R
Vendor security profile21 actively exploited CVEs
redhat
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs714
Critical48
CISA KEV21
Public exploit144
Patch rate%31
Avg. CVSS6.6
12-month vulnerability rate
2
3
6
5
30
44
35
90
65
73
53
8
CVE KEV
CVE severity distribution
714toplam CVE
Critical48 (7%)
High290 (41%)
Medium332 (46%)
Low44 (6%)
Patch and exploitation view
%31
Verified patch
%3
CISA KEV
%20
Public exploit
218Patch available
2Partial
11Workaround
0Vendor: no patch
483Unknown
Latest vulnerabilities
6.8
CVE-2026-104048
Sssd: sssd: authorization bypass via cross-domain username collision in hbac evaluation
RH
Patch status unknownEPSS %0
5.3
CVE-2026-104047
Sssd: sssd: information disclosure via query injection in entra id lookups
RH
Patch status unknownEPSS %0
5.5
CVE-2026-76061
Cri-o: cri-o: bind_mount_prefix intermediate-symlink prefix bypass
R
Patch status unknownEPSS %0
8.8
CVE-2026-94422
xdg-dbus-proxy: message filtering bypass via reply serial allows sandbox escape
R
Patch verifiedEPSS %1
7.7
CVE-2026-12544
Foreman: ssti and insecure deserialization in foreman-rake configuration
RH
Patch status unknownEPSS %0
8.2
CVE-2026-12541
Foreman: command injection in foreman-rake database tasks
RH
Patch status unknownEPSS %1
8.2
CVE-2026-12540
Foreman: command injection in foreman-rake errors:fetch_log via request_id parameter
RH
Patch status unknownEPSS %1
7.5
CVE-2026-12423
Foreman: unauthenticated information disclosure via provisioning token validation flaw
RH
Patch status unknownEPSS %0
6.2
CVE-2026-19267
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
I
Patch verifiedEPSS %0
8.2
CVE-2026-19179
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
I
Patch verifiedEPSS %0