CVE Tools
Track your stack

Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support

208 CVEs tracked. None of them is in CISA KEV.

This hub aggregates every CVE we track for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, a product in the operating systems space. Use it to gauge the current risk picture and drill into individual advisories.

Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support CVEs per month

Dec 2024 to Nov 2026. Point at a month, or focus the strip and use the arrow keys.
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support CVEs per month
MonthCVEs
2024-121
2025-013
2025-0211
2025-031
2025-0411
2025-056
2025-0614
2025-073
2025-082
2025-095
2025-104
2025-115
2025-125
2026-012
2026-023
2026-036
2026-048
2026-0518
2026-0634
2026-0716
2026-0817
2026-0921
2026-101
2026-110

Severity

How the 208 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • Critical105%
  • High15374%
  • Medium4321%
  • Low21%

Latest CVEs

The 15 most recently published vulnerabilities affecting Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support.

  1. CVE-2026-114406Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns6.8
  2. CVE-2026-102559Libsoup: libsoup: heap buffer overflow during websocket client-frame masking8.6
  3. CVE-2026-102558Libsoup: libsoup: heap buffer overflow during websocket receive-buffer growth8.6
  4. CVE-2026-102557Libsoup: libsoup: heap buffer overflow during websocket message reassembly8.6
  5. CVE-2026-102556Libsoup: libsoup: heap buffer overflow from websocket pong signal type confusion8.6
  6. CVE-2026-96280Flatpak: flatpak: buffer overflow in oci delta stream path names on 32-bit systems7.5
  7. CVE-2026-96889Librsvg: use-after-free when xml includes have duplicated entities7.8
  8. CVE-2026-96275Flatpak: flatpak: arbitrary write access as root via extra-data extraction8.8
  9. CVE-2026-96512Sudo: sudo: tz environment variable allows bypass of notbefore/notafter time-based authorization7.8
  10. CVE-2026-86320Flatpak-builder: host code execution via `git am` hook execution in patch source extraction (`use-git-am`)7.8
  11. CVE-2026-18147Freeipa: ipa: freeipa/idm: cross-site scripting vulnerability allows arbitrary code execution via crafted url8.1
  12. CVE-2026-87766Bubblewrap: bubblewrap: symlink traversal via /oldroot allows writing files outside sandbox during setup8.8
  13. CVE-2026-74860Libxml2: double-free/uaf in libxml2 python bindings8.5
  14. CVE-2026-76561Pki-core: dogtag/pki: certprofile-import allows code execution via unsanitized profile content (externalprocessconstraint)7.2
  15. CVE-2026-18922389-ds-base: 389-ds-base: sasl plain authentication allows privilege escalation to directory manager via stale identity in cyrus sasl auxiliary property9.8

Product grouping is registry-driven, with AI assist and human review. How it works