Red hat openshift container platform 4

This hub aggregates every CVE we track for Red hat openshift container platform 4, a product in the cloud saas space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Red hat openshift container platform 4.

• CVE-2026-75887Openshift/console: openshift/console: unauthenticated path traversal in i18n locale handler7.5Sep 23, 2026
• CVE-2026-75886Openshift/console: openshift/console: unauthenticated reverse proxy to in-cluster catalogd service with session token forwarding7.2Sep 23, 2026
• CVE-2026-90462Sssd: sssd: fail-open in ldap ppolicy access check allows continued authorization5.4Sep 22, 2026
• CVE-2026-94640Rpcbind: unbounded memory allocation in rpcbind statistics tracking allows unauthenticated remote denial of service7.5Sep 22, 2026
• CVE-2026-95619Gcc: libstdc++ integer overflow in `new` operator7.7Sep 22, 2026
• CVE-2026-95508Libslirp: libslirp: heap buffer overflow in dhcpv6/tftp response builders on small interface mtu7.4Sep 22, 2026
• CVE-2026-75939Openshift/oc-mirror: release signature verification: openpgp signatureerror checked before signed body is consumed7.4Sep 21, 2026
• CVE-2026-92574Cri-o: cri-o checkpoint restore bypasses destination security context8.8Sep 21, 2026
• CVE-2026-15801Cri-o: cri-o: insufficient validation during container checkpoint restore8.0Sep 21, 2026
• CVE-2026-75885Openshift/console: openshift/console: unauthenticated ssrf and resource exhaustion via devfile parser endpoint9.3Sep 18, 2026
• CVE-2026-81627Qemu-kvm: vapic writable rom alias can escape the option-rom window and expose locked smram8.2Sep 18, 2026
• CVE-2026-76781Libxml2: libxml2: null pointer dereference parsing nextcatalog without catalog attribute5.5Sep 17, 2026
• CVE-2026-42784Sequoia-openpgp: sequoia-openpgp: cryptographic integrity compromise via key flag confusion7.4Sep 16, 2026
• CVE-2025-11395Podman: arbitrary file write when importing oci archive5.5Sep 15, 2026
• CVE-2026-79699Podman: buildah: skopeo: containers/storage: malicious tar whiteout header allows replacement of extraction destination directory4.4Sep 15, 2026