What’s Vulnerable › Products
Red Hat Discovery 2 vulnerabilities
35 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 33 published in the last 12 months.
Check whether your Red Hat Discovery 2 version is affected
Latest Red Hat Discovery 2 vulnerabilities
- CVE-2026-89091 — Ansible-core: ansible-core: ansible-galaxy collection install symlink path escape allows arbitrary file write / code execution (CVSS 8.8)
- CVE-2026-18477 — Tar: tar: toctou in incremental dumpdir 'x' rename handling allows restore path escape (CVSS 4.4)
- CVE-2026-18508 — Tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite (CVSS 4.4)
- CVE-2026-15588 — Gdbusserver: glib2: gdbusserver pre-authentication dos via unbounded sasl line buffering (CVSS 5.3)
- CVE-2026-58015 — Glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive (CVSS 7.5)
- CVE-2026-58014 — Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list" (CVSS 8.6)
- CVE-2026-58013 — Glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend" (CVSS 8.2)
- CVE-2026-58012 — Glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char() (CVSS 8.2)
- CVE-2026-58011 — Glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid gdatetime (CVSS 7.5)
- CVE-2026-58010 — Glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal() (CVSS 8.2)
- CVE-2026-14164 — Libarchive: double-free vulnerability in rar5 decompression logic via dangling filtered_buf pointer in init_unpack() (CVSS 7.5)
- CVE-2026-42014 — Gnutls: gnutls: use-after-free in gnutls_pkcs11_token_set_pin (CVSS 6.6)
- CVE-2026-11332 — Ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution (CVSS 7.8)
- CVE-2026-5419 — Gnutls: gnutls: information disclosure via timing side-channel in pkcs#7 padding removal (CVSS 3.7)
- CVE-2026-42015 — Gnutls: gnutls: memory corruption due to off-by-one error in pkcs#12 bag handling (CVSS 5.3)
- CVE-2026-42013 — Gnutls: gnutls: certificate validation bypass due to oversized subject alternative name (CVSS 8.2)
- CVE-2026-42012 — Gnutls: gnutls: certificate validation bypass due to improper handling of uri and srv sans (CVSS 7.1)
- CVE-2026-5260 — Gnutls: gnutls: information disclosure via heap overread in rsa key exchange (CVSS 8.2)
- CVE-2026-42009 — Gnutls: gnutls: denial of service via dtls packet reordering vulnerability (CVSS 7.5)
- CVE-2026-42011 — Gnutls: gnutls: security bypass due to incorrect name constraint handling (CVSS 7.4)
- CVE-2026-42010 — Gnutls: gnutls: authentication bypass via nul character in username (CVSS 9.8)
- CVE-2026-33846 — Gnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassembly (CVSS 7.5)
- CVE-2026-4111 — Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchive (CVSS 7.5)
- CVE-2025-14831 — Gnutls: gnutls: denial of service via excessive resource consumption during certificate verification (CVSS 5.3)
- CVE-2025-9820 — Gnutls: stack-based buffer overflow in gnutls_pkcs11_token_init() function (CVSS 4.0)