2026 CVE Database
Every Critical and High CVE published in 2026, with the signals you need to decide what to fix first.
12 CVEs found
| CVE | Severity | Product | Weakness | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2026-50240 Red Hat OpenShift Pipelines-as-Code (PAC) | HIGH8.8 | Red Hat OpenShift Pipelines-as-Code (PAC) | CWE-862 Missing Authorization | n/a | Nov 6, 2026 |
| CVE-2026-97847 Red Hat protocol mapper and identity resolution components of Keycloak | HIGH7.1 | Red Hat protocol mapper and identity resolution components of Keycloak | CWE-287 Improper Authentication | n/a | Nov 5, 2026 |
| CVE-2026-97175 Red Hat idp-auto-link authenticator of the keycloak-services component | HIGH8.8 | Red Hat idp-auto-link authenticator of the keycloak-services component | CWE-287 Improper Authentication | n/a | Nov 5, 2026 |
| CVE-2026-96453 Red Hat Keycloak Admin CLI kcadm tool | HIGH8.0 | Red Hat Keycloak Admin CLI kcadm tool | CWE-295 | n/a | Nov 5, 2026 |
| CVE-2026-92857 Red Hat product | HIGH8.1 | Red Hat product | CWE-20 Improper Input Validation | n/a | Nov 5, 2026 |
| CVE-2026-92855 Red Hat SAML identity broker component of Keycloak | HIGH7.4 | Red Hat SAML identity broker component of Keycloak | CWE-287 Improper Authentication | n/a | Nov 5, 2026 |
| CVE-2026-121995 Red Hat GDB client's tracepoint upload handler | HIGH7.5 | Red Hat GDB client's tracepoint upload handler | CWE-121 Stack Buffer Overflow | 0.3% | Nov 5, 2026 |
| CVE-2026-112208 Red Hat Organization identity-first login flow of the Keycloak authentication server | HIGH8.1 | Red Hat Organization identity-first login flow of the Keycloak authentication server | CWE-305 | n/a | Nov 5, 2026 |
| CVE-2026-110931 Red Hat SAML | HIGH7.5 | Red Hat SAML | CWE-835 | n/a | Nov 5, 2026 |
| CVE-2026-107602 Red Hat SAML | HIGH7.5 | Red Hat SAML | CWE-835 | n/a | Nov 5, 2026 |
| CVE-2026-103112 Red Hat authentication session handling of the keycloak-services component in Keycloak | HIGH7.5 | Red Hat authentication session handling of the keycloak-services component in Keycloak | CWE-362 Race Condition | n/a | Nov 5, 2026 |
| CVE-2026-82976 Red Hat image-customization-controller used in OpenShift's bare metal provisioning stack | HIGH7.1 | Red Hat image-customization-controller used in OpenShift's bare metal provisioning stack | CWE-548 | 0.2% | Nov 3, 2026 |
Your next credential
Earn your free CTEM certification.
Knowing the CVE is step one. Learn to scope, prioritize, validate and mobilize fixes with a free CTEM certification.
Free to takePublicly verifiable
Beginner / Practitioner / Program Leader
Explore certifications