RH
Product
Red Hat Ceph Storage 9
21
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 6High 9Medium 6Low 0
Watch
Add Red Hat Ceph Storage 9 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-87872 | 6.8 | Sep 9 | Community.general: community.general: ocapi module_utils (ocapi_command, ocapi_info) hardcode validate_certs=false with no override, enabling tls man-in-the-middle and credential disclosure Affected: All versions, or not specified |
| CVE-2026-40293 | 6.5 | Apr 17 | OpenFGA Playground Preshared Key Exposure Affected: All versions, or not specified |
| CVE-2026-39828 | 6.3 | May 22 | Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh Affected: All versions, or not specified |
| CVE-2025-14104 | 6.1 | Dec 5 | Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames Affected: All versions, or not specified |
| CVE-2026-80158 | 5.5 | Aug 26 | Ansible-collection-community-general: community.general: ipa_getkeytab does not set no_log on the bind_pw parameter, disclosing the ipa bind password in logs and process listings Affected: All versions, or not specified |
| CVE-2024-11831 | 5.4 | Feb 10 | Npm-serialize-javascript: cross-site scripting (xss) in serialize-javascript Affected: All versions, or not specified |
Showing 6