What’s Vulnerable › Products

Red Hat Cost Management 4 vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your Red Hat Cost Management 4 version is affected

Latest Red Hat Cost Management 4 vulnerabilities

• CVE-2026-18382 — Project-koku/koku-metrics-operator: koku-metrics-operator: service-account client credentials sent to user-controlled token_url (CVSS 6.8)
• CVE-2026-18381 — Project-koku/koku-metrics-operator: koku-metrics-operator: operator service-account token exfiltration via user-controlled prometheus service_address (CVSS 7.6)
• CVE-2026-18378 — Project-koku/koku-metrics-operator: koku-metrics-operator: cluster pull-secret token exfiltration via user-controlled api_url (ssrf / confused deputy) (CVSS 6.8)
• CVE-2026-2100 — P11-kit: null dereference via c_derivekey with specific null parameters (CVSS 7.5)
• CVE-2025-5278 — Coreutils: heap buffer under-read in gnu coreutils sort via key specification (CVSS 4.4)