Red Hat Hardened Images vulnerabilities

49 CVEs affecting Red Hat Hardened Images, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-19617, published 2026-08-14.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-42055, published 2026-06-17. High severity, CVSS 8.1. EPSS: 6.5% chance of exploitation in the next 30 days. NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_proxy_v2_module and ngx_http_grpc_module modules. This vulnerability exists when the proxy_http_version to 2 or…
CVE-2026-9256, published 2026-05-22. High severity, CVSS 8.1. EPSS: 2.7% chance of exploitation in the next 30 days. NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module. This vulnerability exists when a rewrite directive uses a regex pattern with distinct, overlapping…
CVE-2026-5121, published 2026-03-30. High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days. A flaw was found in libarchive. On 32-bit systems, an integer overflow vulnerability exists in the zisofs block pointer allocation logic. A remote attacker can exploit this by providing a specially…
CVE-2026-1584, published 2026-04-09. High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days. A flaw was found in gnutls. A remote, unauthenticated attacker can exploit this vulnerability by sending a specially crafted ClientHello message with an invalid Pre-Shared Key (PSK) binder value…
CVE-2026-2100, published 2026-03-26. High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days. A flaw was found in p11-kit. A remote attacker could exploit this vulnerability by calling the C_DeriveKey function on a remote token with specific IBM kyber or IBM btc derive mechanism parameters…
CVE-2026-42009, published 2026-05-18. High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days. A flaw was found in gnutls. A remote attacker could exploit an issue in the Datagram Transport Layer Security (DTLS) packet reordering logic. The comparator function, responsible for ordering DTLS…
CVE-2026-4424, published 2026-03-19. High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days. A flaw was found in libarchive. This heap out-of-bounds read vulnerability exists in the RAR archive processing logic due to improper validation of the LZSS sliding window size after transitions…
CVE-2026-0990, published 2026-01-15. Medium severity, CVSS 5.9. EPSS: 1% chance of exploitation in the next 30 days. A flaw was found in libxml2, an XML parsing library. This uncontrolled recursion vulnerability occurs in the xmlCatalogXMLResolveURI function when an XML catalog contains a delegate URI entry that…
CVE-2026-42010, published 2026-05-07. Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days. A flaw was found in gnutls. Servers configured with RSA-PSK (Rivest–Shamir–Adleman – Pre-Shared Key) wrongfully matched usernames containing a NUL character with truncated usernames. A remote…
CVE-2026-6732, published 2026-04-23. High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days. A flaw was found in libxml2. This vulnerability occurs when the library processes a specially crafted XML Schema Definition (XSD) validated document that includes an internal entity reference. An…

Latest

CVE-2026-19617, published 2026-08-14. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. A flaw was found in libdm. A local attacker could craft a malicious Logical Volume Manager (LVM) metadata configuration with deeply nested structures. This could lead to uncontrolled recursion in the…
CVE-2026-19548, published 2026-08-12. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Multiple Use-After-Free vulnerabilities were found in the add_archive_element function in ld/ldmain.c of the GNU linker (ld), a component of binutils. The root cause is that plugin_maybe_claim() in…
CVE-2026-71227, published 2026-08-05. Medium severity, CVSS 5.1. EPSS: 0.2% chance of exploitation in the next 30 days. A flaw was found in libkcapi. A local attacker can influence an application that uses the Asynchronous Input/Output (AIO) interface. By reusing an AIO-enabled handle after a prior completion error,…
CVE-2026-71226, published 2026-08-05. High severity, CVSS 7.3. EPSS: 0.2% chance of exploitation in the next 30 days. Memory Corruption via Uncanceled AIO Requests on Error: libkcapi's one-shot AIO path can return an error before all submitted IOCBs are drained, allowing later kernel writes into caller-owned output…
CVE-2026-71225, published 2026-08-05. Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days. A flaw was found in libkcapi. When performing one-shot symmetric cipher operations on large inputs (over 64 KiB) in stateful modes such as Counter (CTR) or Cipher Block Chaining (CBC), the library…
CVE-2026-59851, published 2026-07-21. High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days. A flaw was found in libssh. On servers with GSSAPIKeyExchange enabled, the gssapi-keyex path does not verify whether the authenticated Kerberos principal is authorized for the requested local user,…
CVE-2026-59850, published 2026-07-21. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. A flaw was found in libssh. If data packets are processed after a channel is closed, channel data callbacks can be invoked after the associated data has already been freed, leading to crashes or…
CVE-2026-59849, published 2026-07-21. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. A flaw was found in libssh. Logic errors in automatic certificate-based public key authentication can cause libssh clients to loop indefinitely when configured certificates are missing or repeatedly…
CVE-2026-59848, published 2026-07-21. Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days. A flaw was found in libssh. A malicious SFTP server can send responses for unknown request IDs that libssh clients keep queued indefinitely, causing unbounded memory growth and client-side denial of…
CVE-2026-59847, published 2026-07-21. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can effectively remove integrity protection, allowing an in-path attacker to modify plaintext on…