CVE Tools
Track your stack

Openshift Container Platform

494 CVEs tracked. 12 of them are in CISA KEV.

This hub aggregates every CVE we track for Openshift Container Platform, a product in the operating systems space. Use it to gauge the current risk picture and drill into individual advisories.

Openshift Container Platform CVEs per month

Dec 2024 to Nov 2026. Point at a month, or focus the strip and use the arrow keys.
Openshift Container Platform CVEs per month
MonthCVEs
2024-120
2025-013
2025-021
2025-033
2025-042
2025-051
2025-068
2025-0712
2025-080
2025-092
2025-100
2025-111
2025-124
2026-0111
2026-025
2026-0318
2026-0420
2026-0515
2026-069
2026-070
2026-0810
2026-093
2026-1010
2026-110

Severity

How the 494 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • Critical7515%
  • High18838%
  • Medium20642%
  • Low255%

Latest CVEs

The 15 most recently published vulnerabilities affecting Openshift Container Platform.

  1. CVE-2026-104045Sssd: sssd: denial of service via race condition in autofs responder4.7
  2. CVE-2026-104046Sssd: sssd: denial of service via incomplete identity provider authentication requests6.2
  3. CVE-2026-104048Sssd: sssd: authorization bypass via cross-domain username collision in hbac evaluation6.8
  4. CVE-2026-104047Sssd: sssd: information disclosure via query injection in entra id lookups5.3
  5. CVE-2026-88252Sssd: sssd: denial of service via responder connection retry loop during file descriptor exhaustion4.7
  6. CVE-2026-104039Sssd: sssd: denial of service via stale connection state reuse in pam gssapi responder4.7
  7. CVE-2026-104032Sssd: sssd: denial of service via unprivileged autofs cache invalidation5.5
  8. CVE-2026-104031Sssd: sssd: denial of service via memory exhaustion in autofs responder5.5
  9. CVE-2026-104029Sssd: sssd: denial of service via out-of-bounds read in autofs responder3.3
  10. CVE-2026-104030Sssd: sssd: denial of service via out-of-bounds read during passkey parsing5.5
  11. CVE-2026-90462Sssd: sssd: fail-open in ldap ppolicy access check allows continued authorization5.4
  12. CVE-2026-90996Sssd: sssd: denial of service in nss responder via crafted zero-length requests4.0
  13. CVE-2026-90995Sssd: sssd: local denial of service due to null pointer dereference in pam responder5.5
  14. CVE-2026-19617Libdm: lvm2: libdm: denial of service via uncontrolled recursion in config parser5.5
  15. CVE-2026-19548Binutils: binutils: multiple use-after-free in add_archive_element via lto plugin processing5.5

Product grouping is registry-driven, with AI assist and human review. How it works