What’s Vulnerable › Products
RedHat Hardened Images vulnerabilities
50 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 50 published in the last 12 months.
Check whether your RedHat Hardened Images version is affected
Latest RedHat Hardened Images vulnerabilities
- CVE-2026-19617 — Libdm: lvm2: libdm: denial of service via uncontrolled recursion in config parser (CVSS 5.5)
- CVE-2026-19548 — Binutils: binutils: multiple use-after-free in add_archive_element via lto plugin processing (CVSS 5.5)
- CVE-2026-71227 — Libkcapi: infinite loop denial of service in libkcapi _kcapi_aio_read_all() due to unhandled io_getevents() timeout return (CVSS 5.1)
- CVE-2026-71225 — Libkcapi: iv reuse in libkcapi one-shot symmetric cipher chunking causes cipher state reset across chunk boundaries (CVSS 6.5)
- CVE-2026-71226 — Libkcapi: memory corruption via uncanceled aio requests on error in libkcapi's one-shot aio path (CVSS 7.3)
- CVE-2026-59851 — Libssh: libssh: authentication bypass via missing gssapi principal check (CVSS 8.8)
- CVE-2026-59850 — Libssh: libssh: use-after-free via data callbacks on closed channels (CVSS 7.5)
- CVE-2026-59849 — Libssh: libssh: denial of service via automatic certificate authentication loop (CVSS 7.5)
- CVE-2026-59848 — Libssh: libssh: denial of service via sftp responses with unknown request ids (CVSS 5.3)
- CVE-2026-59847 — Libssh: libssh: integrity downgrade via openssl aes-gcm tag verification (CVSS 7.5)
- CVE-2026-59846 — Libssh: libssh: information disclosure via proxycommand %r username expansion (CVSS 3.9)
- CVE-2026-59845 — Libssh: libssh: denial of service via unchecked proxycommand fork() failure (CVSS 5.9)
- CVE-2026-59844 — Libssh: libssh: denial of service via oversized sftp read length (CVSS 6.5)
- CVE-2026-59843 — Libssh: libssh: denial of service via zero advertised channel packet size (CVSS 6.5)
- CVE-2026-59842 — Libssh: libssh: information disclosure via short gssapi curve25519 public key (CVSS 5.3)
- CVE-2026-15370 — Libssh: libssh: stack buffer overflow in sftp server longname construction (CVSS 7.3)
- CVE-2026-13757 — P11-kit: stack exhaustion via unbounded recursion in rpc attribute parsing (CVSS 6.2)
- CVE-2026-13595 — Util-linux: util-linux: heap use-after-free in libblkid nested partition probing (CVSS 5.3)
- CVE-2026-55654 — Openssh: heap out-of-bounds read in red hat enterprise linux versions of openssh gssapi indicator cleanup due to missing null sentinel termination (CVSS 3.7)
- CVE-2026-55653 — Openssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validation leads to client-side denial of service (CVSS 6.5)
- CVE-2026-42055 — NGINX ngx_http_proxy_v2_module and ngx_http_grpc_module vulnerability (CVSS 8.1)
- CVE-2026-48864 — Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data (CVSS 7.8)
- CVE-2026-9256 — NGINX ngx_http_rewrite_module vulnerability (CVSS 8.1)
- CVE-2026-9149 — Libsolv: heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv file (CVSS 6.5)
- CVE-2026-9150 — Libsolv: stack-based buffer overflow in libsolv's debian metadata parser when handling sha384/sha512 checksums (CVSS 6.5)