2026 CVE Database
Every Critical and High CVE published in 2026, with the signals you need to decide what to fix first.
21 CVEs found
| CVE | Severity | Product | Weakness | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2026-71220 Redhat Enterprise Linux | HIGH7.0 | Redhat Enterprise Linux | CWE-787 Out of Bounds Write | 0.2% | Sep 3, 2026 |
| CVE-2026-16442 Redhat Build Of Keycloak | HIGH7.4 | Redhat Build Of Keycloak | CWE-346 | 0.3% | Aug 5, 2026 |
| CVE-2026-16443 Redhat Build Of Keycloak | HIGH7.4 | Redhat Build Of Keycloak | CWE-347 | 0.3% | Aug 5, 2026 |
| CVE-2026-71226 Redhat Hardened Images | HIGH7.3 | Redhat Hardened Images | CWE-416 Use After Free | 0.2% | Aug 5, 2026 |
| CVE-2026-42169 Redhat Enterprise Linux | HIGH7.3 | Redhat Enterprise Linux | CWE-131 | 0.1% | Aug 4, 2026 |
| CVE-2026-18381 Redhat Cost Management Metrics Operator | HIGH7.6 | Redhat Cost Management Metrics Operator | CWE-918 Server Side Request Forgery | 0.4% | Jul 30, 2026 |
| CVE-2026-1609 Redhat Build Of Keycloak | HIGH8.1 | Redhat Build Of Keycloak | CWE-284 Improper Access Control | 0.6% | Jul 16, 2026 |
| CVE-2026-54230 Redhat Automatic Bug Reporting Tool | HIGH7.0 | Redhat Automatic Bug Reporting Tool | CWE-59 | 0.2% | Jun 13, 2026 |
| CVE-2026-46579 Redhat Openshift Container Platform | HIGH7.4 | Redhat Openshift Container Platform | CWE-287 Improper Authentication | 0.6% | May 29, 2026 |
| CVE-2026-4408 Redhat Openshift Container Platform | CRITICAL9.0 | Redhat Openshift Container Platform | CWE-78 OS Command Injection | 1.8% | May 28, 2026 |
| CVE-2026-6859 Redhat Instructlab | HIGH8.8 | Redhat Instructlab | CWE-829 | 0.8% | Apr 22, 2026 |
| CVE-2026-5483 Redhat Openshift Ai | HIGH8.5 | Redhat Openshift Ai | CWE-201 | 0.7% | Apr 10, 2026 |
| CVE-2026-32590 Redhat Mirror Registry For Red Hat Openshift | HIGH7.1 | Redhat Mirror Registry For Red Hat Openshift | CWE-502 Deserialization of Untrusted Data | 0.8% | Apr 8, 2026 |
| CVE-2026-28369 Redhat Build Of Apache Camel - Hawtio | HIGH8.7 | Redhat Build Of Apache Camel - Hawtio | CWE-444 | 0.9% | Mar 27, 2026 |
| CVE-2026-28368 Redhat Build Of Apache Camel - Hawtio | HIGH8.7 | Redhat Build Of Apache Camel - Hawtio | CWE-444 | 0.9% | Mar 27, 2026 |
| CVE-2026-28367 Redhat Build Of Apache Camel - Hawtio | HIGH8.7 | Redhat Build Of Apache Camel - Hawtio | CWE-444 | 0.9% | Mar 27, 2026 |
| CVE-2026-3009 Redhat Build Of Keycloak | HIGH8.1 | Redhat Build Of Keycloak | CWE-863 Incorrect Authorization | 0.5% | Mar 5, 2026 |
| CVE-2026-0980 Redhat Satellite | HIGH8.3 | Redhat Satellite | CWE-78 OS Command Injection | 0.8% | Feb 27, 2026 |
| CVE-2026-1709 Redhat Enterprise Linux | CRITICAL9.4 | Redhat Enterprise Linux | CWE-322 | 5.8% | Feb 6, 2026 |
| CVE-2026-1616 Redhat Open Security Issue Management | HIGH7.5 | Redhat Open Security Issue Management | CWE-22 Path Traversal | 0.5% | Jan 29, 2026 |
| CVE-2025-12543 Redhat Build Of Apache Camel | CRITICAL9.6 | Redhat Build Of Apache Camel | CWE-20 Improper Input Validation | 1.3% | Jan 7, 2026 |
Your next credential
Earn your free CTEM certification.
Knowing the CVE is step one. Learn to scope, prioritize, validate and mobilize fixes with a free CTEM certification.
Free to takePublicly verifiable
Beginner / Practitioner / Program Leader
Explore certifications