Red Hat Openshift Virtualization vulnerabilities

11 CVEs affecting Red Hat Openshift Virtualization, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-13434, published 2026-06-26.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-44487: HTTP/2 Rapid Reset Attack Vulnerability, published 2023-10-10. High severity, CVSS 7.5. Actively exploited: in CISA KEV since 2023-10-10. EPSS: 100% chance of exploitation in the next 30 days. The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVE-2023-48795, published 2023-12-18. Medium severity, CVSS 5.9. EPSS: 93.5% chance of exploitation in the next 30 days. The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from…
CVE-2020-14316, published 2020-07-29. Critical severity, CVSS 9.9. EPSS: 1.6% chance of exploitation in the next 30 days. A flaw was found in kubevirt 0.29 and earlier. Virtual Machine Instances (VMIs) can be used to gain access to the host's filesystem. Successful exploitation allows an attacker to assume the…
CVE-2026-44495, published 2026-06-11. High severity, CVSS 7.7. EPSS: 1% chance of exploitation in the next 30 days. Axios is a promise based HTTP client for the browser and Node.js. From 0.19.0 to before 0.31.1 and 1.15.2, Axios contains prototype-pollution gadgets in request config processing. If another…
CVE-2026-13201, published 2026-06-24. High severity, CVSS 7.3. EPSS: 0.3% chance of exploitation in the next 30 days. A flaw was found in KubeVirt's safepath package used by virt-handler. The OpenAtNoFollow function uses O_PATH|O_NOFOLLOW to obtain a file descriptor to a path leaf, but downstream operations resolve…
CVE-2020-1742, published 2021-06-07. High severity, CVSS 7.0. EPSS: 0.3% chance of exploitation in the next 30 days. An insecure modification vulnerability flaw was found in containers using nmstate/kubernetes-nmstate-handler. An attacker with access to the container could use this flaw to modify /etc/passwd and…
CVE-2026-13434, published 2026-06-26. Medium severity, CVSS 4.9. EPSS: 0.2% chance of exploitation in the next 30 days. A flaw was found in KubeVirt's network annotation generator. When a tenant creates a VirtualMachineInstance with a Multus network configuration, the supplied networkName value is written verbatim…
CVE-2026-13318, published 2026-06-26. Medium severity, CVSS 6.4. EPSS: 0.2% chance of exploitation in the next 30 days. A server-side request forgery (SSRF) flaw was found in KubeVirt's virt-api port-forward handler. When processing a port-forward request to a VirtualMachineInstance (VMI), virt-api reads the target IP…
CVE-2026-13218, published 2026-06-26. Medium severity, CVSS 4.2. EPSS: 0.1% chance of exploitation in the next 30 days. A flaw was found in KubeVirt's virt-handler network cache handling. The WriteToCachedFile function writes data to a launcher-rooted path using os.WriteFile and os.Chown without symlink protection. A…
CVE-2026-13322, published 2026-06-26. Low severity, CVSS 3.8. EPSS: 0.1% chance of exploitation in the next 30 days. A flaw was found in KubeVirt's downward metrics virtio-serial server. The server reads guest requests using textproto.Reader.ReadLine(), which buffers input indefinitely until a newline character is…

Latest

CVE-2026-13208, published 2026-06-24. Medium severity, CVSS 6.5. EPSS: 0.1% chance of exploitation in the next 30 days. A flaw was found in KubeVirt's virt-handler domain notify server. The gRPC handlers for HandleDomainEvent and HandleK8SEvent derive the VMI identity (namespace/name) solely from the request body…