72792 matches found
CVE-2026-73834: Cleartext Storage of Sensitive Information
A flaw was found in the must-gather component of Red Hat Advanced Cluster Management for Kubernetes. Certain ACM wrapper Custom Resources that embed Secret data are collected without redaction. When an administrator runs must-gather, credentials and tokens are captured in cleartext in the resulti...
CVE-2026-66793: Improper Input Validation
A flaw was found in the governance-policy-addon-controller component of Red Hat Advanced Cluster Management for Kubernetes. A user with permissions to annotate the namespaced ManagedClusterAddOn resource can override the governance-policy container image. This allows an attacker to run a controll...
CVE-2026-67443: Missing Authorization
FUXA is a web-based Process Visualization SCADA/HMI/Dashboard software. In 1.3.2 and earlier, the allowDashboard authorization gate in server/integrations/node-red/index.js calls authJwt.verify for /nodered without inspecting the decoded identity. When nodeRedEnabled is true, secureEnabled is tru...
CVE-2026-75485: Insertion of Sensitive Information into Log File
A flaw was found in the must-gather component of Red Hat Advanced Cluster Management for Kubernetes. The cluster Proxy object is dumped in raw form, bypassing the oc inspect redaction that would normally sanitize sensitive fields. This exposes proxy basic-auth credentials in the must-gather...
Red Hat Security Advisory 2026-55857-03
Red Hat Security Advisory 2026-55857-03 - An update for .NET 10.0 is now available for Red Hat Enterprise Linux 9. Issues addressed include bypass, denial of service, and information leakage vulnerabilities...
Red Hat Security Advisory 2026-56130-03
Red Hat Security Advisory 2026-56130-03 - An update for sg3utils is now available for Red Hat Enterprise Linux 8...
Red Hat Security Advisory 2026-56219-03
Red Hat Security Advisory 2026-56219-03 - An update for python3 is now available for Red Hat Enterprise Linux 8. Issues addressed include a bypass vulnerability...
Red Hat Security Advisory 2026-55861-03
Red Hat Security Advisory 2026-55861-03 - An update for haproxy is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Issues addressed include a denial of service vulnerability...
Red Hat Security Advisory 2026-56133-03
Red Hat Security Advisory 2026-56133-03 - An update for attr is now available for Red Hat Enterprise Linux 8. Issues addressed include privilege escalation and traversal vulnerabilities...
Red Hat Security Advisory 2026-55865-03
Red Hat Security Advisory 2026-55865-03 - An update for multiple packages is now available for Red Hat Enterprise Linux 9. Issues addressed include integer overflow, out of bounds read, and out of bounds write vulnerabilities...
Red Hat Security Advisory 2026-55930-03
Red Hat Security Advisory 2026-55930-03 - An update for modhttp2 is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Issues addressed include denial of service and out of bounds read vulnerabilities...
Red Hat Security Advisory 2026-56131-03
Red Hat Security Advisory 2026-56131-03 - An update for pam is now available for Red Hat Enterprise Linux 8...
Red Hat Security Advisory 2026-55856-03
Red Hat Security Advisory 2026-55856-03 - An update for .NET 9.0 is now available for Red Hat Enterprise Linux 9. Issues addressed include bypass, denial of service, and information leakage vulnerabilities...
Red Hat Security Advisory 2026-55618-03
Red Hat Security Advisory 2026-55618-03 - An update for kpatch-patch-6120-211161 is now available for Red Hat Enterprise Linux 10...
Red Hat Security Advisory 2026-55784-03
Red Hat Security Advisory 2026-55784-03 - An update for unbound is now available for Red Hat Enterprise Linux 8...
Red Hat Security Advisory 2026-55762-03
Red Hat Security Advisory 2026-55762-03 - An update for multiple packages is now available for Red Hat Enterprise Linux 8...
PT-2026-77144
Name of the Vulnerable Software and Affected Versions Red Hat Advanced Cluster Management for Kubernetes affected versions not specified Description A flaw in the governance-policy-addon-controller component allows a user with permissions to annotate the namespaced ManagedClusterAddOn resource to...
CVE-2026-18963: Weak Password Recovery Mechanism for Forgotten Password
A flaw was found in the reset-credentials flow of the keycloak-services component, which is the core engine for identity and access management in Red Hat Build of Keycloak. The issue allows an unauthenticated attacker to force the password reset process for any user without needing to click the...
Red Hat Security Advisory 2026-55802-03
Red Hat Security Advisory 2026-55802-03 - An update for haproxy is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Issues addressed include denial of service and integer overflow vulnerabilities...