What’s Vulnerable › Products

Red Hat Advanced Cluster Security 4 vulnerabilities

8 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 8 published in the last 12 months.

Check whether your Red Hat Advanced Cluster Security 4 version is affected

Latest Red Hat Advanced Cluster Security 4 vulnerabilities

• CVE-2026-114236 — Podman: goroutine/file-descriptor leak in storage/pkg/archive.applylayer and applyuncompressedlayer on malformed layers (CVSS 3.3)
• CVE-2026-19519 — Claircore: claircore: denial of service via unchecked type assertion in rpm header parser (CVSS 4.3)
• CVE-2026-19278 — Stackrox: stackrox: privilege escalation via unanchored regular expressions in auth m2m role mappings (CVSS 6.8)
• CVE-2026-10079 — Stackrox: stackrox: deploy-time policy enforcement and visibility bypass via label injection (CVSS 8.5)
• CVE-2026-16254 — Claircore: claircore: denial of service via out-of-bounds slice in claircore's apk installed-database parser (CVSS 4.3)
• CVE-2026-9165 — Stackrox: stackrox: unbounded graphql query depth allows authenticated denial of service (CVSS 7.7)
• CVE-2025-11065 — Github.com/go-viper/mapstructure/v2: go-viper's mapstructure may leak sensitive information in logs in github.com/go-viper/mapstructure (CVSS 5.3)
• CVE-2025-8556 — Github.com/cloudflare/circl: circl-fourq: missing and wrong validation can lead to incorrect results (CVSS 3.7)