CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 3,189 CVEs published, 239 critical, and 3 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
3,189
Show in the list
Critical, last 7 days
239
Show in the list
Healthcare-tagged, last 7 days
8
Show in the list
Known exploited (CISA KEV)
1,760
Show in the list

Showing CVEs that name the product redhat:advanced_cluster_security. Show all products

83 CVEs
Showing 1 to 10.
CVESeverityTitlePublished
CVE-2026-114406Medium 6.8Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns
Assigned by redhat
Oct 21, 2026
CVE-2026-114236Low 3.3Podman: goroutine/file-descriptor leak in storage/pkg/archive.applylayer and applyuncompressedlayer on malformed layers
Assigned by redhat
Oct 21, 2026
CVE-2026-103314High 7.4Stackrox: stackrox: saml response replay allows multiple central authentication tokens
Assigned by redhat
Oct 19, 2026
CVE-2026-19519Medium 4.3Claircore: claircore: denial of service via unchecked type assertion in rpm header parser
Assigned by redhat
Aug 11, 2026
CVE-2026-19278Medium 6.8Stackrox: stackrox: privilege escalation via unanchored regular expressions in auth m2m role mappings
Assigned by redhat
Aug 10, 2026
CVE-2026-10079High 8.5Stackrox: stackrox: deploy-time policy enforcement and visibility bypass via label injection
Assigned by redhat
Jul 31, 2026
CVE-2026-16254Medium 4.3Claircore: claircore: denial of service via out-of-bounds slice in claircore's apk installed-database parser
Assigned by redhat
Jul 20, 2026
CVE-2026-9165High 7.7Stackrox: stackrox: unbounded graphql query depth allows authenticated denial of service
Assigned by redhat
Jul 6, 2026
CVE-2026-12143High 7.5form-data does not escape CR/LF/quote in multipart field names and filenames (CRLF injection)
Assigned by harborist
Jun 12, 2026
CVE-2026-44486High 7.5Axios: Proxy-Authorization header leaks to redirect target when proxy is re-evaluated to direct connection
Assigned by GitHub_M
Jun 11, 2026

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.