Red Hat Insights Proxy 1.5 vulnerabilities

13 CVEs affecting Red Hat Insights Proxy 1.5, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-54369, published 2026-06-29.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-49796, published 2025-06-16. Critical severity, CVSS 9.1. EPSS: 1.6% chance of exploitation in the next 30 days. A vulnerability was found in libxml2. Processing certain sch:name elements from the input XML file can trigger a memory corruption issue. This flaw allows an attacker to craft a malicious XML input…
CVE-2025-49794, published 2025-06-16. Critical severity, CVSS 9.1. EPSS: 0.8% chance of exploitation in the next 30 days. A use-after-free vulnerability was found in libxml2. This issue occurs when parsing XPath elements under certain circumstances when the XML schematron has the <sch:name path="..."/> schema elements.…
CVE-2025-6395, published 2025-07-10. Medium severity, CVSS 6.5. EPSS: 0.8% chance of exploitation in the next 30 days. A NULL pointer dereference flaw was found in the GnuTLS software in _gnutls_figure_common_ciphersuite().
CVE-2026-4111, published 2026-03-13. High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days. A flaw was identified in the RAR5 archive decompression logic of the libarchive library, specifically within the archive_read_data() processing path. When a specially crafted RAR5 archive is…
CVE-2025-14831, published 2026-02-09. Medium severity, CVSS 5.3. EPSS: 0.7% chance of exploitation in the next 30 days. A flaw was found in GnuTLS. This vulnerability allows a denial of service (DoS) by excessive CPU (Central Processing Unit) and memory consumption via specially crafted malicious certificates…
CVE-2025-4373, published 2025-05-06. Medium severity, CVSS 4.8. EPSS: 0.6% chance of exploitation in the next 30 days. A flaw was found in GLib, which is vulnerable to an integer overflow in the g_string_insert_unichar() function. When the position at which to insert the character is large, the position will…
CVE-2025-6020, published 2025-06-17. High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days. A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without proper protection, allowing local users to elevate their privileges to root via multiple symlink…
CVE-2025-7425, published 2025-07-10. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. A flaw was found in libxslt where the attribute type, atype, flags are modified in a way that corrupts internal memory management. When XSLT functions, such as the key() process, result in tree…
CVE-2025-5278, published 2025-05-27. Medium severity, CVSS 4.4. EPSS: 0.3% chance of exploitation in the next 30 days. A flaw was found in GNU Coreutils. The sort utility's begfield() function is vulnerable to a heap buffer under-read. The program may access memory outside the allocated buffer if a user runs a…
CVE-2025-8941, published 2025-08-13. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. A flaw was found in linux-pam. The pam_namespace module may improperly handle user-controlled paths, allowing local users to exploit symlink attacks and race conditions to elevate their privileges to…

Latest

CVE-2026-54369, published 2026-06-29. High severity, CVSS 7.1. EPSS: 0.2% chance of exploitation in the next 30 days. acl before version 2.4.0 contains a symlink traversal vulnerability in the libacl pathname-based functions acl_get_file(), acl_set_file(), acl_extended_file(), and acl_delete_def_file() that allows…
CVE-2025-9820, published 2026-01-26. Medium severity, CVSS 4.0. EPSS: 0.2% chance of exploitation in the next 30 days. A flaw was found in the GnuTLS library, specifically in the gnutls_pkcs11_token_init() function that handles PKCS#11 token initialization. When a token label longer than expected is processed, the…
CVE-2025-14104, published 2025-12-05. Medium severity, CVSS 6.1. EPSS: 0.2% chance of exploitation in the next 30 days. A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID)…