Red Hat Discovery vulnerabilities

8 CVEs affecting Red Hat Discovery, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-42055, published 2026-06-17.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-48795, published 2023-12-18. Medium severity, CVSS 5.9. EPSS: 93.5% chance of exploitation in the next 30 days. The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from…
CVE-2026-42055, published 2026-06-17. High severity, CVSS 8.1. EPSS: 6.5% chance of exploitation in the next 30 days. NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_proxy_v2_module and ngx_http_grpc_module modules. This vulnerability exists when the proxy_http_version to 2 or…
CVE-2024-12088, published 2025-01-14. High severity, CVSS 7.5. EPSS: 4.7% chance of exploitation in the next 30 days. A flaw was found in rsync. When using the `--safe-links` option, the rsync client fails to properly verify if a symbolic link destination sent from the server contains another symbolic link within…
CVE-2026-9256, published 2026-05-22. High severity, CVSS 8.1. EPSS: 2.7% chance of exploitation in the next 30 days. NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module. This vulnerability exists when a rewrite directive uses a regex pattern with distinct, overlapping…
CVE-2026-44495, published 2026-06-11. High severity, CVSS 7.7. EPSS: 1% chance of exploitation in the next 30 days. Axios is a promise based HTTP client for the browser and Node.js. From 0.19.0 to before 0.31.1 and 1.15.2, Axios contains prototype-pollution gadgets in request config processing. If another…
CVE-2025-71319, published 2026-06-09. High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days. image-size through 2.0.2 contains a denial of service vulnerability that allows remote attackers to permanently block the Node.js event loop by supplying a specially crafted image buffer with a…
CVE-2020-1712, published 2020-03-31. High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days. A heap use-after-free vulnerability was found in systemd before version v245-rc1, where asynchronous Polkit queries are performed while handling dbus messages. A local unprivileged attacker can abuse…
CVE-2025-13601, published 2025-11-26. High severity, CVSS 7.7. EPSS: 0.3% chance of exploitation in the next 30 days. A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the g_escape_uri_string() function. If the string to escape contains a very large number of…