CVE Tools
Track your stack

Red Hat Update Infrastructure 4 For Cloud Providers

15 CVEs tracked. None of them is in CISA KEV.

This hub aggregates every CVE we track for Red Hat Update Infrastructure 4 For Cloud Providers. Use it to gauge the current risk picture and drill into individual advisories.

Red Hat Update Infrastructure 4 For Cloud Providers CVEs per month

Dec 2024 to Nov 2026. Point at a month, or focus the strip and use the arrow keys.
Red Hat Update Infrastructure 4 For Cloud Providers CVEs per month
MonthCVEs
2024-120
2025-010
2025-020
2025-030
2025-040
2025-050
2025-060
2025-070
2025-080
2025-090
2025-100
2025-110
2025-120
2026-010
2026-020
2026-030
2026-040
2026-053
2026-060
2026-072
2026-081
2026-092
2026-102
2026-111

Severity

How the 15 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • Critical213%
  • High640%
  • Medium747%

Latest CVEs

The 15 most recently published vulnerabilities affecting Red Hat Update Infrastructure 4 For Cloud Providers.

  1. CVE-2026-123084Python-pulpcore: pulpcore: header content guard jq filter exposes the content-app environment6.5
  2. CVE-2026-103870Pulp-rpm: distribution tree publish creates directories from .treeinfo ids5.0
  3. CVE-2026-103868Pulp-container: registry credentials are reused across remotes in a worker6.5
  4. CVE-2026-90959Pulpcore: pulpcore: file:// scheme allowlist bypass in content upload file_url field enables arbitrary file read and pulp container registry signing key theft8.1
  5. CVE-2026-84232Pulpcore: python-pulpcore: stored cross-site scripting via inline rendering of uploaded html/svg content5.4
  6. CVE-2026-82327Libsolv: libsolv: out-of-bounds write in repo_write() via unvalidated directory id from vertical/paged .solv filelist data5.5
  7. CVE-2026-12701Pulpcore: pulpcore: relative_path_validator bypass via directory traversal in filesystemexport9.0
  8. CVE-2026-48863Libsolv: stack-based buffer overflow in libsolv eddsa pgp signature verification allows denial of service7.5
  9. CVE-2026-48864Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data7.8
  10. CVE-2026-9149Libsolv: heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv file6.5
  11. CVE-2026-9150Libsolv: stack-based buffer overflow in libsolv's debian metadata parser when handling sha384/sha512 checksums6.5
  12. CVE-2024-7923Puppet-pulpcore: an authentication bypass vulnerability exists in pulpcore9.8
  13. CVE-2024-7143Pulpcore: rbac permissions incorrectly assigned in tasks that create objects8.3
  14. CVE-2023-50782Python-cryptography: bleichenbacher timing oracle attack against rsa decryption - incomplete fix for cve-2020-256597.5
  15. CVE-2023-50781M2crypto: bleichenbacher timing attacks in the rsa decryption api - incomplete fix for cve-2020-256577.5

Product grouping is registry-driven, with AI assist and human review. How it works