agentprime: red-hat-openshift-container-platform-5Every new CVE for red-hat-openshift-container-platform-5.https://agentprime.io/CVE-2026-82976: Image-customization-controller: unauthenticated plaintext image server with directory listing exposes ignition images containing cluster pull secrethttps://agentprime.io/advisories/CVE-2026-82976/https://agentprime.io/advisories/CVE-2026-82976/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 18:36:24 GMTCVECVE-2026-120831: Libslirp: libslirp: queue pointer corruption in if_output() leading to denial of servicehttps://agentprime.io/advisories/CVE-2026-120831/https://agentprime.io/advisories/CVE-2026-120831/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 01:55:20 GMTCVECVE-2026-120830: Libslirp: libslirp: out-of-bounds heap read in icmp_forward_error() leading to information disclosurehttps://agentprime.io/advisories/CVE-2026-120830/https://agentprime.io/advisories/CVE-2026-120830/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 00:00:35 GMTCVECVE-2026-120194: Json-glib: json-glib: infinite loop in json_path_query() with negative jsonpath slice stephttps://agentprime.io/advisories/CVE-2026-120194/https://agentprime.io/advisories/CVE-2026-120194/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 31 Oct 2026 10:11:47 GMTCVECVE-2026-115456: Gcc: out-of-bounds read in std::from_charshttps://agentprime.io/advisories/CVE-2026-115456/https://agentprime.io/advisories/CVE-2026-115456/CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 08:21:50 GMTCVECVE-2026-115455: Gcc: stack overflow in std::bitset on libstdc++https://agentprime.io/advisories/CVE-2026-115455/https://agentprime.io/advisories/CVE-2026-115455/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 07:13:06 GMTCVECVE-2026-114691: Gcc: integer wrap in `stdhttps://agentprime.io/advisories/CVE-2026-114691/https://agentprime.io/advisories/CVE-2026-114691/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 07:13:05 GMTCVECVE-2026-114690: Gcc: confirmed out-of-bounds read/write in libstdc++ parallel `stdhttps://agentprime.io/advisories/CVE-2026-114690/https://agentprime.io/advisories/CVE-2026-114690/CVSS 6.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 07:13:04 GMTCVECVE-2026-118593: Kernel: local_bh imbalance in seg6_input_core() drop path (incomplete fix for cve-2026-46099)https://agentprime.io/advisories/CVE-2026-118593/https://agentprime.io/advisories/CVE-2026-118593/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 06:41:50 GMTCVECVE-2026-92092: Openshift-ansible: openshift-ansible: installer container downloads and executes remote inventory script without integrity verificationhttps://agentprime.io/advisories/CVE-2026-92092/https://agentprime.io/advisories/CVE-2026-92092/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 29 Oct 2026 19:51:44 GMTCVECVE-2026-93009: Dnsmasq: dnsmasq: heap out-of-bounds read in dhcpv6 option 39 fqdn decoderhttps://agentprime.io/advisories/CVE-2026-93009/https://agentprime.io/advisories/CVE-2026-93009/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 29 Oct 2026 13:13:34 GMTCVECVE-2026-93010: Dnsmasq: dnsmasq: --leasequery without address argument applies no source address checkhttps://agentprime.io/advisories/CVE-2026-93010/https://agentprime.io/advisories/CVE-2026-93010/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 29 Oct 2026 13:13:23 GMTCVECVE-2026-93006: Dnsmasq: dnsmasq: tftp prefetch cache keyed on stale heap pointer serves wrong file contenthttps://agentprime.io/advisories/CVE-2026-93006/https://agentprime.io/advisories/CVE-2026-93006/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 29 Oct 2026 12:47:23 GMTCVECVE-2026-93007: Dnsmasq: dnsmasq: tcp/53 child-slot exhaustion starves dnssec validationhttps://agentprime.io/advisories/CVE-2026-93007/https://agentprime.io/advisories/CVE-2026-93007/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 29 Oct 2026 12:47:18 GMTCVECVE-2026-93011: Dnsmasq: dnsmasq: heap out-of-bounds write in dnssec validator via to_wire/from_wire transformshttps://agentprime.io/advisories/CVE-2026-93011/https://agentprime.io/advisories/CVE-2026-93011/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 29 Oct 2026 12:47:10 GMTCVECVE-2026-93008: Dnsmasq: dnsmasq: out-of-bailiwick cache injection through cname chase in split-dns configurationshttps://agentprime.io/advisories/CVE-2026-93008/https://agentprime.io/advisories/CVE-2026-93008/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 29 Oct 2026 12:33:22 GMTCVECVE-2026-85498: Polkit: regression in cve-2026-4897 fix (polkit read_cookie()) - stack buffer underflowhttps://agentprime.io/advisories/CVE-2026-85498/https://agentprime.io/advisories/CVE-2026-85498/CVSS 3.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.Thu, 29 Oct 2026 09:02:35 GMTCVECVE-2026-109411: Samba: access control bypass via vfs_ceph_rgw case-insensitive openhttps://agentprime.io/advisories/CVE-2026-109411/https://agentprime.io/advisories/CVE-2026-109411/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 19:17:45 GMTCVECVE-2026-116497: Gssproxy: gssproxy: null pointer dereference in gssx_init_sec_context crashes daemonhttps://agentprime.io/advisories/CVE-2026-116497/https://agentprime.io/advisories/CVE-2026-116497/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 26 Oct 2026 14:31:23 GMTCVECVE-2026-115424: Oc: oc: symlink/hardlink target validation bypass in oc image extract allows file write outside destinationhttps://agentprime.io/advisories/CVE-2026-115424/https://agentprime.io/advisories/CVE-2026-115424/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 22 Oct 2026 21:12:27 GMTCVECVE-2026-114236: Podman: goroutine/file-descriptor leak in storage/pkg/archive.applylayer and applyuncompressedlayer on malformed layershttps://agentprime.io/advisories/CVE-2026-114236/https://agentprime.io/advisories/CVE-2026-114236/CVSS 3.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 08:04:32 GMTCVECVE-2026-92824: Libmodulemd: libmodulemd: out-of-bounds read when emitting rpm-map artifactshttps://agentprime.io/advisories/CVE-2026-92824/https://agentprime.io/advisories/CVE-2026-92824/CVSS 6.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 03:18:41 GMTCVECVE-2026-92822: Libmodulemd: libmodulemd: unbounded recursion when parsing nested xmd yamlhttps://agentprime.io/advisories/CVE-2026-92822/https://agentprime.io/advisories/CVE-2026-92822/CVSS 6.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 03:18:37 GMTCVECVE-2026-92823: Libmodulemd: libmodulemd: missing decompressed-size limit when parsing compressed yamlhttps://agentprime.io/advisories/CVE-2026-92823/https://agentprime.io/advisories/CVE-2026-92823/CVSS 6.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 03:18:37 GMTCVECVE-2026-114038: Device-mapper-multipath: device-mapper-multipath: information disclosure via malformed format stringhttps://agentprime.io/advisories/CVE-2026-114038/https://agentprime.io/advisories/CVE-2026-114038/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 00:26:49 GMTCVECVE-2026-16460: Bootc: ostree: bootc/ostree: staged deployments not revalidated against container signature policy before finalizationhttps://agentprime.io/advisories/CVE-2026-16460/https://agentprime.io/advisories/CVE-2026-16460/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 06:40:50 GMTCVECVE-2026-89096: Nfs-utils: nfs-utils: denial of service via memory leak in rpc.statdhttps://agentprime.io/advisories/CVE-2026-89096/https://agentprime.io/advisories/CVE-2026-89096/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 Oct 2026 23:06:19 GMTCVECVE-2026-85977: Libtirpc: libtirpc: denial of service via unbounded memory allocation during portmapper response decodinghttps://agentprime.io/advisories/CVE-2026-85977/https://agentprime.io/advisories/CVE-2026-85977/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 Oct 2026 18:20:43 GMTCVECVE-2026-85231: Libtirpc: libtirpc: denial of service via unbounded memory allocation during rpcsec_gss decodinghttps://agentprime.io/advisories/CVE-2026-85231/https://agentprime.io/advisories/CVE-2026-85231/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 Oct 2026 18:20:40 GMTCVECVE-2026-89098: Nfs-utils: nfs-utils: denial of service via assertion failure in fsiddhttps://agentprime.io/advisories/CVE-2026-89098/https://agentprime.io/advisories/CVE-2026-89098/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 Oct 2026 17:43:21 GMTCVECVE-2026-111555: Luksmeta: missing slot-range validation permits out-of-gap device i/ohttps://agentprime.io/advisories/CVE-2026-111555/https://agentprime.io/advisories/CVE-2026-111555/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 Oct 2026 12:19:44 GMTCVECVE-2026-104715: Cifs-utils: mount.cifs credential-file option injection allows local privilege boundary bypasshttps://agentprime.io/advisories/CVE-2026-104715/https://agentprime.io/advisories/CVE-2026-104715/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 Oct 2026 06:47:10 GMTCVECVE-2026-92982: Ansible-operator-plugins: ansible operator plugins: arbitrary code execution via jinja2 template injectionhttps://agentprime.io/advisories/CVE-2026-92982/https://agentprime.io/advisories/CVE-2026-92982/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 15 Oct 2026 15:36:57 GMTCVECVE-2026-109968: Clevis: clevis: pkcs#11 luks passphrase logged in plaintext to world-readable filehttps://agentprime.io/advisories/CVE-2026-109968/https://agentprime.io/advisories/CVE-2026-109968/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 12:50:33 GMTCVECVE-2026-104795: Insights-runtime-extractor: insights-runtime-extractor: container escape via privileged binary executionhttps://agentprime.io/advisories/CVE-2026-104795/https://agentprime.io/advisories/CVE-2026-104795/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 10:55:17 GMTCVECVE-2026-109971: Clevis: clevis: pkcs#11 token pin exposed on command line via pkcs11-toolhttps://agentprime.io/advisories/CVE-2026-109971/https://agentprime.io/advisories/CVE-2026-109971/CVSS 4.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 10:01:05 GMTCVECVE-2026-109970: Clevis: clevis: pkcs#11 token pin written to world-readable filehttps://agentprime.io/advisories/CVE-2026-109970/https://agentprime.io/advisories/CVE-2026-109970/CVSS 4.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 10:01:01 GMTCVECVE-2026-109969: Clevis: clevis: no authentication on pkcs#11 af_unix sockets allows key injection under permissive umaskhttps://agentprime.io/advisories/CVE-2026-109969/https://agentprime.io/advisories/CVE-2026-109969/CVSS 4.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 10:00:57 GMTCVECVE-2026-109976: Clevis: clevis: integer underflow in pkcs#11 data socket handler crashes daemon on unbound client connectionhttps://agentprime.io/advisories/CVE-2026-109976/https://agentprime.io/advisories/CVE-2026-109976/CVSS 4.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 12:17:05 GMTCVECVE-2026-75888: Openshift/console: openshift/console: authenticated ssrf via helm chart url fetchhttps://agentprime.io/advisories/CVE-2026-75888/https://agentprime.io/advisories/CVE-2026-75888/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 16:36:04 GMTCVECVE-2026-107935: Gvisor-tap-vsock: gvisor-tap-vsock: unathenticated arbitrary file deletion on the host via /exposehttps://agentprime.io/advisories/CVE-2026-107935/https://agentprime.io/advisories/CVE-2026-107935/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 09 Oct 2026 09:05:43 GMTCVEcriticalCVE-2026-89091: Ansible-core: ansible-core: ansible-galaxy collection install symlink path escape allows arbitrary file write / code executionhttps://agentprime.io/advisories/CVE-2026-89091/https://agentprime.io/advisories/CVE-2026-89091/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 08 Oct 2026 21:49:30 GMTCVECVE-2026-107565: Luksmeta: incomplete gap-boundary and overlap checks in luks1 metadata allocator allow data corruptionhttps://agentprime.io/advisories/CVE-2026-107565/https://agentprime.io/advisories/CVE-2026-107565/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 08 Oct 2026 14:39:28 GMTCVECVE-2026-93017: Insights-operator: gather serviceaccount has cluster-wide secret read plus nodes/proxy and cluster-readerhttps://agentprime.io/advisories/CVE-2026-93017/https://agentprime.io/advisories/CVE-2026-93017/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 08 Oct 2026 14:31:58 GMTCVECVE-2026-107176: Cluster-samples-operator: role reads all secrets in openshift-config, not just pull-secrethttps://agentprime.io/advisories/CVE-2026-107176/https://agentprime.io/advisories/CVE-2026-107176/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 07 Oct 2026 19:29:31 GMTCVECVE-2026-107161: Cyrus-sasl: heap buffer overflow in cyrus-sasl add_to_challenge() allows malicious server to crash or compromise digest-md5 clientshttps://agentprime.io/advisories/CVE-2026-107161/https://agentprime.io/advisories/CVE-2026-107161/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 07 Oct 2026 19:29:28 GMTCVECVE-2026-80048: Sssd: sssd-kcm: local denial of service via excessive memory preallocationhttps://agentprime.io/advisories/CVE-2026-80048/https://agentprime.io/advisories/CVE-2026-80048/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 06 Oct 2026 23:28:11 GMTCVECVE-2026-104045: Sssd: sssd: denial of service via race condition in autofs responderhttps://agentprime.io/advisories/CVE-2026-104045/https://agentprime.io/advisories/CVE-2026-104045/CVSS 4.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 06 Oct 2026 20:37:41 GMTCVECVE-2026-104046: Sssd: sssd: denial of service via incomplete identity provider authentication requestshttps://agentprime.io/advisories/CVE-2026-104046/https://agentprime.io/advisories/CVE-2026-104046/CVSS 6.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 06 Oct 2026 20:03:06 GMTCVECVE-2026-104048: Sssd: sssd: authorization bypass via cross-domain username collision in hbac evaluationhttps://agentprime.io/advisories/CVE-2026-104048/https://agentprime.io/advisories/CVE-2026-104048/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 06 Oct 2026 19:34:25 GMTCVE