CVE Tools
Track your stack

Red Hat Web Terminal

17 CVEs tracked. None of them is in CISA KEV.

This hub aggregates every CVE we track for Red Hat Web Terminal, a product in the operating systems space. Use it to gauge the current risk picture and drill into individual advisories.

Red Hat Web Terminal CVEs per month

Nov 2024 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Red Hat Web Terminal CVEs per month
MonthCVEs
2024-110
2024-120
2025-011
2025-020
2025-030
2025-040
2025-050
2025-060
2025-070
2025-082
2025-090
2025-100
2025-110
2025-120
2026-010
2026-020
2026-030
2026-044
2026-050
2026-060
2026-070
2026-080
2026-090
2026-101

Severity

How the 17 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • Critical212%
  • High953%
  • Medium529%
  • Low16%

Latest CVEs

The 15 most recently published vulnerabilities affecting Red Hat Web Terminal.

  1. CVE-2026-107174Source-to-image: source-to-image: security boundary bypass via absolute symbolic link extraction6.4
  2. CVE-2025-57853Web-terminal: privilege escalation via excessive /etc/passwd permissions6.4
  3. CVE-2026-32281Inefficient policy validation in crypto/x5097.5
  4. CVE-2026-32280Unexpected work during chain building in crypto/x5097.5
  5. CVE-2026-32283Unauthenticated TLS 1.3 KeyUpdate record can cause persistent connection retention and DoS in crypto/tls7.5
  6. CVE-2025-8941Linux-pam: incomplete fix for cve-2025-60207.8
  7. CVE-2025-7195Operator-sdk: privilege escalation due to incorrect permissions of /etc/passwd6.4
  8. CVE-2025-22865ParsePKCS1PrivateKey panic with partial keys in crypto/x5097.5
  9. CVE-2024-24790Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses in net/netip9.8
  10. CVE-2023-29409Large RSA keys can cause high CPU usage in crypto/tls5.3
  11. CVE-2023-24539Improper sanitization of CSS values in html/template7.3
  12. CVE-2023-24537Infinite loop in parsing in go/scanner7.5
  13. CVE-2023-24538Backticks not treated as string delimiters in html/template9.8
  14. CVE-2022-41723Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net7.5
  15. CVE-2022-41717Excessive memory growth in net/http and golang.org/x/net/http25.3

Product grouping is registry-driven, with AI assist and human review. How it works