Red hat openshift container platform 4

This hub aggregates every CVE we track for Red hat openshift container platform 4, a product in the cloud saas space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Red hat openshift container platform 4.

• CVE-2026-15816Dracut: dracut: root code execution via unescaped error message written to sourced emergency hook script in die()7.5Aug 7, 2026
• CVE-2026-18938P11-kit: integer overflow in rpc attribute-array length calculation can under-allocate nested attribute storage on 32 bit systems6.2Aug 7, 2026
• CVE-2026-19079Policycoreutils: policycoreutils: toctou race condition in fixfiles allows arbitrary selinux label manipulation4.4Aug 7, 2026
• CVE-2026-18839Popt-devel: popt-static: size_t underflow in singleoptionhelp2.2Aug 5, 2026
• CVE-2026-49331Openshift/oauth-proxy: openshift/oauth-proxy: unauthenticated identity header injection on whitelisted paths6.5Aug 5, 2026
• CVE-2026-71227Libkcapi: infinite loop denial of service in libkcapi _kcapi_aio_read_all() due to unhandled io_getevents() timeout return5.1Aug 5, 2026
• CVE-2026-71226Libkcapi: memory corruption via uncanceled aio requests on error in libkcapi's one-shot aio path7.3Aug 5, 2026
• CVE-2026-71225Libkcapi: iv reuse in libkcapi one-shot symmetric cipher chunking causes cipher state reset across chunk boundaries6.5Aug 5, 2026
• CVE-2026-68743Sssd: sssd: pam responder out-of-bounds read via unchecked auth_token_length in protocol v15.5Aug 4, 2026
• CVE-2026-18739Popt-devel: popt-static: off-by-one in poptstuffargs2.5Aug 4, 2026
• CVE-2026-68744Sssd: sssd: nss responder uninitialized heap disclosure in initgroups reply3.3Aug 4, 2026
• CVE-2026-18477Tar: tar: toctou in incremental dumpdir 'x' rename handling allows restore path escape4.4Aug 3, 2026
• CVE-2026-18508Tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite4.4Aug 3, 2026
• CVE-2026-68742Sssd: sssd: nss responder out-of-bounds read via unchecked addrlen in gethostbyaddr5.5Aug 3, 2026
• CVE-2026-58216Samba: kpasswd service: kpasswd packet that contains malformed asn.1 might cause the server to access 6 bytes of unallocated memory leading server to crash5.3Jul 30, 2026