Openshift container platform

This hub aggregates every CVE we track for Openshift container platform, a product in the operating systems space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Openshift container platform.

• CVE-2026-13757P11-kit: stack exhaustion via unbounded recursion in rpc attribute parsing6.2Jun 29, 2026
• CVE-2026-13595Util-linux: util-linux: heap use-after-free in libblkid nested partition probing6.8Jun 29, 2026
• CVE-2026-55653Openssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validation leads to client-side denial of service4.3Jun 23, 2026
• CVE-2026-12725Dnsmasq: dnsmasq: heap buffer overflow in log_query() when logging unsupported ds/dnskey replies5.9Jun 22, 2026
• CVE-2026-54100Windows-machine-config-operator: windows-machine-config-operator: ssh host key not verified enables credential theft8.3Jun 22, 2026
• CVE-2026-54099Windows-machine-config-operator: windows-machine-config-operator: wicd csr extra-organization allows privilege escalation to system:masters8.8Jun 22, 2026
• CVE-2026-1784Ose-cluster-ingress-operator: remote code execution through haproxy configuration injection8.8Jun 2, 2026
• CVE-2026-10533Openshift: openshift: non-admin user can bypass resourcequota and flood etcd with events causing cluster-wide api degradation5.0Jun 1, 2026
• CVE-2026-42965Openshift/router: openshift/router: cloud metadata ssrf via fqdn-typed endpointslice bypasses destination validation7.7May 29, 2026
• CVE-2026-46579Openshift/router: openshift/router: mtls client certificate spoofing via unstripped x-ssl-client headers on http frontend7.4May 29, 2026
• CVE-2026-4408Samba: remote code execution in samr9.0May 28, 2026
• CVE-2026-1933Samba: missing access check on reparse point operations7.1May 27, 2026
• CVE-2026-2340Samba: vfs_worm does not block directory modification6.5May 27, 2026
• CVE-2026-3012Samba: group policy certificate enrollment uses http:// without validation8.0May 27, 2026
• CVE-2026-48864Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data7.8May 26, 2026