{"schema_version":1,"title":"Redhat Openshift Container Platform vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 10 vulnerabilities in Redhat Openshift Container Platform: 0 in the last 7 days and 0 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-71227, was published on 5 August 2026.","url":"https://junglewise.ai/threats/technologies/openshift-container-platform","json_url":"https://junglewise.ai/threats/technologies/openshift-container-platform.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/openshift-container-platform","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","thin":true,"counts":{"high":1,"all_time":10,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":0,"last_365_days":10},"latest":[{"cve":"CVE-2026-71227","cvss":5.1,"epss":0.0017,"slug":"cve-2026-71227-a-flaw-was-found-in-libkcapi-a-local-attacker-can-influence-an","title":"A flaw was found in libkcapi. A local attacker can influence an application that uses the Asynchronous Input/Output…","severity":"medium","exploited":false,"published_at":"2026-08-05T13:24:47.353+00:00","url":"https://junglewise.ai/threats/cve-2026-71227-a-flaw-was-found-in-libkcapi-a-local-attacker-can-influence-an"},{"cve":"CVE-2026-71226","cvss":7.3,"epss":0.0018,"slug":"cve-2026-71226-memory-corruption-via-uncanceled-aio-requests-on-error-libkcapi-s","title":"Memory Corruption via Uncanceled AIO Requests on Error: libkcapi's one-shot AIO path can return an error before all…","severity":"high","exploited":false,"published_at":"2026-08-05T13:24:47.223+00:00","url":"https://junglewise.ai/threats/cve-2026-71226-memory-corruption-via-uncanceled-aio-requests-on-error-libkcapi-s"},{"cve":"CVE-2026-71225","cvss":6.5,"epss":0.0052,"slug":"cve-2026-71225-a-flaw-was-found-in-libkcapi-when-performing-one-shot-symmetric","title":"A flaw was found in libkcapi. When performing one-shot symmetric cipher operations on large inputs (over 64 KiB) in…","severity":"medium","exploited":false,"published_at":"2026-08-05T13:24:47.087+00:00","url":"https://junglewise.ai/threats/cve-2026-71225-a-flaw-was-found-in-libkcapi-when-performing-one-shot-symmetric"},{"cve":"CVE-2026-18477","cvss":4.4,"epss":0.0008,"slug":"cve-2026-18477-a-toctou-time-of-check-time-of-use-vulnerability-in-gnu-tar-s","title":"A TOCTOU (Time-of-Check Time-of-Use) vulnerability in GNU tar's incremental dumpdir 'X' rename handling allows a local…","severity":"medium","exploited":false,"published_at":"2026-08-03T17:16:33.897+00:00","url":"https://junglewise.ai/threats/cve-2026-18477-a-toctou-time-of-check-time-of-use-vulnerability-in-gnu-tar-s"},{"cve":"CVE-2026-18508","cvss":4.4,"epss":0.0014,"slug":"cve-2026-18508-a-flaw-was-found-in-gnu-tar-when-extracting-an-archive-with-the","title":"A flaw was found in GNU tar. When extracting an archive with the --one-top-level option, hardlink targets are not…","severity":"medium","exploited":false,"published_at":"2026-08-03T16:16:28.387+00:00","url":"https://junglewise.ai/threats/cve-2026-18508-a-flaw-was-found-in-gnu-tar-when-extracting-an-archive-with-the"},{"cve":"CVE-2026-68742","cvss":5.5,"epss":0.0013,"slug":"cve-2026-68742-a-flaw-was-found-in-sssd-the-sss-nss-protocol-parse-addr-function","title":"A flaw was found in SSSD. The sss_nss_protocol_parse_addr() function in the NSS responder does not validate the…","severity":"medium","exploited":false,"published_at":"2026-08-03T10:16:33.08+00:00","url":"https://junglewise.ai/threats/cve-2026-68742-a-flaw-was-found-in-sssd-the-sss-nss-protocol-parse-addr-function"},{"cve":"CVE-2026-7309","cvss":4.3,"epss":0.0018,"slug":"cve-2026-7309-a-flaw-was-found-in-the-openshift-container-platform-build-system","title":"A flaw was found in the OpenShift Container Platform build system. A user with the `edit` ClusterRole can inject…","severity":"medium","exploited":false,"published_at":"2026-04-28T13:19:24.847+00:00","url":"https://junglewise.ai/threats/cve-2026-7309-a-flaw-was-found-in-the-openshift-container-platform-build-system"},{"cve":"CVE-2026-6245","cvss":5.5,"epss":0.0014,"slug":"cve-2026-6245-a-flaw-was-found-in-the-system-security-services-daemon-sssd-the","title":"A flaw was found in the System Security Services Daemon (SSSD). The pam_passkey_child_read_data() function within the…","severity":"medium","exploited":false,"published_at":"2026-04-15T19:16:38.25+00:00","url":"https://junglewise.ai/threats/cve-2026-6245-a-flaw-was-found-in-the-system-security-services-daemon-sssd-the"},{"cve":"CVE-2026-5745","cvss":5.5,"epss":0.0016,"slug":"cve-2026-5745-a-flaw-was-found-in-libarchive-a-null-pointer-dereference","title":"A flaw was found in libarchive. A NULL pointer dereference vulnerability exists in the ACL parsing logic, specifically…","severity":"medium","exploited":false,"published_at":"2026-04-07T16:16:32.307+00:00","url":"https://junglewise.ai/threats/cve-2026-5745-a-flaw-was-found-in-libarchive-a-null-pointer-dereference"},{"cve":"CVE-2026-4897","cvss":5.5,"epss":0.0016,"slug":"cve-2026-4897-a-flaw-was-found-in-polkit-a-local-user-can-exploit-this-by","title":"A flaw was found in polkit. A local user can exploit this by providing a specially crafted, excessively long input to…","severity":"medium","exploited":false,"published_at":"2026-03-26T15:16:43.017+00:00","url":"https://junglewise.ai/threats/cve-2026-4897-a-flaw-was-found-in-polkit-a-local-user-can-exploit-this-by"}],"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"Redhat Enterprise Linux","slug":"enterprise-linux","vulnerabilities":50,"url":"https://junglewise.ai/threats/technologies/enterprise-linux"},{"name":"Redhat Linux","slug":"linux","vulnerabilities":11,"url":"https://junglewise.ai/threats/technologies/linux"},{"name":"Redhat 389 Directory Server","slug":"389-directory-server","vulnerabilities":9,"url":"https://junglewise.ai/threats/technologies/389-directory-server"},{"name":"Redhat Hardened Images","slug":"hardened-images","vulnerabilities":8,"url":"https://junglewise.ai/threats/technologies/hardened-images"},{"name":"Redhat Quay","slug":"quay","vulnerabilities":8,"url":"https://junglewise.ai/threats/technologies/quay"},{"name":"Redhat Advanced Cluster Management For Kubernetes","slug":"advanced-cluster-management-for-kubernetes","vulnerabilities":7,"url":"https://junglewise.ai/threats/technologies/advanced-cluster-management-for-kubernetes"},{"name":"Redhat Ansible Automation Platform","slug":"ansible-automation-platform","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/ansible-automation-platform"},{"name":"Redhat Insights-Client","slug":"insights-client","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/insights-client"},{"name":"Redhat Ansible Developer","slug":"ansible-developer","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/ansible-developer"},{"name":"Redhat Ansible Inside","slug":"ansible-inside","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/ansible-inside"},{"name":"Redhat Enterprise Linux Desktop","slug":"enterprise-linux-desktop","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/enterprise-linux-desktop"},{"name":"Redhat Enterprise Linux Hpc Node","slug":"enterprise-linux-hpc-node","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/enterprise-linux-hpc-node"}],"technology":{"hub":true,"name":"Redhat Openshift Container Platform","slug":"openshift-container-platform","vendor":{"hub":true,"name":"Redhat","slug":"redhat","url":"https://junglewise.ai/threats/vendors/redhat"},"aliases":[],"homepage":"https://www.redhat.com/en/technologies/cloud-computing/openshift","repo_url":"https://github.com/openshift/origin","description":"OpenShift Container Platform is a self-managed hybrid cloud platform for deploying and scaling containerized applications.","url":"https://junglewise.ai/threats/technologies/openshift-container-platform"},"most_severe":[{"cve":"CVE-2026-71226","cvss":7.3,"epss":0.0018,"slug":"cve-2026-71226-memory-corruption-via-uncanceled-aio-requests-on-error-libkcapi-s","title":"Memory Corruption via Uncanceled AIO Requests on Error: libkcapi's one-shot AIO path can return an error before all…","severity":"high","exploited":false,"published_at":"2026-08-05T13:24:47.223+00:00","url":"https://junglewise.ai/threats/cve-2026-71226-memory-corruption-via-uncanceled-aio-requests-on-error-libkcapi-s"},{"cve":"CVE-2026-71225","cvss":6.5,"epss":0.0052,"slug":"cve-2026-71225-a-flaw-was-found-in-libkcapi-when-performing-one-shot-symmetric","title":"A flaw was found in libkcapi. When performing one-shot symmetric cipher operations on large inputs (over 64 KiB) in…","severity":"medium","exploited":false,"published_at":"2026-08-05T13:24:47.087+00:00","url":"https://junglewise.ai/threats/cve-2026-71225-a-flaw-was-found-in-libkcapi-when-performing-one-shot-symmetric"},{"cve":"CVE-2026-5745","cvss":5.5,"epss":0.0016,"slug":"cve-2026-5745-a-flaw-was-found-in-libarchive-a-null-pointer-dereference","title":"A flaw was found in libarchive. A NULL pointer dereference vulnerability exists in the ACL parsing logic, specifically…","severity":"medium","exploited":false,"published_at":"2026-04-07T16:16:32.307+00:00","url":"https://junglewise.ai/threats/cve-2026-5745-a-flaw-was-found-in-libarchive-a-null-pointer-dereference"},{"cve":"CVE-2026-4897","cvss":5.5,"epss":0.0016,"slug":"cve-2026-4897-a-flaw-was-found-in-polkit-a-local-user-can-exploit-this-by","title":"A flaw was found in polkit. A local user can exploit this by providing a specially crafted, excessively long input to…","severity":"medium","exploited":false,"published_at":"2026-03-26T15:16:43.017+00:00","url":"https://junglewise.ai/threats/cve-2026-4897-a-flaw-was-found-in-polkit-a-local-user-can-exploit-this-by"},{"cve":"CVE-2026-6245","cvss":5.5,"epss":0.0014,"slug":"cve-2026-6245-a-flaw-was-found-in-the-system-security-services-daemon-sssd-the","title":"A flaw was found in the System Security Services Daemon (SSSD). The pam_passkey_child_read_data() function within the…","severity":"medium","exploited":false,"published_at":"2026-04-15T19:16:38.25+00:00","url":"https://junglewise.ai/threats/cve-2026-6245-a-flaw-was-found-in-the-system-security-services-daemon-sssd-the"},{"cve":"CVE-2026-68742","cvss":5.5,"epss":0.0013,"slug":"cve-2026-68742-a-flaw-was-found-in-sssd-the-sss-nss-protocol-parse-addr-function","title":"A flaw was found in SSSD. The sss_nss_protocol_parse_addr() function in the NSS responder does not validate the…","severity":"medium","exploited":false,"published_at":"2026-08-03T10:16:33.08+00:00","url":"https://junglewise.ai/threats/cve-2026-68742-a-flaw-was-found-in-sssd-the-sss-nss-protocol-parse-addr-function"},{"cve":"CVE-2026-71227","cvss":5.1,"epss":0.0017,"slug":"cve-2026-71227-a-flaw-was-found-in-libkcapi-a-local-attacker-can-influence-an","title":"A flaw was found in libkcapi. A local attacker can influence an application that uses the Asynchronous Input/Output…","severity":"medium","exploited":false,"published_at":"2026-08-05T13:24:47.353+00:00","url":"https://junglewise.ai/threats/cve-2026-71227-a-flaw-was-found-in-libkcapi-a-local-attacker-can-influence-an"},{"cve":"CVE-2026-18508","cvss":4.4,"epss":0.0014,"slug":"cve-2026-18508-a-flaw-was-found-in-gnu-tar-when-extracting-an-archive-with-the","title":"A flaw was found in GNU tar. When extracting an archive with the --one-top-level option, hardlink targets are not…","severity":"medium","exploited":false,"published_at":"2026-08-03T16:16:28.387+00:00","url":"https://junglewise.ai/threats/cve-2026-18508-a-flaw-was-found-in-gnu-tar-when-extracting-an-archive-with-the"},{"cve":"CVE-2026-18477","cvss":4.4,"epss":0.0008,"slug":"cve-2026-18477-a-toctou-time-of-check-time-of-use-vulnerability-in-gnu-tar-s","title":"A TOCTOU (Time-of-Check Time-of-Use) vulnerability in GNU tar's incremental dumpdir 'X' rename handling allows a local…","severity":"medium","exploited":false,"published_at":"2026-08-03T17:16:33.897+00:00","url":"https://junglewise.ai/threats/cve-2026-18477-a-toctou-time-of-check-time-of-use-vulnerability-in-gnu-tar-s"},{"cve":"CVE-2026-7309","cvss":4.3,"epss":0.0018,"slug":"cve-2026-7309-a-flaw-was-found-in-the-openshift-container-platform-build-system","title":"A flaw was found in the OpenShift Container Platform build system. A user with the `edit` ClusterRole can inject…","severity":"medium","exploited":false,"published_at":"2026-04-28T13:19:24.847+00:00","url":"https://junglewise.ai/threats/cve-2026-7309-a-flaw-was-found-in-the-openshift-container-platform-build-system"}],"generated_at":"2026-11-09T03:07:00.176479+00:00"}