# Red Hat OpenShift Container Platform 4.18. Every CVE that names Red Hat OpenShift Container Platform 4.18 among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first - [Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns](https://agentprime.io/advisories/CVE-2026-114406.md) `CVE-2026-114406` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 21 Oct 2026 · Tags: Weak cryptography or TLS - [Openshift/console: openshift/console: authenticated ssrf via helm chart url fetch](https://agentprime.io/advisories/CVE-2026-75888.md) `CVE-2026-75888` · CVE record: Red Hat Red Hat OpenShift Container Platform 4.12 and 4 more · CVSS 7.7 High · Not analysed yet · Published 12 Oct 2026 · Tags: Server-side request forgery (SSRF) - [Insights-operator: gather serviceaccount has cluster-wide secret read plus nodes/proxy and cluster-reader](https://agentprime.io/advisories/CVE-2026-93017.md) `CVE-2026-93017` · CVE record: Red Hat Red Hat OpenShift Container Platform 4.12 and 4 more · CVSS 7.7 High · Not analysed yet · Published 8 Oct 2026 · Tags: Privilege escalation - [Oc-mirror\_\_release-4.21: embedded local cache registry listens on all interfaces without authentication, with delete enabled](https://agentprime.io/advisories/CVE-2026-96577.md) `CVE-2026-96577` · CVE record: Red Hat Red Hat OpenShift Container Platform 4.18 and 4 more · CVSS 7.1 High · Not analysed yet · Published 1 Oct 2026 · Tags: Authentication bypass - [Oauth-proxy: open redirect via /\ and /\t bypass in post-login redirect](https://agentprime.io/advisories/CVE-2026-83589.md) `CVE-2026-83589` · CVE record: Red Hat Red Hat OpenShift Container Platform 4.12 and 4 more · CVSS 6.1 Medium · Not analysed yet · Published 1 Oct 2026 · Tags: Open redirect - [Openshift/console: openshift/console: unauthenticated path traversal in i18n locale handler](https://agentprime.io/advisories/CVE-2026-75887.md) `CVE-2026-75887` · CVE record: Red Hat Red Hat OpenShift Container Platform 4.12 and 4 more · CVSS 7.5 High · Not analysed yet · Published 23 Sept 2026 · Tags: Path traversal - [Openshift/console: openshift/console: unauthenticated reverse proxy to in-cluster catalogd service with session token forwarding](https://agentprime.io/advisories/CVE-2026-75886.md) `CVE-2026-75886` · CVE record: Red Hat Red Hat OpenShift Container Platform 4.17 and 4 more · CVSS 7.2 High · Not analysed yet · Published 23 Sept 2026 · Tags: CWE-441 - [Openshift/oc-mirror: release signature verification: openpgp signatureerror checked before signed body is consumed](https://agentprime.io/advisories/CVE-2026-75939.md) `CVE-2026-75939` · CVE record: Red Hat Red Hat OpenShift Container Platform 4.18 and 1 more · CVSS 7.4 High · Not analysed yet · Published 21 Sept 2026 · Tags: Weak cryptography or TLS - [Openshift/console: openshift/console: unauthenticated ssrf and resource exhaustion via devfile parser endpoint](https://agentprime.io/advisories/CVE-2026-75885.md) `CVE-2026-75885` · CVE record: Red Hat Red Hat OpenShift Container Platform 4.12 and 4 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Sept 2026 · Tags: Server-side request forgery (SSRF) - [Openshift/oauth-server: openshift/oauth-server: quadratic-time dos via accept-language header underscore bypass on unauthenticated login endpoints](https://agentprime.io/advisories/CVE-2026-49329.md) `CVE-2026-49329` · CVE record: Red Hat Red Hat OpenShift Container Platform 4.14 and 4 more · CVSS 7.5 High · Not analysed yet · Published 1 Sept 2026 · Tags: Denial of service - [Openshift/console: authenticated ssrf with full response reflection and path neutralization via dev console webhook helpers in openshift console](https://agentprime.io/advisories/CVE-2026-50236.md) `CVE-2026-50236` · CVE record: Red Hat Red Hat OpenShift Container Platform 4.14 and 4 more · CVSS 7.4 High · Not analysed yet · Published 11 Aug 2026 · Tags: Server-side request forgery (SSRF) - [Openshift/console: namespace tenant ssrf with egress bypass, catalog poisoning, and admin-mediated supply chain escalation via projecthelmchartrepository in openshift console](https://agentprime.io/advisories/CVE-2026-50237.md) `CVE-2026-50237` · CVE record: Red Hat Red Hat OpenShift Container Platform 4.12 and 4 more · CVSS 7.4 High · Not analysed yet · Published 11 Aug 2026 · Tags: Server-side request forgery (SSRF) - [Sg3_utils: sg3_utils: arbitrary command execution via udev property injection in sg_inq --export](https://agentprime.io/advisories/CVE-2026-16313.md) `CVE-2026-16313` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.6 High · Not analysed yet · Published 28 Jul 2026 · Tags: Other injection - [Openshift/oauth-proxy: openshift/oauth-proxy: underscore header smuggling enables identity impersonation on wsgi/php upstreams](https://agentprime.io/advisories/CVE-2026-49332.md) `CVE-2026-49332` · CVE record: Red Hat Red Hat OpenShift Container Platform 4.12 and 4 more · CVSS 8.5 High · Not analysed yet · Published 28 Jul 2026 · Tags: CWE-436 - [Hypershift: konnectivity proxy-server accepts agent connections without validating client certificates](https://agentprime.io/advisories/CVE-2026-16242.md) `CVE-2026-16242` · CVE record: Red Hat multicluster engine for Kubernetes 2.1 and 4 more · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Jul 2026 · Tags: Authentication bypass - [Github.com/cri-o/cri-o: fix bypass for cve-2022-4318 — /etc/passwd injection via home env](https://agentprime.io/advisories/CVE-2026-15809.md) `CVE-2026-15809` · CVE record: Red Hat Red Hat OpenShift Container Platform 4.12 and 4 more · CVSS 7.8 High · Not analysed yet · Published 15 Jul 2026 · Tags: Memory corruption, CWE-116 - [Libarchive: double-free vulnerability in rar5 decompression logic via dangling filtered_buf pointer in init_unpack()](https://agentprime.io/advisories/CVE-2026-14164.md) `CVE-2026-14164` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 30 Jun 2026 · Tags: Memory corruption - [Ose-cluster-ingress-operator: remote code execution through haproxy configuration injection](https://agentprime.io/advisories/CVE-2026-1784.md) `CVE-2026-1784` · CVE record: Red Hat Red Hat OpenShift Container Platform 4.12 and 4 more · CVSS 8.8 High · Not analysed yet · Published 2 Jun 2026 · Tags: CWE-15 - [Openshift/router: openshift/router: cloud metadata ssrf via fqdn-typed endpointslice bypasses destination validation](https://agentprime.io/advisories/CVE-2026-42965.md) `CVE-2026-42965` · CVE record: Red Hat Red Hat OpenShift Container Platform 4.17 and 4 more · CVSS 7.7 High · Not analysed yet · Published 29 May 2026 · Tags: Server-side request forgery (SSRF) - [Openshift/router: openshift/router: mtls client certificate spoofing via unstripped x-ssl-client headers on http frontend](https://agentprime.io/advisories/CVE-2026-46579.md) `CVE-2026-46579` · CVE record: Red Hat Red Hat OpenShift Container Platform 4.12 and 4 more · CVSS 7.4 High · Not analysed yet · Published 29 May 2026 · Tags: Authentication bypass - [Samba: missing access check on reparse point operations](https://agentprime.io/advisories/CVE-2026-1933.md) `CVE-2026-1933` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.1 High · Not analysed yet · Published 27 May 2026 · Tags: Broken access control - [Samba: vfs_worm does not block directory modification](https://agentprime.io/advisories/CVE-2026-2340.md) `CVE-2026-2340` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 27 May 2026 · Tags: CWE-280 - [Samba: group policy certificate enrollment uses http\:// without validation](https://agentprime.io/advisories/CVE-2026-3012.md) `CVE-2026-3012` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.0 High · Not analysed yet · Published 27 May 2026 · Tags: CWE-345 - [Gnutls: gnutls: certificate validation bypass due to oversized subject alternative name](https://agentprime.io/advisories/CVE-2026-42013.md) `CVE-2026-42013` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.2 High · Not analysed yet · Published 26 May 2026 · Tags: Weak cryptography or TLS - [Gnutls: gnutls: information disclosure via heap overread in rsa key exchange](https://agentprime.io/advisories/CVE-2026-5260.md) `CVE-2026-5260` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.2 High · Not analysed yet · Published 26 May 2026 · Tags: CWE-126 - [Gnutls: gnutls: security bypass due to incorrect name constraint handling](https://agentprime.io/advisories/CVE-2026-42011.md) `CVE-2026-42011` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.4 High · Not analysed yet · Published 7 May 2026 · Tags: Weak cryptography or TLS - [Gnutls: gnutls: authentication bypass via nul character in username](https://agentprime.io/advisories/CVE-2026-42010.md) `CVE-2026-42010` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.1 High · Not analysed yet · Published 7 May 2026 · Tags: CWE-170, CWE-626 - [Libcap: libcap: privilege escalation via toctou race condition in cap_set_file()](https://agentprime.io/advisories/CVE-2026-4878.md) `CVE-2026-4878` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 9 Apr 2026 · Tags: Race condition - [Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchive](https://agentprime.io/advisories/CVE-2026-4111.md) `CVE-2026-4111` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 13 Mar 2026 · Tags: Denial of service - [Nfs-utils: rpc.mountd in the nfs-utils privilege escalation](https://agentprime.io/advisories/CVE-2025-12801.md) `CVE-2025-12801` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 4 Mar 2026 · Tags: CWE-279 - [Qemu-kvm: vnc websocket handshake use-after-free](https://agentprime.io/advisories/CVE-2025-11234.md) `CVE-2025-11234` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 3 Oct 2025 · Tags: Memory corruption - [Libssh: invalid return code for chacha20 poly1305 with openssl backend](https://agentprime.io/advisories/CVE-2025-5987.md) `CVE-2025-5987` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.1 High · Not analysed yet · Published 7 Jul 2025 · Tags: CWE-393 - [Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c](https://agentprime.io/advisories/CVE-2025-5914.md) `CVE-2025-5914` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Jun 2025 · Tags: Memory corruption - [Icu: stack buffer overflow in the srbroot::addtag function](https://agentprime.io/advisories/CVE-2025-5222.md) `CVE-2025-5222` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.0 High · Not analysed yet · Published 27 May 2025 · Tags: Memory corruption - [Openshift-api: openshift-controller-manager/build: build process in openshift allows overwriting of node pull credentials](https://agentprime.io/advisories/CVE-2024-45497.md) `CVE-2024-45497` · CVE record: Red Hat Red Hat OpenShift Container Platform 4.12 and 4 more · CVSS 7.6 High · Not analysed yet · Published 31 Dec 2024 · Tags: Broken access control - [Ose-olm-catalogd-container: incomplete fix for rapid reset (cve-2023-39325/cve-2023-44487)](https://agentprime.io/advisories/CVE-2024-12698.md) `CVE-2024-12698` · CVE record: Red Hat Red Hat OpenShift Container Platform 4.18 · CVSS 6.5 Medium · Not analysed yet · Published 18 Dec 2024 · Tags: Denial of service - [Pam: improper hostname interpretation in pam_access leads to access control bypass](https://agentprime.io/advisories/CVE-2024-10963.md) `CVE-2024-10963` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.4 High · Not analysed yet · Published 7 Nov 2024 · Tags: Authentication bypass - [Graphql: denial of service (dos) vulnerability via graphql batching](https://agentprime.io/advisories/CVE-2024-50311.md) `CVE-2024-50311` · CVE record: Red Hat Red Hat OpenShift Container Platform 4.18 · CVSS 6.5 Medium · Not analysed yet · Published 22 Oct 2024 · Tags: Denial of service - [Podman: buildah: cri-o: symlink traversal vulnerability in the containers/storage library can cause denial of service (dos)](https://agentprime.io/advisories/CVE-2024-9676.md) `CVE-2024-9676` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 15 Oct 2024 · Tags: Path traversal - [Openshift-console: unauthenticated data exposure](https://agentprime.io/advisories/CVE-2024-7128.md) `CVE-2024-7128` · CVE record: Red Hat Red Hat OpenShift Container Platform 4.16 and 3 more · CVSS 5.3 Medium · Not analysed yet · Published 26 Jul 2024 · Tags: Information disclosure ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .