Red Hat Openshift Data Foundation vulnerabilities

4 CVEs affecting Red Hat Openshift Data Foundation, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-8766, published 2026-03-13.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-48795, published 2023-12-18. Medium severity, CVSS 5.9. EPSS: 93.5% chance of exploitation in the next 30 days. The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from…
CVE-2021-4048, published 2021-12-08. Critical severity, CVSS 9.1. EPSS: 2.8% chance of exploitation in the next 30 days. An out-of-bounds read flaw was found in the CLARRV, DLARRV, SLARRV, and ZLARRV functions in lapack through version 3.10.0, as also used in OpenBLAS before version 0.3.18. Specially crafted inputs…
CVE-2021-3979, published 2022-08-25. Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days. A key length flaw was found in Red Hat Ceph Storage. An attacker can exploit the fact that the key length is incorrectly passed in an encryption algorithm to create a non random key, which is weaker…
CVE-2025-8766, published 2026-03-13. Medium severity, CVSS 6.4. EPSS: 0.2% chance of exploitation in the next 30 days. A container privilege escalation flaw was found in certain Multi-Cloud Object Gateway Core images. This issue stems from the /etc/passwd file being created with group-writable permissions during…