What’s Vulnerable › Products
Red Hat Update Infrastructure 5 vulnerabilities
40 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 39 published in the last 12 months.
Check whether your Red Hat Update Infrastructure 5 version is affected
Latest Red Hat Update Infrastructure 5 vulnerabilities
- CVE-2026-114406 — Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns (CVSS 6.8)
- CVE-2026-89091 — Ansible-core: ansible-core: ansible-galaxy collection install symlink path escape allows arbitrary file write / code execution (CVSS 8.8)
- CVE-2026-90959 — Pulpcore: pulpcore: file:// scheme allowlist bypass in content upload file_url field enables arbitrary file read and pulp container registry signing key theft (CVSS 8.1)
- CVE-2026-96512 — Sudo: sudo: tz environment variable allows bypass of notbefore/notafter time-based authorization (CVSS 7.8)
- CVE-2026-74860 — Libxml2: double-free/uaf in libxml2 python bindings (CVSS 8.5)
- CVE-2026-13732 — Gdb: gdb: out-of-bounds write in stabs parser read_member_functions() via crafted elf (CVSS 7.0)
- CVE-2026-78002 — Rsyslog: rsyslog: denial of service via heap buffer overflow in rainerscript replace() function (CVSS 7.5)
- CVE-2026-19654 — Rsyslog: a configuration-dependent issue in rsyslog's optional imptcp input module can allow an unauthenticated remote peer to crash rsyslogd (CVSS 7.5)
- CVE-2026-18477 — Tar: tar: toctou in incremental dumpdir 'x' rename handling allows restore path escape (CVSS 4.4)
- CVE-2026-18508 — Tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite (CVSS 4.4)
- CVE-2026-16730 — Dbus-broker: dbus-broker: session bus denial of service via emfile during peer setup (CVSS 5.5)
- CVE-2026-12701 — Pulpcore: pulpcore: relative_path_validator bypass via directory traversal in filesystemexport (CVSS 9.0)
- CVE-2026-15588 — Gdbusserver: glib2: gdbusserver pre-authentication dos via unbounded sasl line buffering (CVSS 5.3)
- CVE-2026-16118 — Xdgmime: heap-based buffer overflow in _xdg_mime_magic_parse_magic_line() in xdgmimemagic.c (CVSS 7.1)
- CVE-2026-58015 — Glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive (CVSS 7.5)
- CVE-2026-58014 — Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list" (CVSS 8.6)
- CVE-2026-58013 — Glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend" (CVSS 8.2)
- CVE-2026-58012 — Glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char() (CVSS 8.2)
- CVE-2026-58011 — Glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid gdatetime (CVSS 7.5)
- CVE-2026-58010 — Glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal() (CVSS 8.2)
- CVE-2026-14164 — Libarchive: double-free vulnerability in rar5 decompression logic via dangling filtered_buf pointer in init_unpack() (CVSS 7.5)
- CVE-2026-55655 — Openssh: local mitm of x11 forwarding via abstract unix socket pre-binding in red hat enterprise linux openssh client versions (CVSS 6.1)
- CVE-2026-55653 — Openssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validation leads to client-side denial of service (CVSS 6.5)
- CVE-2026-42014 — Gnutls: gnutls: use-after-free in gnutls_pkcs11_token_set_pin (CVSS 6.6)
- CVE-2026-5419 — Gnutls: gnutls: information disclosure via timing side-channel in pkcs#7 padding removal (CVSS 3.7)