RH
Product
Red Hat Ceph Storage 9
21
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 6High 9Medium 6Low 0
Watch
Add Red Hat Ceph Storage 9 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-87874 | 8.1 | Sep 9 | Community.general: community.general: memcached cache plugin deserializes untrusted pickle data from memcached, enabling cache-poisoning remote code execution on the ansible controller Affected: All versions, or not specified |
| CVE-2026-44289 | 7.5 | May 13 | protobufjs: Denial of service through unbounded protobuf recursion Affected: All versions, or not specified |
| CVE-2026-42154 | 7.5 | May 4 | Prometheus: remote read endpoint allows denial of service via crafted snappy payload Affected: All versions, or not specified |
| CVE-2026-42151 | 7.5 | May 4 | Prometheus Azure AD remote write OAuth client secret exposed via config API Affected: All versions, or not specified |
| CVE-2026-41602 | 7.5 | Apr 28 | Apache Thrift: Go TFramedTransport uint32 overflow Affected: All versions, or not specified |
| CVE-2025-48431 | 7.5 | Apr 28 | Apache Thrift: Specially crafted input can crash a c_glib Thrift server with invalid pointer error. Affected: All versions, or not specified |
| CVE-2026-21728 | 7.5 | Apr 24 | Tempo query limit results in unbounded memory allocation Affected: All versions, or not specified |
| CVE-2026-21441 | 7.5 | Jan 7 | urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API) Affected: All versions, or not specified |
| CVE-2026-41567 | 7.2 | Jun 5 | Docker: `PUT /containers/{id}/archive` executes container binary on the host Affected: All versions, or not specified |
Showing 9