Red Hat Openshift Container Platform 4.19 vulnerabilities

41 CVEs affecting Red Hat Openshift Container Platform 4.19, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-96577, published 2026-10-01.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-6893, published 2026-06-10. High severity, CVSS 7.5. EPSS: 3.1% chance of exploitation in the next 30 days. A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP (Dynamic Host Configuration Protocol) options, such as a…
CVE-2025-49796, published 2025-06-16. Critical severity, CVSS 9.1. EPSS: 1.6% chance of exploitation in the next 30 days. A vulnerability was found in libxml2. Processing certain sch:name elements from the input XML file can trigger a memory corruption issue. This flaw allows an attacker to craft a malicious XML input…
CVE-2025-9566, published 2025-09-05. High severity, CVSS 8.1. EPSS: 1.2% chance of exploitation in the next 30 days. There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a…
CVE-2026-33846, published 2026-05-04. High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days. A heap buffer overflow vulnerability exists in the DTLS handshake fragment reassembly logic of GnuTLS. The issue arises in merge_handshake_packet() where incoming handshake fragments are matched and…
CVE-2026-4890, published 2026-05-11. High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days. A Denial of Service (DoS) vulnerability in the DNSSEC validation of dnsmasq allows remote attackers to cause a denial of service via a crafted DNS packet.
CVE-2026-5260, published 2026-05-26. High severity, CVSS 8.2. EPSS: 0.9% chance of exploitation in the next 30 days. A flaw was found in libgnutls. A remote attacker, by sending an extremely short premaster secret during an RSA key exchange to a server using an RSA key backed by a PKCS#11 token, could trigger a…
CVE-2026-16242, published 2026-07-20. Critical severity, CVSS 9.4. EPSS: 0.9% chance of exploitation in the next 30 days. A flaw was found in the Konnectivity proxy-server configuration for hosted control planes. The agent-facing listener was started without --cluster-ca-cert (and without token-based agent…
CVE-2026-49329, published 2026-09-01. High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days. A flaw was found in openshift/oauth-server. The OAuth login and error page endpoints pass the unauthenticated Accept-Language header to golang.org/x/text/language.ParseAcceptLanguage() without input…
CVE-2026-4891, published 2026-05-11. Medium severity, CVSS 5.3. EPSS: 0.8% chance of exploitation in the next 30 days. A heap-based out-of-bounds read vulnerability in the DNSSEC validation of dnsmasq allows remote attackers to cause a denial of service via a crafted DNS packet.
CVE-2025-49794, published 2025-06-16. Critical severity, CVSS 9.1. EPSS: 0.8% chance of exploitation in the next 30 days. A use-after-free vulnerability was found in libxml2. This issue occurs when parsing XPath elements under certain circumstances when the XML schematron has the <sch:name path="..."/> schema elements.…

Latest

CVE-2026-96577, published 2026-10-01. High severity, CVSS 7.1. EPSS: 0.2% chance of exploitation in the next 30 days. A flaw was found in oc-mirror. During mirroring operations, the embedded local cache registry binds to all network interfaces without authentication or encryption instead of restricting access to the…
CVE-2026-83589, published 2026-10-01. Medium severity, CVSS 6.1. EPSS: 0.2% chance of exploitation in the next 30 days. A flaw was found in oauth-proxy. The application fails to properly validate the destination redirect parameter (`rd`) during post-login redirection. A remote attacker can exploit this vulnerability…
CVE-2026-87114, published 2026-09-28. High severity, CVSS 7.1. EPSS: 0.2% chance of exploitation in the next 30 days. A flaw was found in kube-compare. When processing a 'container://' reference path, the tool incorrectly executes an untrusted container image's entrypoint instead of merely extracting data from a…
CVE-2026-75887, published 2026-09-23. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. A flaw was found in the OpenShift console. An unauthenticated attacker can exploit a path traversal vulnerability by manipulating the `lng` and `ns` query parameters in the `/locales/resource.json`…
CVE-2026-75886, published 2026-09-23. High severity, CVSS 7.2. EPSS: 0.3% chance of exploitation in the next 30 days. A flaw was found in openshift/console. An unauthenticated remote attacker can exploit a misconfiguration in the CatalogdHandler, which lacks proper authentication, and the forwarding of the…
CVE-2026-75885, published 2026-09-18. Critical severity, CVSS 9.3. EPSS: 0.8% chance of exploitation in the next 30 days. A flaw was found in the OpenShift console. Unauthenticated access to the `/api/devfile/` and `/api/devfile/samples/` endpoints allows a remote attacker to send crafted devfile payloads. This can lead…
CVE-2026-50237, published 2026-08-11. High severity, CVSS 7.4. EPSS: 0.5% chance of exploitation in the next 30 days. A Server-Side Request Forgery and supply chain flaw was found in the OpenShift Console Helm catalog proxy. A namespace tenant can plant a ProjectHelmChartRepository with an arbitrary URL that the…
CVE-2026-50236, published 2026-08-11. High severity, CVSS 7.4. EPSS: 0.5% chance of exploitation in the next 30 days. An authenticated SSRF flaw was found in the OpenShift Console Dev Console webhook helpers. User-supplied target URLs are fetched server-side without validation, with path neutralization enabling…
CVE-2026-15816, published 2026-08-07. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. A flaw was found in dracut. The die() error-handling function writes its message into a shell script under the initramfs emergency-hook directory without properly shell-quoting it. When the message…