Red Hat Discovery 2 vulnerabilities

29 CVEs affecting Red Hat Discovery 2, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-89091, published 2026-10-08.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-49796, published 2025-06-16. Critical severity, CVSS 9.1. EPSS: 1.6% chance of exploitation in the next 30 days. A vulnerability was found in libxml2. Processing certain sch:name elements from the input XML file can trigger a memory corruption issue. This flaw allows an attacker to craft a malicious XML input…
CVE-2026-33846, published 2026-05-04. High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days. A heap buffer overflow vulnerability exists in the DTLS handshake fragment reassembly logic of GnuTLS. The issue arises in merge_handshake_packet() where incoming handshake fragments are matched and…
CVE-2025-9900, published 2025-09-23. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. A flaw was found in Libtiff. This vulnerability is a "write-what-where" condition, triggered when the library processes a specially crafted TIFF image file. By providing an abnormally large image…
CVE-2026-5260, published 2026-05-26. High severity, CVSS 8.2. EPSS: 0.9% chance of exploitation in the next 30 days. A flaw was found in libgnutls. A remote attacker, by sending an extremely short premaster secret during an RSA key exchange to a server using an RSA key backed by a PKCS#11 token, could trigger a…
CVE-2026-42015, published 2026-05-26. Medium severity, CVSS 5.3. EPSS: 0.9% chance of exploitation in the next 30 days. A flaw was found in gnutls. An off-by-one error exists in the PKCS#12 bag element bounds check. This vulnerability allows an remote attacker to write past the internal array of a PKCS#12 bag when…
CVE-2026-9277, published 2026-05-22. High severity, CVSS 8.1. EPSS: 0.8% chance of exploitation in the next 30 days. shell-quote's `quote()` function did not validate object-token inputs against the operator model used by `parse()`. The `.op` field was backslash-escaped character by character using `/(.)/g`, which…
CVE-2026-14164, published 2026-06-30. High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days. A double free issue has been identified in libarchive's RAR5 reader. During parsing of a specially crafted RAR5 archive, the filtered_buf pointer may remain stale after being freed during unpacking…
CVE-2025-6395, published 2025-07-10. Medium severity, CVSS 6.5. EPSS: 0.8% chance of exploitation in the next 30 days. A NULL pointer dereference flaw was found in the GnuTLS software in _gnutls_figure_common_ciphersuite().
CVE-2026-4111, published 2026-03-13. High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days. A flaw was identified in the RAR5 archive decompression logic of the libarchive library, specifically within the archive_read_data() processing path. When a specially crafted RAR5 archive is…
CVE-2026-12143, published 2026-06-12. High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days. form-data is a library for creating readable multipart/form-data streams. In versions through 4.0.5, the `field` argument to `FormData#append` and the `filename` option are concatenated verbatim into…

Latest

CVE-2026-89091, published 2026-10-08. High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days. A flaw was found in ansible-core. When installing a collection with `ansible-galaxy collection install`, the archive extractor validates member paths using lexical path normalisation…
CVE-2026-15588, published 2026-07-20. Medium severity, CVSS 5.3. EPSS: 0.5% chance of exploitation in the next 30 days. A denial-of-service and resource exhaustion vulnerability exists within the `GDBus` component of GLib. The `gdbusauth` authentication mechanism fails to enforce proper length limitations on data…
CVE-2026-54371, published 2026-06-29. High severity, CVSS 7.1. EPSS: 0.1% chance of exploitation in the next 30 days. attr before version 2.6.0 contains a symlink traversal vulnerability in the getfattr and setfattr utilities that allows local attackers to escalate privileges by replacing a pathname component with a…
CVE-2026-54369, published 2026-06-29. High severity, CVSS 7.1. EPSS: 0.2% chance of exploitation in the next 30 days. acl before version 2.4.0 contains a symlink traversal vulnerability in the libacl pathname-based functions acl_get_file(), acl_set_file(), acl_extended_file(), and acl_delete_def_file() that allows…
CVE-2026-42014, published 2026-06-16. Medium severity, CVSS 6.6. EPSS: 0.2% chance of exploitation in the next 30 days. A flaw was found in GnuTLS. The `gnutls_pkcs11_token_set_pin` function, used for changing the Security Officer PIN, can lead to a use-after-free vulnerability. This occurs when an attacker attempts…
CVE-2026-11332, published 2026-06-05. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. A flaw was found in ansible-core. The ansible-galaxy role install command processes dependency specifications from a role's meta/requirements.yml file. Due to improper neutralization of argument…
CVE-2026-5419, published 2026-06-01. Low severity, CVSS 3.7. EPSS: 0.6% chance of exploitation in the next 30 days. A flaw was found in gnutls. The PKCS#7 padding check, performed during decryption, was not constant-time. This timing side-channel could allow a remote attacker to potentially leak sensitive…
CVE-2024-52011, published 2026-06-01. High severity, CVSS 8.3. EPSS: 0.5% chance of exploitation in the next 30 days. launch-editor allows users to open files with line numbers in editor from Node.js. Prior to version 2.9.0, due to the insufficient sanitization of the `file` argument in the `launchEditor`, an…