RH
Product
Red Hat Ceph Storage 6
8
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 5Medium 1Low 1
Watch
Add Red Hat Ceph Storage 6 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-41118 | 9.1 | Apr 15 | Sensitive COS `SecretKey` exposed in plaintext via configuration API due to missing type protection Affected: All versions, or not specified |
| CVE-2026-42154 | 7.5 | May 4 | Prometheus: remote read endpoint allows denial of service via crafted snappy payload Affected: All versions, or not specified |
| CVE-2026-42151 | 7.5 | May 4 | Prometheus Azure AD remote write OAuth client secret exposed via config API Affected: All versions, or not specified |
| CVE-2026-41602 | 7.5 | Apr 28 | Apache Thrift: Go TFramedTransport uint32 overflow Affected: All versions, or not specified |
| CVE-2025-48431 | 7.5 | Apr 28 | Apache Thrift: Specially crafted input can crash a c_glib Thrift server with invalid pointer error. Affected: All versions, or not specified |
| CVE-2026-21728 | 7.5 | Apr 24 | Tempo query limit results in unbounded memory allocation Affected: All versions, or not specified |
| CVE-2026-40293 | 6.5 | Apr 17 | OpenFGA Playground Preshared Key Exposure Affected: All versions, or not specified |
| CVE-2025-8556 | 3.7 | Aug 6 | Github.com/cloudflare/circl: circl-fourq: missing and wrong validation can lead to incorrect results Affected: All versions, or not specified |
Showing 8