R
Vendor security profile21 actively exploited CVEs
redhat
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs718
Critical49
CISA KEV21
Public exploit152
Patch rate%35
Avg. CVSS6.6
12-month vulnerability rate
2
3
6
5
30
44
35
90
65
73
53
11
CVE KEV
CVE severity distribution
718toplam CVE
Critical49 (7%)
High291 (41%)
Medium334 (47%)
Low44 (6%)
Patch and exploitation view
%35
Verified patch
%3
CISA KEV
%21
Public exploit
250Patch available
2Partial
11Workaround
0Vendor: no patch
455Unknown
Latest vulnerabilities
9.3
CVE-2026-107935
Gvisor-tap-vsock: gvisor-tap-vsock: unathenticated arbitrary file deletion on the host via /expose
R
Patch status unknownEPSS %0
4.7
CVE-2026-104045
Sssd: sssd: denial of service via race condition in autofs responder
RH
Patch status unknownEPSS %0
6.2
CVE-2026-104046
Sssd: sssd: denial of service via incomplete identity provider authentication requests
RH
Patch status unknownEPSS %0
6.8
CVE-2026-104048
Sssd: sssd: authorization bypass via cross-domain username collision in hbac evaluation
RH
Patch status unknownEPSS %0
5.3
CVE-2026-104047
Sssd: sssd: information disclosure via query injection in entra id lookups
RH
Patch status unknownEPSS %0
5.5
CVE-2026-76061
Cri-o: cri-o: bind_mount_prefix intermediate-symlink prefix bypass
R
Patch status unknownEPSS %0
8.8
CVE-2026-94422
xdg-dbus-proxy: message filtering bypass via reply serial allows sandbox escape
R
Patch verifiedEPSS %1
7.7
CVE-2026-12544
Foreman: ssti and insecure deserialization in foreman-rake configuration
RH
Patch status unknownEPSS %0
8.2
CVE-2026-12541
Foreman: command injection in foreman-rake database tasks
RH
Patch status unknownEPSS %1
8.2
CVE-2026-12540
Foreman: command injection in foreman-rake errors:fetch_log via request_id parameter
RH
Patch status unknownEPSS %1