Advisories · Technology

Red Hat OpenShift Serverless.

Every CVE that names Red Hat OpenShift Serverless among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-107912 CVE record

CVSS 7.7 High

Io.quarkus/quarkus-vertx-http: quarkus-vertx-http: authorization bypass in management interface via path concatenation flaw
- Red Hat Exploit Intelligence
- Red Hat OpenShift Serverless
- Broken access control
Not analysed yet 5 Nov 2026
CVE-2026-107174 CVE record

CVSS 6.4 Medium

Source-to-image: source-to-image: security boundary bypass via absolute symbolic link extraction
- Red Hat OpenShift Serverless
- Red Hat OpenShift Source-to-Image (S2I)
- CWE-61
Not analysed yet 7 Oct 2026
CVE-2026-87743 CVE record

CVSS 7.5 High

Quarkus-vertx-http: authorization bypass via path normalization discrepancy in quarkus http security
- Red Hat build of Quarkus 3.27.5.SP2
- Red Hat build of Quarkus 3.33.3.SP2
- CWE-551
Not analysed yet 18 Sept 2026
CVE-2025-10894 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

Nx: nx/devkit: malicious versions of nx and plugins published to npm
- Red Hat Multicluster Global Hub
- Red Hat OpenShift Serverless
- CWE-506
Not analysed yet 24 Sept 2025
CVE-2023-3089 CVE record

CVSS 7.0 High

Ocp & fips mode
- openshift
- Red Hat OpenShift Serverless
- CWE-693
Not analysed yet 5 Jul 2023