# Red Hat OpenShift Container Platform 4.20. Every CVE that names Red Hat OpenShift Container Platform 4.20 among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first - [Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns](https://agentprime.io/advisories/CVE-2026-114406.md) `CVE-2026-114406` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 21 Oct 2026 · Tags: Weak cryptography or TLS - [Insights-runtime-extractor: insights-runtime-extractor: container escape via privileged binary execution](https://agentprime.io/advisories/CVE-2026-104795.md) `CVE-2026-104795` · CVE record: Red Hat Red Hat OpenShift Container Platform 4.19 and 4 more · CVSS 8.8 High · Not analysed yet · Published 14 Oct 2026 · Tags: Privilege escalation - [Openshift/console: openshift/console: authenticated ssrf via helm chart url fetch](https://agentprime.io/advisories/CVE-2026-75888.md) `CVE-2026-75888` · CVE record: Red Hat Red Hat OpenShift Container Platform 4.12 and 4 more · CVSS 7.7 High · Not analysed yet · Published 12 Oct 2026 · Tags: Server-side request forgery (SSRF) - [Insights-operator: gather serviceaccount has cluster-wide secret read plus nodes/proxy and cluster-reader](https://agentprime.io/advisories/CVE-2026-93017.md) `CVE-2026-93017` · CVE record: Red Hat Red Hat OpenShift Container Platform 4.12 and 4 more · CVSS 7.7 High · Not analysed yet · Published 8 Oct 2026 · Tags: Privilege escalation - [Cluster-samples-operator: role reads all secrets in openshift-config, not just pull-secret](https://agentprime.io/advisories/CVE-2026-107176.md) `CVE-2026-107176` · CVE record: Red Hat Red Hat OpenShift Container Platform 4.19 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: Privilege escalation - [Oc-mirror\_\_release-4.21: embedded local cache registry listens on all interfaces without authentication, with delete enabled](https://agentprime.io/advisories/CVE-2026-96577.md) `CVE-2026-96577` · CVE record: Red Hat Red Hat OpenShift Container Platform 4.18 and 4 more · CVSS 7.1 High · Not analysed yet · Published 1 Oct 2026 · Tags: Authentication bypass - [Oauth-proxy: open redirect via /\ and /\t bypass in post-login redirect](https://agentprime.io/advisories/CVE-2026-83589.md) `CVE-2026-83589` · CVE record: Red Hat Red Hat OpenShift Container Platform 4.12 and 4 more · CVSS 6.1 Medium · Not analysed yet · Published 1 Oct 2026 · Tags: Open redirect - [Kube-compare: container:// reference extraction runs the image entrypoint and silently escalates to sudo](https://agentprime.io/advisories/CVE-2026-87114.md) `CVE-2026-87114` · CVE record: Red Hat Red Hat OpenShift Container Platform 4.19 and 4 more · CVSS 7.1 High · Not analysed yet · Published 28 Sept 2026 · Tags: CWE-829 - [Openshift/console: openshift/console: unauthenticated path traversal in i18n locale handler](https://agentprime.io/advisories/CVE-2026-75887.md) `CVE-2026-75887` · CVE record: Red Hat Red Hat OpenShift Container Platform 4.12 and 4 more · CVSS 7.5 High · Not analysed yet · Published 23 Sept 2026 · Tags: Path traversal - [Openshift/console: openshift/console: unauthenticated reverse proxy to in-cluster catalogd service with session token forwarding](https://agentprime.io/advisories/CVE-2026-75886.md) `CVE-2026-75886` · CVE record: Red Hat Red Hat OpenShift Container Platform 4.17 and 4 more · CVSS 7.2 High · Not analysed yet · Published 23 Sept 2026 · Tags: CWE-441 - [Openshift/console: openshift/console: unauthenticated ssrf and resource exhaustion via devfile parser endpoint](https://agentprime.io/advisories/CVE-2026-75885.md) `CVE-2026-75885` · CVE record: Red Hat Red Hat OpenShift Container Platform 4.12 and 4 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Sept 2026 · Tags: Server-side request forgery (SSRF) - [Openshift/oauth-server: openshift/oauth-server: quadratic-time dos via accept-language header underscore bypass on unauthenticated login endpoints](https://agentprime.io/advisories/CVE-2026-49329.md) `CVE-2026-49329` · CVE record: Red Hat Red Hat OpenShift Container Platform 4.14 and 4 more · CVSS 7.5 High · Not analysed yet · Published 1 Sept 2026 · Tags: Denial of service - [Openshift/console: authenticated ssrf with full response reflection and path neutralization via dev console webhook helpers in openshift console](https://agentprime.io/advisories/CVE-2026-50236.md) `CVE-2026-50236` · CVE record: Red Hat Red Hat OpenShift Container Platform 4.14 and 4 more · CVSS 7.4 High · Not analysed yet · Published 11 Aug 2026 · Tags: Server-side request forgery (SSRF) - [Openshift/console: namespace tenant ssrf with egress bypass, catalog poisoning, and admin-mediated supply chain escalation via projecthelmchartrepository in openshift console](https://agentprime.io/advisories/CVE-2026-50237.md) `CVE-2026-50237` · CVE record: Red Hat Red Hat OpenShift Container Platform 4.12 and 4 more · CVSS 7.4 High · Not analysed yet · Published 11 Aug 2026 · Tags: Server-side request forgery (SSRF) - [Sg3_utils: sg3_utils: arbitrary command execution via udev property injection in sg_inq --export](https://agentprime.io/advisories/CVE-2026-16313.md) `CVE-2026-16313` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.6 High · Not analysed yet · Published 28 Jul 2026 · Tags: Other injection - [Openshift/oauth-proxy: openshift/oauth-proxy: underscore header smuggling enables identity impersonation on wsgi/php upstreams](https://agentprime.io/advisories/CVE-2026-49332.md) `CVE-2026-49332` · CVE record: Red Hat Red Hat OpenShift Container Platform 4.12 and 4 more · CVSS 8.5 High · Not analysed yet · Published 28 Jul 2026 · Tags: CWE-436 - [Hypershift: konnectivity proxy-server accepts agent connections without validating client certificates](https://agentprime.io/advisories/CVE-2026-16242.md) `CVE-2026-16242` · CVE record: Red Hat multicluster engine for Kubernetes 2.1 and 4 more · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Jul 2026 · Tags: Authentication bypass - [Github.com/cri-o/cri-o: fix bypass for cve-2022-4318 — /etc/passwd injection via home env](https://agentprime.io/advisories/CVE-2026-15809.md) `CVE-2026-15809` · CVE record: Red Hat Red Hat OpenShift Container Platform 4.12 and 4 more · CVSS 7.8 High · Not analysed yet · Published 15 Jul 2026 · Tags: Memory corruption, CWE-116 - [Libarchive: double-free vulnerability in rar5 decompression logic via dangling filtered_buf pointer in init_unpack()](https://agentprime.io/advisories/CVE-2026-14164.md) `CVE-2026-14164` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 30 Jun 2026 · Tags: Memory corruption - [Ose-cluster-ingress-operator: remote code execution through haproxy configuration injection](https://agentprime.io/advisories/CVE-2026-1784.md) `CVE-2026-1784` · CVE record: Red Hat Red Hat OpenShift Container Platform 4.12 and 4 more · CVSS 8.8 High · Not analysed yet · Published 2 Jun 2026 · Tags: CWE-15 - [Openshift/router: openshift/router: cloud metadata ssrf via fqdn-typed endpointslice bypasses destination validation](https://agentprime.io/advisories/CVE-2026-42965.md) `CVE-2026-42965` · CVE record: Red Hat Red Hat OpenShift Container Platform 4.17 and 4 more · CVSS 7.7 High · Not analysed yet · Published 29 May 2026 · Tags: Server-side request forgery (SSRF) - [Openshift/router: openshift/router: mtls client certificate spoofing via unstripped x-ssl-client headers on http frontend](https://agentprime.io/advisories/CVE-2026-46579.md) `CVE-2026-46579` · CVE record: Red Hat Red Hat OpenShift Container Platform 4.12 and 4 more · CVSS 7.4 High · Not analysed yet · Published 29 May 2026 · Tags: Authentication bypass - [Samba: missing access check on reparse point operations](https://agentprime.io/advisories/CVE-2026-1933.md) `CVE-2026-1933` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.1 High · Not analysed yet · Published 27 May 2026 · Tags: Broken access control - [Gnutls: gnutls: certificate validation bypass due to oversized subject alternative name](https://agentprime.io/advisories/CVE-2026-42013.md) `CVE-2026-42013` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.2 High · Not analysed yet · Published 26 May 2026 · Tags: Weak cryptography or TLS - [Gnutls: gnutls: certificate validation bypass due to improper handling of uri and srv sans](https://agentprime.io/advisories/CVE-2026-42012.md) `CVE-2026-42012` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.1 High · Not analysed yet · Published 26 May 2026 · Tags: Weak cryptography or TLS - [Gnutls: gnutls: security bypass due to incorrect name constraint handling](https://agentprime.io/advisories/CVE-2026-42011.md) `CVE-2026-42011` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.4 High · Not analysed yet · Published 7 May 2026 · Tags: Weak cryptography or TLS - [Libssh: invalid return code for chacha20 poly1305 with openssl backend](https://agentprime.io/advisories/CVE-2025-5987.md) `CVE-2025-5987` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.1 High · Not analysed yet · Published 7 Jul 2025 · Tags: CWE-393 - [Icu: stack buffer overflow in the srbroot::addtag function](https://agentprime.io/advisories/CVE-2025-5222.md) `CVE-2025-5222` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.0 High · Not analysed yet · Published 27 May 2025 · Tags: Memory corruption - [Openshift-api: openshift-controller-manager/build: build process in openshift allows overwriting of node pull credentials](https://agentprime.io/advisories/CVE-2024-45497.md) `CVE-2024-45497` · CVE record: Red Hat Red Hat OpenShift Container Platform 4.12 and 4 more · CVSS 7.6 High · Not analysed yet · Published 31 Dec 2024 · Tags: Broken access control ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .