{"schema_version":1,"title":"Red Hat OpenShift Container Platform vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 13 vulnerabilities in Red Hat OpenShift Container Platform: 2 in the last 7 days and 3 in the last 90 days, 3 of them critical and 0 exploited in the wild. The most recent, CVE-2026-75887, was published on 23 September 2026.","url":"https://junglewise.ai/threats/technologies/openshift-container-platform-4-12","json_url":"https://junglewise.ai/threats/technologies/openshift-container-platform-4-12.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/openshift-container-platform-4-12","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":8,"all_time":13,"critical":3,"exploited":0,"last_7_days":2,"last_30_days":3,"last_90_days":3,"last_365_days":11},"latest":[{"cve":"CVE-2026-75887","cvss":7.5,"epss":0.0036,"slug":"cve-2026-75887-a-flaw-was-found-in-the-openshift-console-an-unauthenticated","title":"Red Hat OpenShift console path traversal in locale handler","severity":"high","exploited":false,"published_at":"2026-09-23T22:16:57.117+00:00","url":"https://junglewise.ai/threats/cve-2026-75887-a-flaw-was-found-in-the-openshift-console-an-unauthenticated"},{"cve":"CVE-2026-92574","cvss":8.8,"epss":0.0065,"slug":"cve-2026-92574-a-vulnerability-in-cri-o-checkpoint-restore-allows-a-user-who-can","title":"CRI-O checkpoint restore security context bypass","severity":"high","exploited":false,"published_at":"2026-09-21T10:17:17.36+00:00","url":"https://junglewise.ai/threats/cve-2026-92574-a-vulnerability-in-cri-o-checkpoint-restore-allows-a-user-who-can"},{"cve":"CVE-2026-75885","cvss":9.3,"epss":0.0053,"slug":"cve-2026-75885-a-flaw-was-found-in-the-openshift-console-unauthenticated-access","title":"OpenShift console SSRF and resource exhaustion in devfile endpoints","severity":"critical","exploited":false,"published_at":"2026-09-18T22:17:10.313+00:00","url":"https://junglewise.ai/threats/cve-2026-75885-a-flaw-was-found-in-the-openshift-console-unauthenticated-access"},{"cve":"CVE-2026-44393","cvss":7.4,"epss":0.0028,"slug":"cve-2026-44393-openstack-oslo-messaging-tls-hostname-verification-failure-in","title":"OpenStack oslo.messaging TLS hostname verification failure in RabbitMQ driver","severity":"high","exploited":false,"published_at":"2026-06-04T16:16:38.497+00:00","url":"https://junglewise.ai/threats/cve-2026-44393-openstack-oslo-messaging-tls-hostname-verification-failure-in"},{"cve":"CVE-2026-33814","cvss":7.5,"epss":0.0078,"slug":"cve-2026-33814-go-net-http-infinite-loop-in-http-2-settings-frame-processing","title":"Go net/http infinite loop in HTTP/2 SETTINGS frame processing","severity":"high","exploited":false,"published_at":"2026-05-07T20:16:42.88+00:00","url":"https://junglewise.ai/threats/cve-2026-33814-go-net-http-infinite-loop-in-http-2-settings-frame-processing"},{"cve":"CVE-2026-41326","cvss":8.2,"epss":0.0037,"slug":"cve-2026-41326-kata-containers-arbitrary-file-write-via-copyfile-symlink","title":"Kata Containers arbitrary file write via CopyFile symlink subversion","severity":"high","exploited":false,"published_at":"2026-04-24T19:17:12.253+00:00","url":"https://junglewise.ai/threats/cve-2026-41326-kata-containers-arbitrary-file-write-via-copyfile-symlink"},{"cve":"CVE-2026-35172","cvss":7.5,"epss":0.0067,"slug":"cve-2026-35172-distribution-stale-blob-access-resurrection-in-redis-cache","title":"Distribution stale blob access resurrection in Redis cache backend","severity":"high","exploited":false,"published_at":"2026-04-06T20:16:25.607+00:00","url":"https://junglewise.ai/threats/cve-2026-35172-distribution-stale-blob-access-resurrection-in-redis-cache"},{"cve":"CVE-2026-33186","cvss":9.1,"epss":0.0163,"slug":"cve-2026-33186-grpc-grpc-go-authorization-bypass-in-http-2-path-validation","title":"gRPC gRPC-Go authorization bypass in HTTP/2 path validation","severity":"critical","exploited":false,"published_at":"2026-03-20T23:16:45.18+00:00","url":"https://junglewise.ai/threats/cve-2026-33186-grpc-grpc-go-authorization-bypass-in-http-2-path-validation"},{"cve":"CVE-2026-31812","cvss":5.3,"epss":0.0089,"slug":"cve-2026-31812-quinn-quinn-proto-denial-of-service-via-malformed-quic-packet","title":"Quinn quinn-proto denial of service via malformed QUIC packet","severity":"medium","exploited":false,"published_at":"2026-03-10T22:16:18.84+00:00","url":"https://junglewise.ai/threats/cve-2026-31812-quinn-quinn-proto-denial-of-service-via-malformed-quic-packet"},{"cve":"CVE-2026-3336","cvss":7.5,"epss":0.0038,"slug":"cve-2026-3336-aws-aws-lc-certificate-chain-validation-bypass-in-pkcs7-verify","title":"AWS AWS-LC certificate chain validation bypass in PKCS7_verify","severity":"high","exploited":false,"published_at":"2026-03-02T22:16:31.277+00:00","url":"https://junglewise.ai/threats/cve-2026-3336-aws-aws-lc-certificate-chain-validation-bypass-in-pkcs7-verify"},{"cve":"CVE-2025-14831","cvss":5.3,"epss":0.0006,"slug":"cve-2025-14831-gnutls-denial-of-service-via-excessive-resource-consumption","title":"GnuTLS denial of service via excessive resource consumption during certificate verification","severity":"medium","exploited":false,"published_at":"2026-02-09T15:16:09.937+00:00","url":"https://junglewise.ai/threats/cve-2025-14831-gnutls-denial-of-service-via-excessive-resource-consumption"},{"cve":"CVE-2025-4953","cvss":7.4,"epss":0.0064,"slug":"cve-2025-4953-podman-data-persistence-in-bind-mounts-during-build","title":"Podman data persistence in bind mounts during build","severity":"high","exploited":false,"published_at":"2025-09-16T15:15:45.313+00:00","url":"https://junglewise.ai/threats/cve-2025-4953-podman-data-persistence-in-bind-mounts-during-build"},{"cve":"CVE-2024-7387","cvss":9.1,"epss":0.023,"slug":"cve-2024-7387-red-hat-openshift-builder-command-injection-via-path-traversal","title":"Red Hat OpenShift Builder command injection via path traversal","severity":"critical","exploited":false,"published_at":"2024-09-17T00:31:06+00:00","url":"https://junglewise.ai/threats/cve-2024-7387-red-hat-openshift-builder-command-injection-via-path-traversal"}],"weekly":[{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":1,"exploited":0,"vulnerabilities":1},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":2},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"Red Hat Enterprise Linux 9","slug":"enterprise-linux-9","vulnerabilities":146,"url":"https://junglewise.ai/threats/technologies/enterprise-linux-9"},{"name":"Red Hat Enterprise Linux 10","slug":"enterprise-linux-10","vulnerabilities":140,"url":"https://junglewise.ai/threats/technologies/enterprise-linux-10"},{"name":"Red Hat Enterprise Linux 8","slug":"enterprise-linux-8","vulnerabilities":132,"url":"https://junglewise.ai/threats/technologies/enterprise-linux-8"},{"name":"Red Hat Enterprise Linux 7","slug":"enterprise-linux-7","vulnerabilities":68,"url":"https://junglewise.ai/threats/technologies/enterprise-linux-7"},{"name":"Red Hat Keycloak","slug":"red-hat-keycloak","vulnerabilities":61,"url":"https://junglewise.ai/threats/technologies/red-hat-keycloak"},{"name":"Red Hat Enterprise Linux 6","slug":"enterprise-linux-6","vulnerabilities":56,"url":"https://junglewise.ai/threats/technologies/enterprise-linux-6"},{"name":"Red Hat Build of Keycloak","slug":"red-hat-build-of-keycloak","vulnerabilities":54,"url":"https://junglewise.ai/threats/technologies/red-hat-build-of-keycloak"},{"name":"Red Hat Enterprise Linux AppStream","slug":"enterprise-linux-appstream","vulnerabilities":46,"url":"https://junglewise.ai/threats/technologies/enterprise-linux-appstream"},{"name":"Red Hat OpenShift Container Platform 4","slug":"openshift-container-platform-4","vulnerabilities":36,"url":"https://junglewise.ai/threats/technologies/openshift-container-platform-4"},{"name":"Red Hat Ansible Automation Platform","slug":"ansible-automation-platform-2","vulnerabilities":33,"url":"https://junglewise.ai/threats/technologies/ansible-automation-platform-2"},{"name":"Red Hat Developer Hub","slug":"developer-hub","vulnerabilities":28,"url":"https://junglewise.ai/threats/technologies/developer-hub"},{"name":"Red Hat Multicluster Global Hub","slug":"multicluster-global-hub","vulnerabilities":19,"url":"https://junglewise.ai/threats/technologies/multicluster-global-hub"}],"technology":{"hub":true,"name":"Red Hat OpenShift Container Platform","slug":"openshift-container-platform-4-12","vendor":{"name":"Red Hat","slug":"red-hat","url":"https://junglewise.ai/threats/vendors/red-hat"},"aliases":["openshift-container-platform-4-13","red-hat-openshift-container-platform"],"category":"platform-as-a-service","homepage":"https://www.redhat.com/en/technologies/cloud-computing/openshift","repo_url":"https://www.redhat.com/en/technologies/cloud-computing/openshift","description":"A platform for managing containerized applications based on Kubernetes.","url":"https://junglewise.ai/threats/technologies/openshift-container-platform-4-12"},"most_severe":[{"cve":"CVE-2026-75885","cvss":9.3,"epss":0.0053,"slug":"cve-2026-75885-a-flaw-was-found-in-the-openshift-console-unauthenticated-access","title":"OpenShift console SSRF and resource exhaustion in devfile endpoints","severity":"critical","exploited":false,"published_at":"2026-09-18T22:17:10.313+00:00","url":"https://junglewise.ai/threats/cve-2026-75885-a-flaw-was-found-in-the-openshift-console-unauthenticated-access"},{"cve":"CVE-2024-7387","cvss":9.1,"epss":0.023,"slug":"cve-2024-7387-red-hat-openshift-builder-command-injection-via-path-traversal","title":"Red Hat OpenShift Builder command injection via path traversal","severity":"critical","exploited":false,"published_at":"2024-09-17T00:31:06+00:00","url":"https://junglewise.ai/threats/cve-2024-7387-red-hat-openshift-builder-command-injection-via-path-traversal"},{"cve":"CVE-2026-33186","cvss":9.1,"epss":0.0163,"slug":"cve-2026-33186-grpc-grpc-go-authorization-bypass-in-http-2-path-validation","title":"gRPC gRPC-Go authorization bypass in HTTP/2 path validation","severity":"critical","exploited":false,"published_at":"2026-03-20T23:16:45.18+00:00","url":"https://junglewise.ai/threats/cve-2026-33186-grpc-grpc-go-authorization-bypass-in-http-2-path-validation"},{"cve":"CVE-2026-92574","cvss":8.8,"epss":0.0065,"slug":"cve-2026-92574-a-vulnerability-in-cri-o-checkpoint-restore-allows-a-user-who-can","title":"CRI-O checkpoint restore security context bypass","severity":"high","exploited":false,"published_at":"2026-09-21T10:17:17.36+00:00","url":"https://junglewise.ai/threats/cve-2026-92574-a-vulnerability-in-cri-o-checkpoint-restore-allows-a-user-who-can"},{"cve":"CVE-2026-41326","cvss":8.2,"epss":0.0037,"slug":"cve-2026-41326-kata-containers-arbitrary-file-write-via-copyfile-symlink","title":"Kata Containers arbitrary file write via CopyFile symlink subversion","severity":"high","exploited":false,"published_at":"2026-04-24T19:17:12.253+00:00","url":"https://junglewise.ai/threats/cve-2026-41326-kata-containers-arbitrary-file-write-via-copyfile-symlink"},{"cve":"CVE-2026-33814","cvss":7.5,"epss":0.0078,"slug":"cve-2026-33814-go-net-http-infinite-loop-in-http-2-settings-frame-processing","title":"Go net/http infinite loop in HTTP/2 SETTINGS frame processing","severity":"high","exploited":false,"published_at":"2026-05-07T20:16:42.88+00:00","url":"https://junglewise.ai/threats/cve-2026-33814-go-net-http-infinite-loop-in-http-2-settings-frame-processing"},{"cve":"CVE-2026-35172","cvss":7.5,"epss":0.0067,"slug":"cve-2026-35172-distribution-stale-blob-access-resurrection-in-redis-cache","title":"Distribution stale blob access resurrection in Redis cache backend","severity":"high","exploited":false,"published_at":"2026-04-06T20:16:25.607+00:00","url":"https://junglewise.ai/threats/cve-2026-35172-distribution-stale-blob-access-resurrection-in-redis-cache"},{"cve":"CVE-2026-3336","cvss":7.5,"epss":0.0038,"slug":"cve-2026-3336-aws-aws-lc-certificate-chain-validation-bypass-in-pkcs7-verify","title":"AWS AWS-LC certificate chain validation bypass in PKCS7_verify","severity":"high","exploited":false,"published_at":"2026-03-02T22:16:31.277+00:00","url":"https://junglewise.ai/threats/cve-2026-3336-aws-aws-lc-certificate-chain-validation-bypass-in-pkcs7-verify"},{"cve":"CVE-2026-75887","cvss":7.5,"epss":0.0036,"slug":"cve-2026-75887-a-flaw-was-found-in-the-openshift-console-an-unauthenticated","title":"Red Hat OpenShift console path traversal in locale handler","severity":"high","exploited":false,"published_at":"2026-09-23T22:16:57.117+00:00","url":"https://junglewise.ai/threats/cve-2026-75887-a-flaw-was-found-in-the-openshift-console-an-unauthenticated"},{"cve":"CVE-2025-4953","cvss":7.4,"epss":0.0064,"slug":"cve-2025-4953-podman-data-persistence-in-bind-mounts-during-build","title":"Podman data persistence in bind mounts during build","severity":"high","exploited":false,"published_at":"2025-09-16T15:15:45.313+00:00","url":"https://junglewise.ai/threats/cve-2025-4953-podman-data-persistence-in-bind-mounts-during-build"}],"generated_at":"2026-09-28T03:07:00.154823+00:00"}