What’s Vulnerable › Products
Red Hat OpenShift Container Platform 4.22 vulnerabilities
34 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 34 published in the last 12 months.
Check whether your Red Hat OpenShift Container Platform 4.22 version is affected
Latest Red Hat OpenShift Container Platform 4.22 vulnerabilities
- CVE-2026-114406 — Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns (CVSS 6.8)
- CVE-2026-104795 — Insights-runtime-extractor: insights-runtime-extractor: container escape via privileged binary execution (CVSS 8.8)
- CVE-2026-75888 — Openshift/console: openshift/console: authenticated ssrf via helm chart url fetch (CVSS 7.7)
- CVE-2026-93017 — Insights-operator: gather serviceaccount has cluster-wide secret read plus nodes/proxy and cluster-reader (CVSS 7.7)
- CVE-2026-107176 — Cluster-samples-operator: role reads all secrets in openshift-config, not just pull-secret (CVSS 6.8)
- CVE-2026-96577 — Oc-mirror__release-4.21: embedded local cache registry listens on all interfaces without authentication, with delete enabled (CVSS 7.1)
- CVE-2026-83589 — Oauth-proxy: open redirect via /\ and /\t bypass in post-login redirect (CVSS 6.1)
- CVE-2026-87114 — Kube-compare: container:// reference extraction runs the image entrypoint and silently escalates to sudo (CVSS 7.1)
- CVE-2026-75887 — Openshift/console: openshift/console: unauthenticated path traversal in i18n locale handler (CVSS 7.5)
- CVE-2026-75886 — Openshift/console: openshift/console: unauthenticated reverse proxy to in-cluster catalogd service with session token forwarding (CVSS 7.2)
- CVE-2026-94640 — Rpcbind: unbounded memory allocation in rpcbind statistics tracking allows unauthenticated remote denial of service (CVSS 7.5)
- CVE-2026-75885 — Openshift/console: openshift/console: unauthenticated ssrf and resource exhaustion via devfile parser endpoint (CVSS 9.3)
- CVE-2026-49329 — Openshift/oauth-server: openshift/oauth-server: quadratic-time dos via accept-language header underscore bypass on unauthenticated login endpoints (CVSS 7.5)
- CVE-2026-50237 — Openshift/console: namespace tenant ssrf with egress bypass, catalog poisoning, and admin-mediated supply chain escalation via projecthelmchartrepository in openshift console (CVSS 7.4)
- CVE-2026-50236 — Openshift/console: authenticated ssrf with full response reflection and path neutralization via dev console webhook helpers in openshift console (CVSS 7.4)
- CVE-2026-72693 — Kbd: local privilege escalation in openvt via incorrect process owner verification allowing passwordless root login (CVSS 7.8)
- CVE-2026-15816 — Dracut: dracut: root code execution via unescaped error message written to sourced emergency hook script in die() (CVSS 7.5)
- CVE-2026-16313 — Sg3_utils: sg3_utils: arbitrary command execution via udev property injection in sg_inq --export (CVSS 7.6)
- CVE-2026-49332 — Openshift/oauth-proxy: openshift/oauth-proxy: underscore header smuggling enables identity impersonation on wsgi/php upstreams (CVSS 8.5)
- CVE-2026-16242 — Hypershift: konnectivity proxy-server accepts agent connections without validating client certificates (CVSS 9.4)
- CVE-2026-15809 — Github.com/cri-o/cri-o: fix bypass for cve-2022-4318 — /etc/passwd injection via home env (CVSS 7.8)
- CVE-2026-14476 — Sssd: sssd: gpo cache path traversal via unsanitized gpcfilesyspath allows kerberos authentication bypass (CVSS 8.0)
- CVE-2026-14474 — Sssd: sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation (CVSS 8.8)
- CVE-2026-58015 — Glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive (CVSS 7.5)
- CVE-2026-58014 — Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list" (CVSS 8.6)