What’s Vulnerable › Products

Red Hat Ceph Storage 9 vulnerabilities

11 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 11 published in the last 12 months.

Check whether your Red Hat Ceph Storage 9 version is affected

Latest Red Hat Ceph Storage 9 vulnerabilities

• CVE-2026-93009 — Dnsmasq: dnsmasq: heap out-of-bounds read in dhcpv6 option 39 fqdn decoder (CVSS 4.3)
• CVE-2026-93010 — Dnsmasq: dnsmasq: --leasequery without address argument applies no source address check (CVSS 4.3)
• CVE-2026-93006 — Dnsmasq: dnsmasq: tftp prefetch cache keyed on stale heap pointer serves wrong file content (CVSS 6.8)
• CVE-2026-93007 — Dnsmasq: dnsmasq: tcp/53 child-slot exhaustion starves dnssec validation (CVSS 5.3)
• CVE-2026-93011 — Dnsmasq: dnsmasq: heap out-of-bounds write in dnssec validator via to_wire/from_wire transforms (CVSS 5.3)
• CVE-2026-93008 — Dnsmasq: dnsmasq: out-of-bailiwick cache injection through cname chase in split-dns configurations (CVSS 6.8)
• CVE-2026-87874 — Community.general: community.general: memcached cache plugin deserializes untrusted pickle data from memcached, enabling cache-poisoning remote code execution on the ansible controller (CVSS 8.1)
• CVE-2026-87872 — Community.general: community.general: ocapi module_utils (ocapi_command, ocapi_info) hardcode validate_certs=false with no override, enabling tls man-in-the-middle and credential disclosure (CVSS 6.8)
• CVE-2026-80158 — Ansible-collection-community-general: community.general: ipa_getkeytab does not set no_log on the bind_pw parameter, disclosing the ipa bind password in logs and process listings (CVSS 5.5)
• CVE-2025-14104 — Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames (CVSS 6.1)
• CVE-2024-11831 — Npm-serialize-javascript: cross-site scripting (xss) in serialize-javascript (CVSS 5.4)