea58236ff1f0009ef8d159418605e20bc015_amd64Patch ↗Advisory ↗

Red HatCVE-2026-42499CVSS 7.5Red Hat OpenShift Container Platform 4.17cri-o-0:1.30.14-11.rhaos4.17.git1e2a16d.el8.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-42499CVSS 7.5Red Hat OpenShift Container Platform 4.17registry.redhat.io/openshift4/ose-cli-rhel9@sha256:07665c43d9ae56cb387c448b2d4230ceb68a6e104bd9a3ec1da20b924ec63d11_arm64Patch ↗Advisory ↗

Red HatCVE-2026-42499CVSS 7.5Red Hat Enterprise Linux AppStream (v. 10)grafana-0:10.2.6-28.el10_2.5.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-42504CVSS 7.5Red Hat OpenShift Container Platform 4.17cri-o-0:1.30.14-11.rhaos4.17.git1e2a16d.el8.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-42504CVSS 7.5Red Hat OpenShift Container Platform 4.17registry.redhat.io/openshift4/frr-rhel9@sha256:206f21b9851e537e6e68adc667866c60879b4da88344f13d714c6a0a4b90de2d_s390xPatch ↗Advisory ↗

Red HatCVE-2026-42504CVSS 7.5Red Hat OpenShift Container Platform 4.17registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:3eafd395ad333a9886c4a3678f25433dce84c7b20e1053b518682ab6b14d97d5_arm64Patch ↗Advisory ↗

Red HatCVE-2026-42504CVSS 7.5Red Hat Enterprise Linux AppStream (v. 10)grafana-pcp-0:5.3.0-8.el10_2.1.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-42504CVSS 7.5Red Hat Enterprise Linux AppStream (v. 8)grafana-pcp-0:5.1.1-18.el8_10.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-42504CVSS 7.5Red Hat OpenShift GitOps 1.19registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:b275e3b06b08a07d9433903162fe949a7ecfdd5e73dc67e3a2ce2f20520bc20e_s390xPatch ↗Advisory ↗

Red HatCVE-2026-42504CVSS 7.5Red Hat OpenShift GitOps 1.20registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:4c9e00ebb92f6a5749f83cfd3b9a33aba16e717a3f33ff0da6cf5ef0cb42f4c1_ppc64lePatch ↗Advisory ↗

Red HatCVE-2026-43112CVSS 8.1Red Hat OpenShift Container Platform 4.12rhcos-x86_64-412.86.202608241157-0Patch ↗Advisory ↗

Red HatCVE-2026-43112CVSS 8.1Red Hat OpenShift Container Platform 4.17rhcos-aarch64-417.94.202608250221-0Patch ↗Advisory ↗

Red HatCVE-2026-43116CVSS 7.0Red Hat Enterprise Linux for Real Time (v. 7 ELS)kernel-rt-0:3.10.0-1160.159.1.rt56.1311.el7.srcPatch ↗Advisory ↗

Red HatCVE-2026-44244CVSS 7.3Red Hat Satellite 6.19 for RHEL 9python3.12-gitpython-0:3.1.59-1.el9pc.noarchPatch ↗Advisory ↗

Red HatCVE-2026-44492CVSS 8.6Red Hat OpenShift Container Platform 4.12registry.redhat.io/openshift4/ose-console@sha256:c837108ef6643c35f4e625dab7d1b848d49a7b973cfd53c201c7d8de6ccb9b67_amd64Patch ↗Advisory ↗

Red HatCVE-2026-44495CVSS 7.0Red Hat OpenShift Container Platform 4.12registry.redhat.io/openshift4/ose-console@sha256:c837108ef6643c35f4e625dab7d1b848d49a7b973cfd53c201c7d8de6ccb9b67_amd64Patch ↗Advisory ↗

Red HatCVE-2026-44496CVSS 7.5Red Hat OpenShift Container Platform 4.12registry.redhat.io/openshift4/ose-console@sha256:c837108ef6643c35f4e625dab7d1b848d49a7b973cfd53c201c7d8de6ccb9b67_amd64Patch ↗Advisory ↗

Red HatCVE-2026-44705CVSS 8.2Red Hat Quay 3.15registry.redhat.io/quay/quay-rhel8@sha256:64967e93bbf7f56601309bea7951c40c2b9fd01be85324d5287c20bf5083861a_ppc64lePatch ↗Advisory ↗

Red HatCVE-2026-44740CVSS 7.5Red Hat OpenShift GitOps 1.21registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:01a7fd9bb240664115ef3e4857ad24e76701f1d6ec46f984dec53ad6b4a2c931_amd64Patch ↗Advisory ↗

Red HatCVE-2026-45363CVSS 7.4Red Hat Satellite 6.16 for RHEL 8rubygem-jwt-0:2.10.3-1.el8sat.noarchPatch ↗Advisory ↗

Red HatCVE-2026-45363CVSS 7.4Red Hat Satellite 6.19 for RHEL 9rubygem-jwt-0:2.10.3-1.el9sat.noarchPatch ↗Advisory ↗

Red HatCVE-2026-45363CVSS 7.4Red Hat Satellite 6.18 for RHEL 9pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarchPatch ↗Advisory ↗

Red HatCVE-2026-45363CVSS 7.4Red Hat Satellite 6.17 for RHEL 9ansible-core-1:2.16.19-1.el9sat.noarchPatch ↗Advisory ↗

Red HatCVE-2026-45447CVSS 8.1Red Hat OpenShift Container Platform 4.12rhcos-x86_64-412.86.202608241157-0Patch ↗Advisory ↗

Red HatCVE-2026-45970CVSS 7.0Red Hat Enterprise Linux NFV (v. 8)kernel-rt-0:4.18.0-553.159.1.rt7.500.el8_10.srcPatch ↗Advisory ↗

Red HatCVE-2026-45970CVSS 7.0Red Hat Enterprise Linux BaseOS (v. 8)bpftool-0:4.18.0-553.159.1.el8_10.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-45984CVSS 7.8Red Hat Enterprise Linux for Real Time (v. 7 ELS)kernel-rt-0:3.10.0-1160.159.1.rt56.1311.el7.srcPatch ↗Advisory ↗

Red HatCVE-2026-46483CVSS 7.0Red Hat OpenShift Container Platform 4.12rhcos-x86_64-412.86.202608241157-0Patch ↗Advisory ↗

Red HatCVE-2026-46483CVSS 7.0Red Hat OpenShift Container Platform 4.17rhcos-aarch64-417.94.202608250221-0Patch ↗Advisory ↗

Red HatCVE-2026-46597CVSS 7.5Red Hat OpenShift Container Platform 4.17registry.redhat.io/openshift4/ose-vmware-vsphere-csi-driver-rhel9@sha256:fcbaf747a779dfde1c76911167f8eb09c65274b14eb7e2dc5882eba583f25bad_amd64Patch ↗Advisory ↗

Red HatCVE-2026-46597CVSS 7.5Red Hat OpenShift Container Platform 4.17registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel9@sha256:454b3e0c7fdbaa37fd2a5692bec1a37ec52e97f443e1c2ce38f3ccb868136356_arm64Patch ↗Advisory ↗

Red HatCVE-2026-46600CVSS 7.5Cert Manager support for Red Hat OpenShift release 1.19registry.redhat.io/cert-manager/cert-manager-operator-rhel9@sha256:636dd466ed2874ecc0bc5985dd7c80eb4c4113b4a4989362b616ff7778e19e43_arm64Patch ↗Advisory ↗

Red HatCVE-2026-46600CVSS 7.5Cert Manager support for Red Hat OpenShift release 1.19registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:03d6509e8064ac056a47ca9ab43df0639236f09806cd551f13a0e808f469c0ee_s390xPatch ↗Advisory ↗

Red HatCVE-2026-4800CVSS 8.1Red Hat OpenShift Container Platform 4.12registry.redhat.io/openshift4/ose-console@sha256:c837108ef6643c35f4e625dab7d1b848d49a7b973cfd53c201c7d8de6ccb9b67_amd64Patch ↗Advisory ↗

Red HatCVE-2026-4800CVSS 8.1Red Hat OpenShift Container Platform 4.17registry.redhat.io/openshift4/ose-console-rhel9@sha256:22e1e3d2c2e16e9217cb9fe9a87ec2d4e922c8c1cdabb69d9d690db764d186a6_s390xPatch ↗Advisory ↗

Red HatCVE-2026-48864CVSS 7.8Red Hat OpenShift Container Platform 4.12rhcos-x86_64-412.86.202608241157-0Patch ↗Advisory ↗

Red HatCVE-2026-48864CVSS 7.8Red Hat OpenShift Container Platform 4.17rhcos-aarch64-417.94.202608250221-0Patch ↗Advisory ↗

Red HatCVE-2026-5260CVSS 8.2Red Hat OpenShift Container Platform 4.12rhcos-x86_64-412.86.202608241157-0Patch ↗Advisory ↗

Red HatCVE-2026-5260CVSS 8.2Red Hat OpenShift Container Platform 4.17rhcos-aarch64-417.94.202608250221-0Patch ↗Advisory ↗

Red HatCVE-2026-52923CVSS 7.8Red Hat Enterprise Linux for Real Time (v. 7 ELS)kernel-rt-0:3.10.0-1160.159.1.rt56.1311.el7.srcPatch ↗Advisory ↗

Red HatCVE-2026-53185CVSS 7.0Red Hat Enterprise Linux NFV (v. 8)kernel-rt-0:4.18.0-553.159.1.rt7.500.el8_10.srcPatch ↗Advisory ↗

Red HatCVE-2026-53185CVSS 7.0Red Hat Enterprise Linux BaseOS (v. 8)bpftool-0:4.18.0-553.159.1.el8_10.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-53391CVSS 7.0Red Hat Enterprise Linux NFV (v. 8)kernel-rt-0:4.18.0-553.159.1.rt7.500.el8_10.srcPatch ↗Advisory ↗

Red HatCVE-2026-53391CVSS 7.0Red Hat Enterprise Linux BaseOS (v. 8)bpftool-0:4.18.0-553.159.1.el8_10.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-53392CVSS 7.0Red Hat Enterprise Linux NFV (v. 8)kernel-rt-0:4.18.0-553.159.1.rt7.500.el8_10.srcPatch ↗Advisory ↗

Red HatCVE-2026-53392CVSS 7.0Red Hat Enterprise Linux BaseOS (v. 8)bpftool-0:4.18.0-553.159.1.el8_10.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-53397CVSS 7.0Red Hat Enterprise Linux NFV (v. 8)kernel-rt-0:4.18.0-553.159.1.rt7.500.el8_10.srcPatch ↗Advisory ↗

Red HatCVE-2026-53397CVSS 7.0Red Hat Enterprise Linux BaseOS (v. 8)bpftool-0:4.18.0-553.159.1.el8_10.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-53399CVSS 7.0Red Hat Enterprise Linux NFV (v. 8)kernel-rt-0:4.18.0-553.159.1.rt7.500.el8_10.srcPatch ↗Advisory ↗

Red HatCVE-2026-53399CVSS 7.0Red Hat Enterprise Linux BaseOS (v. 8)bpftool-0:4.18.0-553.159.1.el8_10.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-54512CVSS 8.1Red Hat Satellite 6.16 for RHEL 8openvox-server-0:8.15.2-1.el8sat.noarchPatch ↗Advisory ↗

Red HatCVE-2026-54512CVSS 8.1Red Hat Satellite 6.19 for RHEL 9openvox-server-0:8.15.2-1.el9sat.noarchPatch ↗Advisory ↗

Red HatCVE-2026-54512CVSS 8.1Red Hat Satellite 6.18 for RHEL 9openvox-server-0:8.15.2-1.el9sat.noarchPatch ↗Advisory ↗

Red HatCVE-2026-54512CVSS 8.1Red Hat Satellite 6.17 for RHEL 9ansible-core-1:2.16.19-1.el9sat.noarchPatch ↗Advisory ↗

Red HatCVE-2026-55952CVSS 7.5Red Hat Hardened Imageserlang27-main@aarch64Patch ↗Advisory ↗

Red HatCVE-2026-56852CVSS 7.5Cert Manager support for Red Hat OpenShift release 1.19registry.redhat.io/cert-manager/cert-manager-operator-rhel9@sha256:636dd466ed2874ecc0bc5985dd7c80eb4c4113b4a4989362b616ff7778e19e43_arm64Patch ↗Advisory ↗

Red HatCVE-2026-56852CVSS 7.5Cert Manager support for Red Hat OpenShift release 1.19registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:03d6509e8064ac056a47ca9ab43df0639236f09806cd551f13a0e808f469c0ee_s390xPatch ↗Advisory ↗

Red HatCVE-2026-56852CVSS 7.5Red Hat Quay 3.15registry.redhat.io/quay/quay-rhel8@sha256:64967e93bbf7f56601309bea7951c40c2b9fd01be85324d5287c20bf5083861a_ppc64lePatch ↗Advisory ↗

Red HatCVE-2026-56853CVSS 7.5Red Hat Enterprise Linux AppStream (v. 10)grafana-0:10.2.6-28.el10_2.5.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-56853CVSS 7.5Red Hat Enterprise Linux AppStream (v. 10)grafana-pcp-0:5.3.0-8.el10_2.1.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-56853CVSS 7.5Red Hat Enterprise Linux AppStream (v. 8)grafana-pcp-0:5.1.1-18.el8_10.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-56858CVSS 8.1Red Hat Enterprise Linux AppStream (v. 10)grafana-0:10.2.6-28.el10_2.5.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-56858CVSS 8.1Red Hat Enterprise Linux AppStream (v. 10)grafana-pcp-0:5.3.0-8.el10_2.1.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-56858CVSS 8.1Red Hat Enterprise Linux AppStream (v. 8)grafana-pcp-0:5.1.1-18.el8_10.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-56858CVSS 8.1Red Hat Enterprise Linux AppStream (v. 9)rhc-1:0.2.7-11.el9_8.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-56858CVSS 8.1Red Hat Enterprise Linux AppStream (v. 9)grafana-pcp-0:5.1.1-17.el9_8.1.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-56859CVSS 7.5Red Hat Enterprise Linux AppStream (v. 10)grafana-0:10.2.6-28.el10_2.5.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-56860CVSS 7.5Red Hat Enterprise Linux AppStream (v. 10)grafana-0:10.2.6-28.el10_2.5.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-56860CVSS 7.5Red Hat Enterprise Linux AppStream (v. 10)grafana-pcp-0:5.3.0-8.el10_2.1.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-56860CVSS 7.5Red Hat Enterprise Linux AppStream (v. 8)grafana-pcp-0:5.1.1-18.el8_10.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-56860CVSS 7.5Red Hat Enterprise Linux AppStream (v. 9)rhc-1:0.2.7-11.el9_8.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-56860CVSS 7.5Red Hat Enterprise Linux AppStream (v. 9)grafana-pcp-0:5.1.1-17.el9_8.1.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-56862CVSS 7.5Red Hat Enterprise Linux AppStream (v. 10)grafana-0:10.2.6-28.el10_2.5.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-56862CVSS 7.5Red Hat Enterprise Linux AppStream (v. 10)grafana-pcp-0:5.3.0-8.el10_2.1.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-56862CVSS 7.5Red Hat Enterprise Linux AppStream (v. 8)grafana-pcp-0:5.1.1-18.el8_10.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-56862CVSS 7.5Red Hat Enterprise Linux AppStream (v. 9)rhc-1:0.2.7-11.el9_8.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-56862CVSS 7.5Red Hat Enterprise Linux AppStream (v. 9)grafana-pcp-0:5.1.1-17.el9_8.1.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-58014CVSS 7.3Cert Manager support for Red Hat OpenShift release 1.19registry.redhat.io/cert-manager/cert-manager-operator-rhel9@sha256:636dd466ed2874ecc0bc5985dd7c80eb4c4113b4a4989362b616ff7778e19e43_arm64Patch ↗Advisory ↗

Red HatCVE-2026-58014CVSS 7.3Cert Manager support for Red Hat OpenShift release 1.19registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:03d6509e8064ac056a47ca9ab43df0639236f09806cd551f13a0e808f469c0ee_s390xPatch ↗Advisory ↗

Red HatCVE-2026-58014CVSS 7.3Cert Manager support for Red Hat OpenShift release 1.19registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:a5b8d2a99391fa45f9090f5cab9ef209ee3ddff67abb3104766241dbaf9e64ad_amd64Patch ↗Advisory ↗

Red HatCVE-2026-62309CVSS 7.5Red Hat Advanced Cluster Management for Kubernetes 2.17registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:321dc468744626a9542c344381f9db454d7cbc7a69e3a925365ce1d8ae8ca474_arm64Patch ↗Advisory ↗

Red HatCVE-2026-63382CVSS 7.7Red Hat Hardened Imageslibevent-main@aarch64Patch ↗Advisory ↗

Red HatCVE-2026-63385CVSS 7.7Red Hat Hardened Imageslibevent-main@aarch64Patch ↗Advisory ↗

Red HatCVE-2026-63387CVSS 8.6Red Hat Hardened Imageslibevent-main@aarch64Patch ↗Advisory ↗

Red HatCVE-2026-63800CVSS 7.0Red Hat Enterprise Linux NFV (v. 8)kernel-rt-0:4.18.0-553.159.1.rt7.500.el8_10.srcPatch ↗Advisory ↗

Red HatCVE-2026-63800CVSS 7.0Red Hat Enterprise Linux BaseOS (v. 8)bpftool-0:4.18.0-553.159.1.el8_10.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-64298CVSS 7.0Red Hat Enterprise Linux NFV (v. 8)kernel-rt-0:4.18.0-553.159.1.rt7.500.el8_10.srcPatch ↗Advisory ↗

Red HatCVE-2026-64298CVSS 7.0Red Hat Enterprise Linux BaseOS (v. 8)bpftool-0:4.18.0-553.159.1.el8_10.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-64607CVSS 7.5Red Hat Build of Apache Camel 3.33 for Quarkus 3.33.3.SP1Not reportedPatch ↗Advisory ↗

Red HatCVE-2026-65927CVSS 8.2Red Hat Hardened Imagestomcat10-main@noarchPatch ↗Advisory ↗

Red HatCVE-2026-66257CVSS 7.5Red Hat Build of Apache Camel 3.33 for Quarkus 3.33.3.SP1Not reportedPatch ↗Advisory ↗

Red HatCVE-2026-66273CVSS 7.5Red Hat Build of Apache Camel 3.33 for Quarkus 3.33.3.SP1Not reportedPatch ↗Advisory ↗

Red HatCVE-2026-66274CVSS 7.5Red Hat Build of Apache Camel 3.33 for Quarkus 3.33.3.SP1Not reportedPatch ↗Advisory ↗

Red HatCVE-2026-67313CVSS 7.5Red Hat Satellite 6.19registry.redhat.io/satellite/iop-host-inventory-frontend-rhel9@sha256:41f3be239e4b29085e6e373c8c095580f33e140a4965ca3515cf78188e407182_amd64Patch ↗Advisory ↗

Red HatCVE-2026-67313CVSS 7.5Red Hat Satellite 6.18registry.redhat.io/satellite/iop-host-inventory-frontend-rhel9@sha256:fd37a07733418f4372eee13028d427201043b476b77ae562dc9c133f27477941_amd64Patch ↗Advisory ↗

Red HatCVE-2026-67314CVSS 7.4Red Hat Satellite 6.19registry.redhat.io/satellite/iop-host-inventory-frontend-rhel9@sha256:41f3be239e4b29085e6e373c8c095580f33e140a4965ca3515cf78188e407182_amd64Patch ↗Advisory ↗

Red HatCVE-2026-67314CVSS 7.4Red Hat Satellite 6.18registry.redhat.io/satellite/iop-host-inventory-frontend-rhel9@sha256:fd37a07733418f4372eee13028d427201043b476b77ae562dc9c133f27477941_amd64Patch ↗Advisory ↗

Red HatCVE-2026-67321CVSS 7.5Red Hat Satellite 6.19registry.redhat.io/satellite/iop-host-inventory-frontend-rhel9@sha256:41f3be239e4b29085e6e373c8c095580f33e140a4965ca3515cf78188e407182_amd64Patch ↗Advisory ↗