# Red Hat vulnerabilities Source: https://junglewise.ai/threats/vendors/red-hat Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 13 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/vendors/red-hat.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 869 vulnerabilities in Red Hat: 32 in the last 7 days and 250 in the last 90 days, 93 of them critical and 11 exploited in the wild. The most recent, CVE-2026-86322, was published on 12 November 2026. 87 vulnerabilities in the last four weeks, down 24% on the four before (115). 4 critical against 8. 74 technologies have a page of their own. ## Counts - Last 7 days: 32 - Last 30 days: 93 - Last 90 days: 250 - All time: 869 (93 critical, 11 exploited in the wild) ## About Red Hat American open source software company providing Linux, virtualization, and enterprise solutions. ## Latest Red Hat vulnerabilities - [CVE-2026-86322: Foreman authorization bypass in personal access token creation](https://junglewise.ai/threats/cve-2026-86322-a-flaw-was-found-in-foreman-s-api-v2) (high, CVSS 8.8, published 12 Nov 2026) - [CVE-2026-111456: Candlepin authorization bypass in consumer registration](https://junglewise.ai/threats/cve-2026-111456-a-missing-authorization-check-has-been-found-in-consumerresource) (high, CVSS 7.1, published 12 Nov 2026) - [CVE-2026-107152: Foreman smart_proxy_dynflow improper authentication in task console](https://junglewise.ai/threats/cve-2026-107152-an-improper-authentication-vulnerability-has-been-found-in-the) (high, CVSS 7.1, published 12 Nov 2026) - [CVE-2026-71363: Red Hat AWX unauthenticated debug API access](https://junglewise.ai/threats/cve-2026-71363-a-flaw-was-found-in-awx-the-debug-api-endpoints-api-debug-task) (medium, CVSS 5.3, published 12 Nov 2026) - [CVE-2026-127100: SSSD PAM responder NULL pointer dereference in JSON extension](https://junglewise.ai/threats/cve-2026-127100-a-flaw-was-found-in-sssd-s-pam-responder-on-builds-with-the-json) (medium, CVSS 5.5, published 12 Nov 2026) - [CVE-2026-127099: SSSD stack buffer overflow in X.509 RSA certificate conversion](https://junglewise.ai/threats/cve-2026-127099-a-flaw-was-found-in-sssd-s-conversion-of-x-509-certificate-rsa) (medium, CVSS 5.9, published 12 Nov 2026) - [CVE-2026-121876: systemd-gpt-auto-generator credential disclosure in OpenShift Sandboxed Containers](https://junglewise.ai/threats/cve-2026-121876-a-flaw-was-found-in-the-interaction-between-systemd-gpt-auto) (high, CVSS 7.9, published 12 Nov 2026) - [CVE-2026-71367: AWX WebSocket consumer incorrect authorization](https://junglewise.ai/threats/cve-2026-71367-an-incorrect-authorization-vulnerability-was-found-in-awx-s) (medium, CVSS 4.3, published 12 Nov 2026) - [CVE-2026-126643: Red Hat Ansible Automation Platform cleartext storage of resource-server secret](https://junglewise.ai/threats/cve-2026-126643-a-cleartext-storage-flaw-was-found-in-the-aap-gateway-operator) (medium, CVSS 6.5, published 12 Nov 2026) - [CVE-2026-126642: Red Hat Ansible Automation Platform AWX authorization bypass in webhook credentials](https://junglewise.ai/threats/cve-2026-126642-an-incorrect-authorization-flaw-was-found-in-awx-the-automation) (medium, CVSS 6.5, published 12 Nov 2026) - [CVE-2026-110697: Red Hat Quay SQL injection in robot account listing](https://junglewise.ai/threats/cve-2026-110697-a-flaw-was-found-in-quay-where-the-robot-account-listing) (critical, CVSS 9.9, published 11 Nov 2026) - [CVE-2026-123710: Red Hat Quay unauthenticated service key takeover](https://junglewise.ai/threats/cve-2026-123710-a-flaw-was-found-in-red-hat-quay-an-unauthenticated-client-can) (critical, CVSS 9.8, published 11 Nov 2026) - [CVE-2026-116468: Red Hat Keycloak missing authorization check in group reparenting](https://junglewise.ai/threats/cve-2026-116468-a-flaw-was-found-in-the-group-move-and-organization-group) (medium, CVSS 6.6, published 11 Nov 2026) - [CVE-2026-123084: Pulpcore expression language injection in content guard](https://junglewise.ai/threats/cve-2026-123084-an-expression-language-injection-has-been-found-in-the) (medium, CVSS 6.5, published 10 Nov 2026) - [CVE-2026-125672: Cockpit-storaged curl option injection via Tang keyserver](https://junglewise.ai/threats/cve-2026-125672-a-flaw-was-found-in-cockpit-storaged-a-tang-keyserver-address) (medium, CVSS 6.6, published 10 Nov 2026) - [CVE-2026-12977: WildFly Core deployment handler privilege escalation](https://junglewise.ai/threats/cve-2026-12977-a-flaw-was-found-in-the-deployment-operation-family-of-wildfly) (high, CVSS 8.8, published 9 Nov 2026) - [CVE-2026-84503: Red Hat ansible-core git module argument injection](https://junglewise.ai/threats/cve-2026-84503-a-flaw-was-found-in-ansible-core-s-ansible-builtin-git-module-the) (medium, CVSS 6.7, published 9 Nov 2026) - [CVE-2026-19706: Red Hat OpenShift Agent-Based Installation privilege escalation in CSR approval](https://junglewise.ai/threats/cve-2026-19706-during-abi-bootstrap-the-bootstrap-node-s-approve-csr-service) (high, CVSS 8.3, published 9 Nov 2026) - [CVE-2026-125063: Red Hat Ansible Automation Platform automation controller ReDoS in rrule validation](https://junglewise.ai/threats/cve-2026-125063-a-flaw-was-found-in-the-rrule-validation-of-schedules-in) (medium, CVSS 4.3, published 9 Nov 2026) - [CVE-2026-93879: Hibernate Validator expression language injection in validators](https://junglewise.ai/threats/cve-2026-93879-hibernate-validator-could-allow-a-remote-attacker-to-cause-a) (high, CVSS 7.5, published 8 Nov 2026) - [CVE-2026-120984: Keycloak server arbitrary code execution in client authorization](https://junglewise.ai/threats/cve-2026-120984-a-flaw-was-found-in-the-keycloak-server-s-client-management) (critical, CVSS 9.1, published 7 Nov 2026) - [CVE-2026-83495: Red Hat Trainer v2 TrainJob API secret injection privilege escalation](https://junglewise.ai/threats/cve-2026-83495-a-flaw-was-found-in-the-trainer-v2-trainjob-api-a-user-with) (info, published 7 Nov 2026) - [CVE-2026-50240: Red Hat OpenShift Pipelines-as-Code privilege escalation in Repository creation](https://junglewise.ai/threats/cve-2026-50240-a-flaw-was-found-in-openshift-pipelines-as-code-pac-pac-does-not) (high, CVSS 8.8, published 6 Nov 2026) - [CVE-2026-9797: Keycloak privilege escalation via client authentication manipulation](https://junglewise.ai/threats/cve-2026-9797-a-flaw-was-found-in-keycloak-s-administrative-services-org) (medium, CVSS 6.5, published 6 Nov 2026) - [CVE-2026-83494: Red Hat training-operator immutability bypass in PyTorchJob webhook](https://junglewise.ai/threats/cve-2026-83494-a-flaw-was-found-in-the-training-operator-an-incorrect-object) (info, published 6 Nov 2026) ## Most severe Red Hat vulnerabilities - [CVE-2017-12149: Red Hat JBoss Application Server Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2017-12149-red-hat-jboss-application-server-remote-code-execution) (critical, exploited in the wild, CVSS 9.8, published 10 Dec 2021) - [CVE-2010-1871: Red Hat Linux JBoss Seam 2 Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2010-1871-red-hat-linux-jboss-seam-2-remote-code-execution-vulnerability) (critical, exploited in the wild, CVSS 8.8, published 10 Dec 2021) - [CVE-2023-4911: GNU C Library Buffer Overflow Vulnerability](https://junglewise.ai/threats/cve-2023-4911-gnu-c-library-buffer-overflow-vulnerability) (critical, exploited in the wild, CVSS 7.8, published 3 Oct 2023) - [CVE-2021-3560: Red Hat Polkit Incorrect Authorization Vulnerability](https://junglewise.ai/threats/cve-2021-3560-red-hat-polkit-incorrect-authorization-vulnerability) (critical, exploited in the wild, CVSS 7.8, published 12 May 2023) - [CVE-2021-4034: Red Hat Polkit Out-of-Bounds Read and Write Vulnerability](https://junglewise.ai/threats/cve-2021-4034-red-hat-polkit-out-of-bounds-read-and-write-vulnerability) (critical, exploited in the wild, CVSS 7.8, published 27 Jun 2022) - [CVE-2010-1428: Red Hat JBoss Information Disclosure Vulnerability](https://junglewise.ai/threats/cve-2010-1428-red-hat-jboss-information-disclosure-vulnerability) (critical, exploited in the wild, CVSS 7.5, published 25 May 2022) - [CVE-2015-5287: Red Hat ABRT privilege escalation via symlink attack](https://junglewise.ai/threats/cve-2015-5287-red-hat-abrt-privilege-escalation-via-symlink-attack) (critical, exploited in the wild, CVSS 7, published 26 Aug 2026) - [CVE-2026-53362: Linux Kernel buffer overflow in IPv6 paged allocation](https://junglewise.ai/threats/cve-2026-53362-linux-kernel-buffer-overflow-in-ipv6-paged-allocation) (critical, exploited in the wild, CVSS 6.2, published 4 Jul 2026) - [CVE-2010-0738: Red Hat JBoss Authentication Bypass Vulnerability](https://junglewise.ai/threats/cve-2010-0738-red-hat-jboss-authentication-bypass-vulnerability) (critical, exploited in the wild, CVSS 5.3, published 25 May 2022) - [CVE-2018-14667: Richfaces vulnerable to arbitrary code execution](https://junglewise.ai/threats/cve-2018-14667-red-hat-jboss-richfaces-framework-expression-language-injection) (critical, exploited in the wild, CVSS 3.1, published 13 May 2022) ## Vulnerabilities per week 87 vulnerabilities in the last four weeks, down 24% on the four before (115). 4 critical against 8. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 5 | 3 | 0 | | 24 Aug 2026 | 8 | 2 | 2 | | 31 Aug 2026 | 7 | 0 | 0 | | 7 Sep 2026 | 9 | 1 | 0 | | 14 Sep 2026 | 24 | 1 | 0 | | 21 Sep 2026 | 42 | 4 | 0 | | 28 Sep 2026 | 18 | 3 | 0 | | 5 Oct 2026 | 31 | 0 | 0 | | 12 Oct 2026 | 20 | 1 | 0 | | 19 Oct 2026 | 16 | 0 | 0 | | 26 Oct 2026 | 18 | 1 | 0 | | 2 Nov 2026 | 33 | 2 | 0 | | 9 Nov 2026 | 19 | 2 | 0 | ## Red Hat technologies - [Red Hat Enterprise Linux 9](https://junglewise.ai/threats/technologies/enterprise-linux-9): 146 vulnerabilities - [Red Hat Enterprise Linux 10](https://junglewise.ai/threats/technologies/enterprise-linux-10): 140 vulnerabilities - [Red Hat Enterprise Linux 8](https://junglewise.ai/threats/technologies/enterprise-linux-8): 132 vulnerabilities - [Red Hat Keycloak](https://junglewise.ai/threats/technologies/red-hat-keycloak): 102 vulnerabilities - [Red Hat Enterprise Linux 7](https://junglewise.ai/threats/technologies/enterprise-linux-7): 68 vulnerabilities - [Red Hat Enterprise Linux 6](https://junglewise.ai/threats/technologies/enterprise-linux-6): 56 vulnerabilities - [Red Hat Build of Keycloak](https://junglewise.ai/threats/technologies/red-hat-build-of-keycloak): 55 vulnerabilities - [Red Hat Enterprise Linux AppStream](https://junglewise.ai/threats/technologies/enterprise-linux-appstream): 46 vulnerabilities - [Red Hat Ansible Automation Platform](https://junglewise.ai/threats/technologies/ansible-automation-platform-2): 44 vulnerabilities - [Red Hat OpenShift Container Platform 4](https://junglewise.ai/threats/technologies/openshift-container-platform-4): 36 vulnerabilities - [Red Hat Developer Hub](https://junglewise.ai/threats/technologies/developer-hub): 28 vulnerabilities - [Red Hat Quay](https://junglewise.ai/threats/technologies/quay-3-12): 20 vulnerabilities - [Red Hat Multicluster Global Hub](https://junglewise.ai/threats/technologies/multicluster-global-hub): 19 vulnerabilities - [Red Hat OpenShift AI](https://junglewise.ai/threats/technologies/openshift-ai-rhoai): 18 vulnerabilities - [Red Hat OpenShift Container Platform](https://junglewise.ai/threats/technologies/openshift-container-platform-4-12): 17 vulnerabilities - [Red Hat AI Inference Server](https://junglewise.ai/threats/technologies/ai-inference-server): 16 vulnerabilities - [Red Hat Enterprise Linux AI](https://junglewise.ai/threats/technologies/enterprise-linux-ai-3): 15 vulnerabilities - [Red Hat Enterprise Linux](https://junglewise.ai/threats/technologies/red-hat-enterprise-linux): 15 vulnerabilities - [Red Hat Enterprise Linux 9.0](https://junglewise.ai/threats/technologies/enterprise-linux-9-0): 14 vulnerabilities - [Red Hat Self-service automation portal](https://junglewise.ai/threats/technologies/self-service-automation-portal): 14 vulnerabilities - [Red Hat Advanced Cluster Security for Kubernetes](https://junglewise.ai/threats/technologies/advanced-cluster-security-for-kubernetes): 12 vulnerabilities - [Red Hat Self-Service Automation Portal 2](https://junglewise.ai/threats/technologies/self-service-automation-portal-2): 12 vulnerabilities - [Red Hat SSSD](https://junglewise.ai/threats/technologies/red-hat-sssd): 11 vulnerabilities - [Red Hat WildFly](https://junglewise.ai/threats/technologies/wildfly): 11 vulnerabilities - [Red Hat Enterprise Linux 10.0](https://junglewise.ai/threats/technologies/enterprise-linux-10-0): 10 vulnerabilities - [Red Hat Enterprise Linux 8.0](https://junglewise.ai/threats/technologies/enterprise-linux-8-0): 10 vulnerabilities - [Red Hat Foreman](https://junglewise.ai/threats/technologies/red-hat-foreman): 9 vulnerabilities - [Red Hat Trusted Artifact Signer](https://junglewise.ai/threats/technologies/trusted-artifact-signer): 9 vulnerabilities - [Red Hat 389-Ds-Base](https://junglewise.ai/threats/technologies/389-ds-base): 8 vulnerabilities - [Red Hat streams for Apache Kafka](https://junglewise.ai/threats/technologies/streams-for-apache-kafka): 8 vulnerabilities - [Red Hat OpenShift Lightspeed](https://junglewise.ai/threats/technologies/openshift-lightspeed): 7 vulnerabilities - [Red Hat Lightspeed Core](https://junglewise.ai/threats/technologies/lightspeed-core): 6 vulnerabilities - [Red Hat build of Apache Camel for Spring Boot](https://junglewise.ai/threats/technologies/red-hat-build-of-apache-camel-for-spring-boot): 6 vulnerabilities - [Red Hat Single Sign-On 7](https://junglewise.ai/threats/technologies/single-sign-on-7): 6 vulnerabilities - [Red Hat Build of Apache Camel for Quarkus](https://junglewise.ai/threats/technologies/build-of-apache-camel-for-quarkus): 5 vulnerabilities - [Red Hat Clevis](https://junglewise.ai/threats/technologies/clevis): 5 vulnerabilities - [Red Hat Cockpit Machines](https://junglewise.ai/threats/technologies/cockpit-machines): 5 vulnerabilities - [Red Hat Enterprise Linux 7.0](https://junglewise.ai/threats/technologies/enterprise-linux-7-0): 5 vulnerabilities - [Red Hat Enterprise-Linux-Appstream-Eus](https://junglewise.ai/threats/technologies/enterprise-linux-appstream-eus): 5 vulnerabilities - [Red Hat Fuse 7](https://junglewise.ai/threats/technologies/fuse-7): 5 vulnerabilities - [Red Hat Katello](https://junglewise.ai/threats/technologies/katello): 5 vulnerabilities - [Red Hat Build of Podman Desktop](https://junglewise.ai/threats/technologies/red-hat-build-of-podman-desktop): 5 vulnerabilities - [Red Hat Satellite](https://junglewise.ai/threats/technologies/red-hat-satellite): 5 vulnerabilities - [Red Hat WildFly Core](https://junglewise.ai/threats/technologies/wildfly-core): 5 vulnerabilities - [Red Hat ABRT](https://junglewise.ai/threats/technologies/abrt): 4 vulnerabilities - [Red Hat AMQ Broker](https://junglewise.ai/threats/technologies/amq-broker): 4 vulnerabilities - [Red Hat Ansible-Core](https://junglewise.ai/threats/technologies/ansible-core): 4 vulnerabilities - [Red Hat Apicurio-Registry](https://junglewise.ai/threats/technologies/apicurio-registry-3): 4 vulnerabilities - [Red Hat Data Grid 8](https://junglewise.ai/threats/technologies/data-grid-8): 4 vulnerabilities - [Red Hat Enterprise Application Platform](https://junglewise.ai/threats/technologies/enterprise-application-platform): 4 vulnerabilities - [Red Hat Gfs2-Utils](https://junglewise.ai/threats/technologies/gfs2-utils): 4 vulnerabilities - [Red Hat Gstreamer-Plugins-Good](https://junglewise.ai/threats/technologies/gstreamer-plugins-good): 4 vulnerabilities - [Red Hat Hawtio-Operator](https://junglewise.ai/threats/technologies/hawtio-operator): 4 vulnerabilities - [Red Hat In-Vehicle Operating System 1](https://junglewise.ai/threats/technologies/in-vehicle-operating-system-1): 4 vulnerabilities - [Red Hat OpenShift](https://junglewise.ai/threats/technologies/red-hat-openshift): 4 vulnerabilities - [Red Hat Quarkus](https://junglewise.ai/threats/technologies/red-hat-quarkus): 4 vulnerabilities - [Red Hat RESTEasy](https://junglewise.ai/threats/technologies/resteasy): 4 vulnerabilities - [Red Hat Ansible Lightspeed extension for Visual Studio Code](https://junglewise.ai/threats/technologies/ansible-lightspeed-extension-for-visual-studio-code): 3 vulnerabilities - [Red Hat build of Debezium](https://junglewise.ai/threats/technologies/build-of-debezium): 3 vulnerabilities - [Red Hat Podman Desktop](https://junglewise.ai/threats/technologies/build-of-podman-desktop): 3 vulnerabilities - [Red Hat Certificate System](https://junglewise.ai/threats/technologies/certificate-system): 3 vulnerabilities - [Red Hat Connectivity Link](https://junglewise.ai/threats/technologies/connectivity-link): 3 vulnerabilities - [Red Hat Cost Management Metrics Operator](https://junglewise.ai/threats/technologies/cost-management-metrics-operator): 3 vulnerabilities - [Red Hat GNOME Remote Desktop](https://junglewise.ai/threats/technologies/gnome-remote-desktop): 3 vulnerabilities - [Red Hat Gstreamer-Plugins-Bad-Free](https://junglewise.ai/threats/technologies/gstreamer-plugins-bad-free): 3 vulnerabilities - [Red Hat Infinispan](https://junglewise.ai/threats/technologies/infinispan): 3 vulnerabilities - [Red Hat JBoss EAP](https://junglewise.ai/threats/technologies/jboss-eap): 3 vulnerabilities - [Red Hat Oc-Mirror](https://junglewise.ai/threats/technologies/oc-mirror): 3 vulnerabilities - [Red Hat OpenShift Container Platform 4.0](https://junglewise.ai/threats/technologies/openshift-container-platform-4-0): 3 vulnerabilities - [Red Hat Openshift-Data-Foundation](https://junglewise.ai/threats/technologies/openshift-data-foundation-4): 3 vulnerabilities - [Red Hat PipeWire](https://junglewise.ai/threats/technologies/pipewire): 3 vulnerabilities - [Red Hat Polkit](https://junglewise.ai/threats/technologies/polkit): 3 vulnerabilities - [Red Hat AWX](https://junglewise.ai/threats/technologies/red-hat-awx): 3 vulnerabilities - [Red Hat Red-Hat-Enterprise-Linux-Server](https://junglewise.ai/threats/technologies/red-hat-enterprise-linux-server): 3 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Red Hat vulnerabilities", https://junglewise.ai/threats/vendors/red-hat, 13 November 2026.