What’s Vulnerable › Products
Red Hat OpenShift Container Platform 4.13 vulnerabilities
42 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 26 published in the last 12 months.
Check whether your Red Hat OpenShift Container Platform 4.13 version is affected
Latest Red Hat OpenShift Container Platform 4.13 vulnerabilities
- CVE-2026-75887 — Openshift/console: openshift/console: unauthenticated path traversal in i18n locale handler (CVSS 7.5)
- CVE-2026-75885 — Openshift/console: openshift/console: unauthenticated ssrf and resource exhaustion via devfile parser endpoint (CVSS 9.3)
- CVE-2026-50237 — Openshift/console: namespace tenant ssrf with egress bypass, catalog poisoning, and admin-mediated supply chain escalation via projecthelmchartrepository in openshift console (CVSS 7.4)
- CVE-2026-15816 — Dracut: dracut: root code execution via unescaped error message written to sourced emergency hook script in die() (CVSS 7.5)
- CVE-2026-49332 — Openshift/oauth-proxy: openshift/oauth-proxy: underscore header smuggling enables identity impersonation on wsgi/php upstreams (CVSS 8.5)
- CVE-2026-15809 — Github.com/cri-o/cri-o: fix bypass for cve-2022-4318 — /etc/passwd injection via home env (CVSS 7.8)
- CVE-2026-14476 — Sssd: sssd: gpo cache path traversal via unsanitized gpcfilesyspath allows kerberos authentication bypass (CVSS 8.0)
- CVE-2026-14474 — Sssd: sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation (CVSS 8.8)
- CVE-2026-58015 — Glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive (CVSS 7.5)
- CVE-2026-58014 — Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list" (CVSS 8.6)
- CVE-2026-14164 — Libarchive: double-free vulnerability in rar5 decompression logic via dangling filtered_buf pointer in init_unpack() (CVSS 7.5)
- CVE-2026-6893 — Dracut: dracut: root code execution via dhcp options command injection (CVSS 7.5)
- CVE-2026-1933 — Samba: missing access check on reparse point operations (CVSS 6.5)
- CVE-2026-5260 — Gnutls: gnutls: information disclosure via heap overread in rsa key exchange (CVSS 8.2)
- CVE-2026-42009 — Gnutls: gnutls: denial of service via dtls packet reordering vulnerability (CVSS 7.5)
- CVE-2026-42010 — Gnutls: gnutls: authentication bypass via nul character in username (CVSS 9.8)
- CVE-2026-33846 — Gnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassembly (CVSS 7.5)
- CVE-2026-4111 — Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchive (CVSS 7.5)
- CVE-2025-11561 — Sssd: sssd default kerberos configuration allows privilege escalation on ad-joined linux systems (CVSS 8.8)
- CVE-2025-4953 — Podman: build context bind mount (CVSS 7.4)
- CVE-2025-9566 — Podman: podman kube play command may overwrite host files (CVSS 8.1)
- CVE-2025-7425 — Libxslt: libxml2: heap use-after-free in libxslt caused by atype corruption in xmlattrptr (CVSS 7.8)
- CVE-2025-49796 — Libxml: type confusion leads to denial of service (dos) (CVSS 9.1)
- CVE-2025-49794 — Libxml: heap use after free (uaf) leads to denial of service (dos) (CVSS 9.1)
- CVE-2025-0624 — Grub2: net: out-of-bounds write in grub_net_search_config_file() (CVSS 7.6)