# Red Hat OpenShift Container Platform 4.15.

Every CVE that names Red Hat OpenShift Container Platform 4.15 among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Openshift/console: openshift/console: authenticated ssrf via helm chart url fetch](https://agentprime.io/advisories/CVE-2026-75888.md)
  `CVE-2026-75888` · CVE record: Red Hat Red Hat OpenShift Container Platform 4.12 and 4 more · CVSS 7.7 High · Not analysed yet · Published 12 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [Insights-operator: gather serviceaccount has cluster-wide secret read plus nodes/proxy and cluster-reader](https://agentprime.io/advisories/CVE-2026-93017.md)
  `CVE-2026-93017` · CVE record: Red Hat Red Hat OpenShift Container Platform 4.12 and 4 more · CVSS 7.7 High · Not analysed yet · Published 8 Oct 2026 · Tags: Privilege escalation
- [Oauth-proxy: open redirect via /\ and /\t bypass in post-login redirect](https://agentprime.io/advisories/CVE-2026-83589.md)
  `CVE-2026-83589` · CVE record: Red Hat Red Hat OpenShift Container Platform 4.12 and 4 more · CVSS 6.1 Medium · Not analysed yet · Published 1 Oct 2026 · Tags: Open redirect
- [Openshift/console: openshift/console: unauthenticated path traversal in i18n locale handler](https://agentprime.io/advisories/CVE-2026-75887.md)
  `CVE-2026-75887` · CVE record: Red Hat Red Hat OpenShift Container Platform 4.12 and 4 more · CVSS 7.5 High · Not analysed yet · Published 23 Sept 2026 · Tags: Path traversal
- [Openshift/console: openshift/console: unauthenticated ssrf and resource exhaustion via devfile parser endpoint](https://agentprime.io/advisories/CVE-2026-75885.md)
  `CVE-2026-75885` · CVE record: Red Hat Red Hat OpenShift Container Platform 4.12 and 4 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [Openshift/oauth-server: openshift/oauth-server: quadratic-time dos via accept-language header underscore bypass on unauthenticated login endpoints](https://agentprime.io/advisories/CVE-2026-49329.md)
  `CVE-2026-49329` · CVE record: Red Hat Red Hat OpenShift Container Platform 4.14 and 4 more · CVSS 7.5 High · Not analysed yet · Published 1 Sept 2026 · Tags: Denial of service
- [Openshift/console: authenticated ssrf with full response reflection and path neutralization via dev console webhook helpers in openshift console](https://agentprime.io/advisories/CVE-2026-50236.md)
  `CVE-2026-50236` · CVE record: Red Hat Red Hat OpenShift Container Platform 4.14 and 4 more · CVSS 7.4 High · Not analysed yet · Published 11 Aug 2026 · Tags: Server-side request forgery (SSRF)
- [Openshift/console: namespace tenant ssrf with egress bypass, catalog poisoning, and admin-mediated supply chain escalation via projecthelmchartrepository in openshift console](https://agentprime.io/advisories/CVE-2026-50237.md)
  `CVE-2026-50237` · CVE record: Red Hat Red Hat OpenShift Container Platform 4.12 and 4 more · CVSS 7.4 High · Not analysed yet · Published 11 Aug 2026 · Tags: Server-side request forgery (SSRF)
- [Dracut: dracut: root code execution via unescaped error message written to sourced emergency hook script in die()](https://agentprime.io/advisories/CVE-2026-15816.md)
  `CVE-2026-15816` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 7 Aug 2026 · Tags: Command injection
- [Openshift/oauth-proxy: openshift/oauth-proxy: underscore header smuggling enables identity impersonation on wsgi/php upstreams](https://agentprime.io/advisories/CVE-2026-49332.md)
  `CVE-2026-49332` · CVE record: Red Hat Red Hat OpenShift Container Platform 4.12 and 4 more · CVSS 8.5 High · Not analysed yet · Published 28 Jul 2026 · Tags: CWE-436
- [Hypershift: konnectivity proxy-server accepts agent connections without validating client certificates](https://agentprime.io/advisories/CVE-2026-16242.md)
  `CVE-2026-16242` · CVE record: Red Hat multicluster engine for Kubernetes 2.1 and 4 more · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Jul 2026 · Tags: Authentication bypass
- [Github.com/cri-o/cri-o: fix bypass for cve-2022-4318 — /etc/passwd injection via home env](https://agentprime.io/advisories/CVE-2026-15809.md)
  `CVE-2026-15809` · CVE record: Red Hat Red Hat OpenShift Container Platform 4.12 and 4 more · CVSS 7.8 High · Not analysed yet · Published 15 Jul 2026 · Tags: Memory corruption, CWE-116
- [Sssd: sssd: gpo cache path traversal via unsanitized gpcfilesyspath allows kerberos authentication bypass](https://agentprime.io/advisories/CVE-2026-14476.md)
  `CVE-2026-14476` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.0 High · Not analysed yet · Published 7 Jul 2026 · Tags: Path traversal
- [Sssd: sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation](https://agentprime.io/advisories/CVE-2026-14474.md)
  `CVE-2026-14474` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.8 High · Not analysed yet · Published 7 Jul 2026 · Tags: CWE-1188
- [Glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive](https://agentprime.io/advisories/CVE-2026-58015.md)
  `CVE-2026-58015` · CVE record: GNOME GLib and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 30 Jun 2026 · Tags: Path traversal
- [Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"](https://agentprime.io/advisories/CVE-2026-58014.md)
  `CVE-2026-58014` · CVE record: GNOME GLib and 4 more · CVSS 7.3 High · Not analysed yet · Published 30 Jun 2026 · Tags: CWE-193
- [Libarchive: double-free vulnerability in rar5 decompression logic via dangling filtered_buf pointer in init_unpack()](https://agentprime.io/advisories/CVE-2026-14164.md)
  `CVE-2026-14164` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 30 Jun 2026 · Tags: Memory corruption
- [Dracut: dracut: root code execution via dhcp options command injection](https://agentprime.io/advisories/CVE-2026-6893.md)
  `CVE-2026-6893` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 10 Jun 2026 · Tags: Command injection
- [Ose-cluster-ingress-operator: remote code execution through haproxy configuration injection](https://agentprime.io/advisories/CVE-2026-1784.md)
  `CVE-2026-1784` · CVE record: Red Hat Red Hat OpenShift Container Platform 4.12 and 4 more · CVSS 8.8 High · Not analysed yet · Published 2 Jun 2026 · Tags: CWE-15
- [Openshift/router: openshift/router: mtls client certificate spoofing via unstripped x-ssl-client headers on http frontend](https://agentprime.io/advisories/CVE-2026-46579.md)
  `CVE-2026-46579` · CVE record: Red Hat Red Hat OpenShift Container Platform 4.12 and 4 more · CVSS 7.4 High · Not analysed yet · Published 29 May 2026 · Tags: Authentication bypass
- [Samba: remote code execution in samr](https://agentprime.io/advisories/CVE-2026-4408.md)
  `CVE-2026-4408` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 May 2026 · Tags: Command injection
- [Samba: missing access check on reparse point operations](https://agentprime.io/advisories/CVE-2026-1933.md)
  `CVE-2026-1933` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.1 High · Not analysed yet · Published 27 May 2026 · Tags: Broken access control
- [Samba: vfs_worm does not block directory modification](https://agentprime.io/advisories/CVE-2026-2340.md)
  `CVE-2026-2340` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 27 May 2026 · Tags: CWE-280
- [Samba: group policy certificate enrollment uses http\:// without validation](https://agentprime.io/advisories/CVE-2026-3012.md)
  `CVE-2026-3012` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.0 High · Not analysed yet · Published 27 May 2026 · Tags: CWE-345
- [Gnutls: gnutls: information disclosure via heap overread in rsa key exchange](https://agentprime.io/advisories/CVE-2026-5260.md)
  `CVE-2026-5260` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.2 High · Not analysed yet · Published 26 May 2026 · Tags: CWE-126
- [Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data](https://agentprime.io/advisories/CVE-2026-48864.md)
  `CVE-2026-48864` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 26 May 2026 · Tags: Memory corruption
- [Gnutls: gnutls: denial of service via dtls packet reordering vulnerability](https://agentprime.io/advisories/CVE-2026-42009.md)
  `CVE-2026-42009` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 18 May 2026 · Tags: CWE-475
- [Gnutls: gnutls: authentication bypass via nul character in username](https://agentprime.io/advisories/CVE-2026-42010.md)
  `CVE-2026-42010` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.1 High · Not analysed yet · Published 7 May 2026 · Tags: CWE-170, CWE-626
- [Gnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassembly](https://agentprime.io/advisories/CVE-2026-33846.md)
  `CVE-2026-33846` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 4 May 2026 · Tags: CWE-130
- [Gnutls: gnutls: denial of service via dtls zero-length fragment](https://agentprime.io/advisories/CVE-2026-33845.md)
  `CVE-2026-33845` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 30 Apr 2026 · Tags: Memory corruption
- [Gnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparison](https://agentprime.io/advisories/CVE-2026-3833.md)
  `CVE-2026-3833` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 30 Apr 2026 · Tags: CWE-178
- [Libcap: libcap: privilege escalation via toctou race condition in cap_set_file()](https://agentprime.io/advisories/CVE-2026-4878.md)
  `CVE-2026-4878` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 9 Apr 2026 · Tags: Race condition
- [Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing](https://agentprime.io/advisories/CVE-2026-5121.md)
  `CVE-2026-5121` · CVE record: Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support and 4 more · CVSS 7.5 High · Not analysed yet · Published 30 Mar 2026 · Tags: Memory corruption
- [Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchive](https://agentprime.io/advisories/CVE-2026-4111.md)
  `CVE-2026-4111` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 13 Mar 2026 · Tags: Denial of service
- [Sssd: sssd default kerberos configuration allows privilege escalation on ad-joined linux systems](https://agentprime.io/advisories/CVE-2025-11561.md)
  `CVE-2025-11561` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.8 High · Not analysed yet · Published 9 Oct 2025 · Tags: Privilege escalation
- [Libxslt: libxml2: heap use-after-free in libxslt caused by atype corruption in xmlattrptr](https://agentprime.io/advisories/CVE-2025-7425.md)
  `CVE-2025-7425` · CVE record: GNOME libxml2 and 4 more · CVSS 7.8 High · Not analysed yet · Published 10 Jul 2025 · Tags: Memory corruption
- [Libssh: invalid return code for chacha20 poly1305 with openssl backend](https://agentprime.io/advisories/CVE-2025-5987.md)
  `CVE-2025-5987` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.1 High · Not analysed yet · Published 7 Jul 2025 · Tags: CWE-393
- [Libssh: out-of-bounds read in sftp_handle()](https://agentprime.io/advisories/CVE-2025-5318.md)
  `CVE-2025-5318` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.4 Medium · Not analysed yet · Published 24 Jun 2025 · Tags: Memory corruption
- [Libxml: heap use after free (uaf) leads to denial of service (dos)](https://agentprime.io/advisories/CVE-2025-49794.md)
  `CVE-2025-49794` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Jun 2025 · Tags: Memory corruption
- [Libxml: type confusion leads to denial of service (dos)](https://agentprime.io/advisories/CVE-2025-49796.md)
  `CVE-2025-49796` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Jun 2025 · Tags: Memory corruption
- [Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2](https://agentprime.io/advisories/CVE-2025-6021.md)
  `CVE-2025-6021` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 12 Jun 2025 · Tags: Memory corruption
- [Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c](https://agentprime.io/advisories/CVE-2025-5914.md)
  `CVE-2025-5914` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Jun 2025 · Tags: Memory corruption
- [Icu: stack buffer overflow in the srbroot::addtag function](https://agentprime.io/advisories/CVE-2025-5222.md)
  `CVE-2025-5222` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.0 High · Not analysed yet · Published 27 May 2025 · Tags: Memory corruption
- [Grub2: net: out-of-bounds write in grub_net_search_config_file()](https://agentprime.io/advisories/CVE-2025-0624.md)
  `CVE-2025-0624` · CVE record: Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support and 4 more · CVSS 7.6 High · Not analysed yet · Published 19 Feb 2025 · Tags: Memory corruption
- [Rsync: info leak via uninitialized stack contents](https://agentprime.io/advisories/CVE-2024-12085.md)
  `CVE-2024-12085` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 14 Jan 2025 · Tags: Memory corruption
- [Podman: buildah: cri-o: symlink traversal vulnerability in the containers/storage library can cause denial of service (dos)](https://agentprime.io/advisories/CVE-2024-9676.md)
  `CVE-2024-9676` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 15 Oct 2024 · Tags: Path traversal
- [Qemu: denial of service via improper synchronization in qemu nbd server during socket closure](https://agentprime.io/advisories/CVE-2024-7409.md)
  `CVE-2024-7409` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.5 High · Not analysed yet · Published 5 Aug 2024 · Tags: CWE-662
- [Openssh: possible remote code execution due to a race condition in signal handling affecting red hat enterprise linux 9](https://agentprime.io/advisories/CVE-2024-6409.md)
  `CVE-2024-6409` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 7.0 High · Critical (CVSS 7+ and EPSS) · EPSS 0.28 · Not analysed yet · Published 8 Jul 2024 · Tags: CWE-364
- [Openssh: regresshion - race condition in ssh allows rce/dos](https://agentprime.io/advisories/CVE-2024-6387.md)
  `CVE-2024-6387` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 8.1 High · Critical (CVSS 7+ and EPSS) · EPSS 1.00 · Not analysed yet · Published 1 Jul 2024 · Tags: CWE-364
- [Cluster-image-registry-operator: exposes a secret via env variable in pod definition on azure](https://agentprime.io/advisories/CVE-2024-4369.md)
  `CVE-2024-4369` · CVE record: Red Hat Red Hat OpenShift Container Platform 4.14 and 1 more · CVSS 6.8 Medium · Not analysed yet · Published 30 Apr 2024 · Tags: CWE-526

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=red-hat-openshift-container-platform-4-15>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/red-hat-openshift-container-platform-4-15/>. Everything for agents: <https://agentprime.io/llms.txt>.