# Red Hat OpenShift Container Platform 5. Every CVE that names Red Hat OpenShift Container Platform 5 among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first - [Image-customization-controller: unauthenticated plaintext image server with directory listing exposes ignition images containing cluster pull secret](https://agentprime.io/advisories/CVE-2026-82976.md) `CVE-2026-82976` · CVE record: Red Hat Red Hat OpenShift Container Platform 4 and 1 more · CVSS 7.1 High · Not analysed yet · Published 3 Nov 2026 · Tags: CWE-548 - [Libslirp: libslirp: queue pointer corruption in if_output() leading to denial of service](https://agentprime.io/advisories/CVE-2026-120831.md) `CVE-2026-120831` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 3 Nov 2026 · Tags: Memory corruption - [Libslirp: libslirp: out-of-bounds heap read in icmp_forward_error() leading to information disclosure](https://agentprime.io/advisories/CVE-2026-120830.md) `CVE-2026-120830` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.4 High · Not analysed yet · Published 3 Nov 2026 · Tags: Memory corruption - [Json-glib: json-glib: infinite loop in json_path_query() with negative jsonpath slice step](https://agentprime.io/advisories/CVE-2026-120194.md) `CVE-2026-120194` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 31 Oct 2026 · Tags: Denial of service - [Gcc: out-of-bounds read in std::from_chars](https://agentprime.io/advisories/CVE-2026-115456.md) `CVE-2026-115456` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 3.7 Low · Not analysed yet · Published 30 Oct 2026 · Tags: Memory corruption - [Gcc: stack overflow in std::bitset on libstdc++](https://agentprime.io/advisories/CVE-2026-115455.md) `CVE-2026-115455` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 30 Oct 2026 · Tags: Memory corruption - [Gcc: integer wrap in \`std](https://agentprime.io/advisories/CVE-2026-114691.md) `CVE-2026-114691` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 30 Oct 2026 · Tags: Memory corruption - [Gcc: confirmed out-of-bounds read/write in libstdc++ parallel \`std](https://agentprime.io/advisories/CVE-2026-114690.md) `CVE-2026-114690` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 30 Oct 2026 · Tags: Memory corruption - [Kernel: local_bh imbalance in seg6_input_core() drop path (incomplete fix for cve-2026-46099)](https://agentprime.io/advisories/CVE-2026-118593.md) `CVE-2026-118593` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 30 Oct 2026 · Tags: CWE-667 - [Openshift-ansible: openshift-ansible: installer container downloads and executes remote inventory script without integrity verification](https://agentprime.io/advisories/CVE-2026-92092.md) `CVE-2026-92092` · CVE record: Red Hat Red Hat OpenShift Container Platform 4 and 1 more · CVSS 7.4 High · Not analysed yet · Published 29 Oct 2026 · Tags: CWE-494 - [Dnsmasq: dnsmasq: heap out-of-bounds read in dhcpv6 option 39 fqdn decoder](https://agentprime.io/advisories/CVE-2026-93009.md) `CVE-2026-93009` · CVE record: Red Hat Red Hat Ceph Storage 9 and 4 more · CVSS 4.3 Medium · Not analysed yet · Published 29 Oct 2026 · Tags: Memory corruption - [Dnsmasq: dnsmasq: --leasequery without address argument applies no source address check](https://agentprime.io/advisories/CVE-2026-93010.md) `CVE-2026-93010` · CVE record: Red Hat Red Hat Ceph Storage 9 and 4 more · CVSS 4.3 Medium · Not analysed yet · Published 29 Oct 2026 · Tags: Broken access control - [Dnsmasq: dnsmasq: tftp prefetch cache keyed on stale heap pointer serves wrong file content](https://agentprime.io/advisories/CVE-2026-93006.md) `CVE-2026-93006` · CVE record: Red Hat Red Hat Ceph Storage 9 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 29 Oct 2026 · Tags: CWE-672 - [Dnsmasq: dnsmasq: tcp/53 child-slot exhaustion starves dnssec validation](https://agentprime.io/advisories/CVE-2026-93007.md) `CVE-2026-93007` · CVE record: Red Hat Red Hat Ceph Storage 9 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 29 Oct 2026 · Tags: Denial of service - [Dnsmasq: dnsmasq: heap out-of-bounds write in dnssec validator via to_wire/from_wire transforms](https://agentprime.io/advisories/CVE-2026-93011.md) `CVE-2026-93011` · CVE record: Red Hat Red Hat Ceph Storage 9 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 29 Oct 2026 · Tags: Memory corruption - [Dnsmasq: dnsmasq: out-of-bailiwick cache injection through cname chase in split-dns configurations](https://agentprime.io/advisories/CVE-2026-93008.md) `CVE-2026-93008` · CVE record: Red Hat Red Hat Ceph Storage 9 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 29 Oct 2026 · Tags: CWE-345 - [Polkit: regression in cve-2026-4897 fix (polkit read_cookie()) - stack buffer underflow](https://agentprime.io/advisories/CVE-2026-85498.md) `CVE-2026-85498` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 3.5 Low · Not analysed yet · Published 29 Oct 2026 · Tags: Memory corruption - [Samba: access control bypass via vfs_ceph_rgw case-insensitive open](https://agentprime.io/advisories/CVE-2026-109411.md) `CVE-2026-109411` · CVE record: Samba Samba and 4 more · CVSS 8.1 High · Not analysed yet · Published 28 Oct 2026 · Tags: CWE-178 - [Gssproxy: gssproxy: null pointer dereference in gssx_init_sec_context crashes daemon](https://agentprime.io/advisories/CVE-2026-116497.md) `CVE-2026-116497` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 26 Oct 2026 · Tags: Memory corruption - [Oc: oc: symlink/hardlink target validation bypass in oc image extract allows file write outside destination](https://agentprime.io/advisories/CVE-2026-115424.md) `CVE-2026-115424` · CVE record: Red Hat Red Hat OpenShift Container Platform 4 and 1 more · CVSS 5.5 Medium · Not analysed yet · Published 22 Oct 2026 · Tags: CWE-61 - [Podman: goroutine/file-descriptor leak in storage/pkg/archive.applylayer and applyuncompressedlayer on malformed layers](https://agentprime.io/advisories/CVE-2026-114236.md) `CVE-2026-114236` · CVE record: Red Hat Confidential Compute Attestation and 4 more · CVSS 3.3 Low · Not analysed yet · Published 21 Oct 2026 · Tags: Denial of service - [Libmodulemd: libmodulemd: out-of-bounds read when emitting rpm-map artifacts](https://agentprime.io/advisories/CVE-2026-92824.md) `CVE-2026-92824` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 21 Oct 2026 · Tags: Memory corruption - [Libmodulemd: libmodulemd: unbounded recursion when parsing nested xmd yaml](https://agentprime.io/advisories/CVE-2026-92822.md) `CVE-2026-92822` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 21 Oct 2026 · Tags: Denial of service - [Libmodulemd: libmodulemd: missing decompressed-size limit when parsing compressed yaml](https://agentprime.io/advisories/CVE-2026-92823.md) `CVE-2026-92823` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 21 Oct 2026 · Tags: CWE-409 - [Device-mapper-multipath: device-mapper-multipath: information disclosure via malformed format string](https://agentprime.io/advisories/CVE-2026-114038.md) `CVE-2026-114038` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.1 Medium · Not analysed yet · Published 21 Oct 2026 · Tags: Memory corruption - [Bootc: ostree: bootc/ostree: staged deployments not revalidated against container signature policy before finalization](https://agentprime.io/advisories/CVE-2026-16460.md) `CVE-2026-16460` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.4 High · Not analysed yet · Published 19 Oct 2026 · Tags: CWE-345 - [Libtirpc: libtirpc: denial of service via unbounded memory allocation during rpcsec_gss decoding](https://agentprime.io/advisories/CVE-2026-85231.md) `CVE-2026-85231` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 16 Oct 2026 · Tags: Denial of service - [Luksmeta: missing slot-range validation permits out-of-gap device i/o](https://agentprime.io/advisories/CVE-2026-111555.md) `CVE-2026-111555` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.0 Medium · Not analysed yet · Published 16 Oct 2026 · Tags: CWE-1285 - [Cifs-utils: mount.cifs credential-file option injection allows local privilege boundary bypass](https://agentprime.io/advisories/CVE-2026-104715.md) `CVE-2026-104715` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 16 Oct 2026 · Tags: Command injection - [Ansible-operator-plugins: ansible operator plugins: arbitrary code execution via jinja2 template injection](https://agentprime.io/advisories/CVE-2026-92982.md) `CVE-2026-92982` · CVE record: Red Hat Red Hat Ansible Automation Platform 2.6 and 4 more · CVSS 8.5 High · Not analysed yet · Published 15 Oct 2026 · Tags: Code injection - [Clevis: clevis: pkcs#11 luks passphrase logged in plaintext to world-readable file](https://agentprime.io/advisories/CVE-2026-109968.md) `CVE-2026-109968` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Information disclosure - [Insights-runtime-extractor: insights-runtime-extractor: container escape via privileged binary execution](https://agentprime.io/advisories/CVE-2026-104795.md) `CVE-2026-104795` · CVE record: Red Hat Red Hat OpenShift Container Platform 4.19 and 4 more · CVSS 8.8 High · Not analysed yet · Published 14 Oct 2026 · Tags: Privilege escalation - [Clevis: clevis: pkcs#11 token pin exposed on command line via pkcs11-tool](https://agentprime.io/advisories/CVE-2026-109971.md) `CVE-2026-109971` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: CWE-214 - [Clevis: clevis: pkcs#11 token pin written to world-readable file](https://agentprime.io/advisories/CVE-2026-109970.md) `CVE-2026-109970` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Information disclosure - [Clevis: clevis: no authentication on pkcs#11 af_unix sockets allows key injection under permissive umask](https://agentprime.io/advisories/CVE-2026-109969.md) `CVE-2026-109969` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Authentication bypass - [Clevis: clevis: integer underflow in pkcs#11 data socket handler crashes daemon on unbound client connection](https://agentprime.io/advisories/CVE-2026-109976.md) `CVE-2026-109976` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption - [Openshift/console: openshift/console: authenticated ssrf via helm chart url fetch](https://agentprime.io/advisories/CVE-2026-75888.md) `CVE-2026-75888` · CVE record: Red Hat Red Hat OpenShift Container Platform 4.12 and 4 more · CVSS 7.7 High · Not analysed yet · Published 12 Oct 2026 · Tags: Server-side request forgery (SSRF) - [Gvisor-tap-vsock: gvisor-tap-vsock: unathenticated arbitrary file deletion on the host via /expose](https://agentprime.io/advisories/CVE-2026-107935.md) `CVE-2026-107935` · CVE record: Red Hat Red Hat Build of Podman Desktop and 4 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Oct 2026 · Tags: Path traversal - [Ansible-core: ansible-core: ansible-galaxy collection install symlink path escape allows arbitrary file write / code execution](https://agentprime.io/advisories/CVE-2026-89091.md) `CVE-2026-89091` · CVE record: Red Hat Migration Toolkit for Applications 8 and 4 more · CVSS 8.8 High · Not analysed yet · Published 8 Oct 2026 · Tags: Path traversal - [Luksmeta: incomplete gap-boundary and overlap checks in luks1 metadata allocator allow data corruption](https://agentprime.io/advisories/CVE-2026-107565.md) `CVE-2026-107565` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.1 Medium · Not analysed yet · Published 8 Oct 2026 · Tags: CWE-1284 - [Insights-operator: gather serviceaccount has cluster-wide secret read plus nodes/proxy and cluster-reader](https://agentprime.io/advisories/CVE-2026-93017.md) `CVE-2026-93017` · CVE record: Red Hat Red Hat OpenShift Container Platform 4.12 and 4 more · CVSS 7.7 High · Not analysed yet · Published 8 Oct 2026 · Tags: Privilege escalation - [Cluster-samples-operator: role reads all secrets in openshift-config, not just pull-secret](https://agentprime.io/advisories/CVE-2026-107176.md) `CVE-2026-107176` · CVE record: Red Hat Red Hat OpenShift Container Platform 4.19 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: Privilege escalation - [Cyrus-sasl: heap buffer overflow in cyrus-sasl add_to_challenge() allows malicious server to crash or compromise digest-md5 clients](https://agentprime.io/advisories/CVE-2026-107161.md) `CVE-2026-107161` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 7 Oct 2026 · Tags: Memory corruption - [Sssd: sssd: denial of service via race condition in autofs responder](https://agentprime.io/advisories/CVE-2026-104045.md) `CVE-2026-104045` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Denial of service - [Sssd: sssd: denial of service via incomplete identity provider authentication requests](https://agentprime.io/advisories/CVE-2026-104046.md) `CVE-2026-104046` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Denial of service - [Sssd: sssd: authorization bypass via cross-domain username collision in hbac evaluation](https://agentprime.io/advisories/CVE-2026-104048.md) `CVE-2026-104048` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: CWE-1025 - [Sssd: sssd: information disclosure via query injection in entra id lookups](https://agentprime.io/advisories/CVE-2026-104047.md) `CVE-2026-104047` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: CWE-140 - [Sssd: sssd: denial of service via crafted passkey kerberos authentication request](https://agentprime.io/advisories/CVE-2026-104044.md) `CVE-2026-104044` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Memory corruption - [Sssd: sssd: denial of service via undersized packet parsing in nss responder](https://agentprime.io/advisories/CVE-2026-104043.md) `CVE-2026-104043` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Memory corruption - [Sssd: sssd: denial of service via out-of-bounds read in pam responder](https://agentprime.io/advisories/CVE-2026-104042.md) `CVE-2026-104042` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Memory corruption - [Sssd: sssd: denial of service via unbounded negative cache growth](https://agentprime.io/advisories/CVE-2026-104041.md) `CVE-2026-104041` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Denial of service - [Sssd: sssd: information disclosure via odata injection in entra id lookups](https://agentprime.io/advisories/CVE-2026-104040.md) `CVE-2026-104040` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.4 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: CWE-140 - [Sssd: sssd: denial of service via stale connection state reuse in pam gssapi responder](https://agentprime.io/advisories/CVE-2026-104039.md) `CVE-2026-104039` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Memory corruption - [Sssd: sssd: denial of service via missing sid extension in certificate mapping](https://agentprime.io/advisories/CVE-2026-104038.md) `CVE-2026-104038` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Memory corruption - [Sssd: sssd: denial of service via packet length underflow in autofs responder](https://agentprime.io/advisories/CVE-2026-104037.md) `CVE-2026-104037` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Memory corruption - [Sssd: sssd: denial of service via out-of-bounds write in nfs idmap plugin](https://agentprime.io/advisories/CVE-2026-104036.md) `CVE-2026-104036` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.8 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Memory corruption - [Sssd: sssd: denial of service via memory exhaustion in kcm responder](https://agentprime.io/advisories/CVE-2026-104035.md) `CVE-2026-104035` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Denial of service - [Sssd: sssd: denial of service via use-after-free in kcm ticket renewal](https://agentprime.io/advisories/CVE-2026-104034.md) `CVE-2026-104034` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Memory corruption - [Sssd: sssd: access control bypass via improper ldap shadow expiration check](https://agentprime.io/advisories/CVE-2026-104033.md) `CVE-2026-104033` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.4 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: CWE-193 - [Sssd: sssd: denial of service via unprivileged autofs cache invalidation](https://agentprime.io/advisories/CVE-2026-104032.md) `CVE-2026-104032` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: CWE-408 Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .