CVE Tools
Track your stack

Red Hat Enterprise Linux 9.6 Extended Update Support

179 CVEs tracked. None of them is in CISA KEV.

This hub aggregates every CVE we track for Red Hat Enterprise Linux 9.6 Extended Update Support, a product in the operating systems space. Use it to gauge the current risk picture and drill into individual advisories.

Red Hat Enterprise Linux 9.6 Extended Update Support CVEs per month

Dec 2024 to Nov 2026. Point at a month, or focus the strip and use the arrow keys.
Red Hat Enterprise Linux 9.6 Extended Update Support CVEs per month
MonthCVEs
2024-120
2025-011
2025-020
2025-030
2025-041
2025-050
2025-061
2025-071
2025-080
2025-091
2025-101
2025-116
2025-125
2026-012
2026-023
2026-039
2026-049
2026-0518
2026-0639
2026-0723
2026-0825
2026-0930
2026-101
2026-110

Severity

How the 179 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • Critical63%
  • High13274%
  • Medium3922%
  • Low21%

Latest CVEs

The 15 most recently published vulnerabilities affecting Red Hat Enterprise Linux 9.6 Extended Update Support.

  1. CVE-2026-114406Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns6.8
  2. CVE-2026-102560Libsoup: libsoup: heap buffer overflow during outgoing permessage-deflate buffer growth8.6
  3. CVE-2026-102559Libsoup: libsoup: heap buffer overflow during websocket client-frame masking8.6
  4. CVE-2026-102558Libsoup: libsoup: heap buffer overflow during websocket receive-buffer growth8.6
  5. CVE-2026-102557Libsoup: libsoup: heap buffer overflow during websocket message reassembly8.6
  6. CVE-2026-102556Libsoup: libsoup: heap buffer overflow from websocket pong signal type confusion8.6
  7. CVE-2026-97024Flatpak: flatpak: arbitrary write in root context via path traversal in deploy directory files/etc7.1
  8. CVE-2026-97023Flatpak: flatpak: arbitrary file deletion in root context via path traversal in deploy directory export/bin7.1
  9. CVE-2026-96280Flatpak: flatpak: buffer overflow in oci delta stream path names on 32-bit systems7.5
  10. CVE-2026-96889Librsvg: use-after-free when xml includes have duplicated entities7.8
  11. CVE-2026-96275Flatpak: flatpak: arbitrary write access as root via extra-data extraction8.8
  12. CVE-2026-96512Sudo: sudo: tz environment variable allows bypass of notbefore/notafter time-based authorization7.8
  13. CVE-2026-80110Pki-core: dogtag pki v2 rest acl filter's reverse-lexicographic tie-break lets a ca agent invoke the admin-only raw profile creation endpoint8.1
  14. CVE-2026-89058Resteasy-core: resteasy: corsfilter reflects arbitrary origin with credentials under wildcard config7.4
  15. CVE-2026-89059Resteasy-core: resteasy: iioimageprovider unbounded image decode (decompression-bomb dos)7.5

Product grouping is registry-driven, with AI assist and human review. How it works