CVE Tools
Track your stack

Red Hat Advanced Cluster Security 4

12 CVEs tracked. None of them is in CISA KEV.

This hub aggregates every CVE we track for Red Hat Advanced Cluster Security 4, a product in the security products space. Use it to gauge the current risk picture and drill into individual advisories.

Red Hat Advanced Cluster Security 4 CVEs per month

Dec 2024 to Nov 2026. Point at a month, or focus the strip and use the arrow keys.
Red Hat Advanced Cluster Security 4 CVEs per month
MonthCVEs
2024-120
2025-010
2025-021
2025-030
2025-040
2025-051
2025-060
2025-070
2025-082
2025-090
2025-100
2025-110
2025-120
2026-011
2026-020
2026-030
2026-040
2026-050
2026-060
2026-073
2026-082
2026-090
2026-101
2026-110

Severity

How the 12 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • High217%
  • Medium867%
  • Low217%

Latest CVEs

The 12 most recently published vulnerabilities affecting Red Hat Advanced Cluster Security 4.

  1. CVE-2026-114236Podman: goroutine/file-descriptor leak in storage/pkg/archive.applylayer and applyuncompressedlayer on malformed layers3.3
  2. CVE-2026-19519Claircore: claircore: denial of service via unchecked type assertion in rpm header parser4.3
  3. CVE-2026-19278Stackrox: stackrox: privilege escalation via unanchored regular expressions in auth m2m role mappings6.8
  4. CVE-2026-10079Stackrox: stackrox: deploy-time policy enforcement and visibility bypass via label injection8.5
  5. CVE-2026-16254Claircore: claircore: denial of service via out-of-bounds slice in claircore's apk installed-database parser4.3
  6. CVE-2026-9165Stackrox: stackrox: unbounded graphql query depth allows authenticated denial of service7.7
  7. CVE-2025-11065Github.com/go-viper/mapstructure/v2: go-viper's mapstructure may leak sensitive information in logs in github.com/go-viper/mapstructure5.3
  8. CVE-2025-7195Operator-sdk: privilege escalation due to incorrect permissions of /etc/passwd6.4
  9. CVE-2025-8556Github.com/cloudflare/circl: circl-fourq: missing and wrong validation can lead to incorrect results3.7
  10. CVE-2025-5198Stackrox: xss in stackrox5.0
  11. CVE-2024-11831Npm-serialize-javascript: cross-site scripting (xss) in serialize-javascript5.4
  12. CVE-2024-0406Mholt/archiver: path traversal vulnerability6.1

Product grouping is registry-driven, with AI assist and human review. How it works