Important: Red Hat Security Advisory: Red Hat Web Terminal Operator 1.11.1 release.

Red Hat Web Terminal Operator 1.11.1 has been released. The Web Terminal provides a way to access a fully in-browser terminal emulator within the OpenShift Console. Command-line tools for interacting with the OpenShift cluster are pre-installed...

Important: Red Hat Security Advisory: Red Hat Web Terminal Operator 1.15.1 release.

Red Hat Web Terminal Operator 1.15.1 has been released. The Web Terminal provides a way to access a fully in-browser terminal emulator within the OpenShift Console. Command-line tools for interacting with the OpenShift cluster are pre-installed...

Important: Red Hat Security Advisory: Red Hat Web Terminal Operator 1.16.1 release.

Red Hat Web Terminal Operator 1.16.1 has been released. The Web Terminal provides a way to access a fully in-browser terminal emulator within the OpenShift Console. Command-line tools for interacting with the OpenShift cluster are pre-installed...

Important: Red Hat Security Advisory: Red Hat Web Terminal Operator 1.12.1 release.

Red Hat Web Terminal Operator 1.12.1 has been released. The Web Terminal provides a way to access a fully in-browser terminal emulator within the OpenShift Console. Command-line tools for interacting with the OpenShift cluster are pre-installed...

PT-2026-77308

Name of the Vulnerable Software and Affected Versions FUXA versions prior to 1.3.3 Description An authorization bypass exists in the allowDashboard gate within server/integrations/node-red/index.js where authJwt.verify is called for the /nodered endpoint without inspecting the decoded identity...

Red Hat Security Advisory 2026-55772-03

Red Hat Security Advisory 2026-55772-03 - An update for haproxy is now available for Red Hat Enterprise Linux 9. Issues addressed include denial of service and integer overflow vulnerabilities...

Red Hat Security Advisory 2026-56048-03

Red Hat Security Advisory 2026-56048-03 - An update for the redhat-ds:12 module is now available for Red Hat Directory Server 12.2 E4S for RHEL 9. Issues addressed include buffer overflow and null pointer vulnerabilities...

Red Hat Security Advisory 2026-56047-03

Red Hat Security Advisory 2026-56047-03 - An update for the redhat-ds:11 module is now available for Red Hat Directory Server 11.7 E4S for RHEL 8. Issues addressed include buffer overflow and null pointer vulnerabilities...

Red Hat Security Advisory 2026-55804-03

Red Hat Security Advisory 2026-55804-03 - An update for nghttp2 is now available for Red Hat Enterprise Linux 8...

Red Hat Security Advisory 2026-55859-03

Red Hat Security Advisory 2026-55859-03 - An update for haproxy is now available for Red Hat Enterprise Linux 8. Issues addressed include a denial of service vulnerability...

PT-2026-77227

Name of the Vulnerable Software and Affected Versions Red Hat Advanced Cluster Management for Kubernetes affected versions not specified Description A flaw in the submariner-operator component allows a cluster administrator or any user with permissions to modify the Submariner Custom Resource CR ...

PT-2026-77155

Name of the Vulnerable Software and Affected Versions Red Hat Advanced Cluster Management for Kubernetes affected versions not specified Description A flaw in the must-gather component allows certain ACM wrapper Custom Resources that embed Secret data to be collected without redaction. When an...

Red Hat Security Advisory 2026-55860-03

Red Hat Security Advisory 2026-55860-03 - An update for haproxy is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Issues addressed include a denial of service vulnerability...

Red Hat Security Advisory 2026-55855-03

Red Hat Security Advisory 2026-55855-03 - An update for libssh is now available for Red Hat Enterprise Linux 10. Issues addressed include buffer overflow, bypass, denial of service, information leakage, and use-after-free vulnerabilities...

Red Hat Security Advisory 2026-55763-03

Red Hat Security Advisory 2026-55763-03 - An update for kpatch-patch-5140-687101 is now available for Red Hat Enterprise Linux 9...

Red Hat Security Advisory 2026-33521-03

Red Hat Security Advisory 2026-33521-03 - An update for Red Hat Hardened Images RPMs is now available...

Red Hat Security Advisory 2026-56050-03

Red Hat Security Advisory 2026-56050-03 - An update for the redhat-ds:12 module is now available for Red Hat Directory Server 12.4 E4S for RHEL 9. Issues addressed include buffer overflow and null pointer vulnerabilities...

CVE-2026-66783: Reliance on Insufficiently Trustworthy Component

A flaw was found in the submariner-operator component of Red Hat Advanced Cluster Management for Kubernetes. This vulnerability allows a cluster administrator, or any user with permissions to modify the Submariner Custom Resource CR, to specify an unvalidated image path. This lack of validation...

CVE-2026-73834: Cleartext Storage of Sensitive Information

A flaw was found in the must-gather component of Red Hat Advanced Cluster Management for Kubernetes. Certain ACM wrapper Custom Resources that embed Secret data are collected without redaction. When an administrator runs must-gather, credentials and tokens are captured in cleartext in the resulti...

CVE-2026-66793: Improper Input Validation

A flaw was found in the governance-policy-addon-controller component of Red Hat Advanced Cluster Management for Kubernetes. A user with permissions to annotate the namespaced ManagedClusterAddOn resource can override the governance-policy container image. This allows an attacker to run a controll...