Red Hat Rhel-9-Cnv-4.19 vulnerabilities

2 CVEs affecting Red Hat Rhel-9-Cnv-4.19, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-14459, published 2026-01-26.

More from Red Hat.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2025-14459, published 2026-01-26. High severity, CVSS 8.5. EPSS: 0.4% chance of exploitation in the next 30 days. A flaw was found in KubeVirt Containerized Data Importer (CDI). This vulnerability allows a user to clone PersistentVolumeClaims (PVCs) from unauthorized namespaces, resulting in unauthorized access…
• CVE-2025-57848, published 2025-10-23. Medium severity, CVSS 6.4. EPSS: 0.2% chance of exploitation in the next 30 days. A container privilege escalation flaw was found in certain Container-native Virtualization images. This issue stems from the /etc/passwd file being created with group-writable permissions during…