RH
Product
Red Hat Container Native Virtualization 4.13
8
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 1High 5Medium 2Low 0
Watch
Add Red Hat Container Native Virtualization 4.13 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-7374 | 9.9 | May 26 | Kubevirt: kubevirt virt-handler: privilege escalation and node compromise via symlink following vulnerability Affected: All versions, or not specified |
| CVE-2026-13622 | 8.8 | Aug 12 | Kubevirt: virt-handler-rhel9: kubevirt: virt-handler migration proxy follows symlinks allowing container escape to host Affected: All versions, or not specified |
| CVE-2026-44494 | 8.7 | Jun 11 | Axios: Full Man-in-the-Middle via Prototype Pollution Gadget in `config.proxy` Affected: All versions, or not specified |
| CVE-2026-44492 | 8.6 | Jun 11 | Axios: shouldBypassProxy does not recognize IPv4-mapped IPv6 addresses, allowing NO_PROXY bypass (incomplete fix for CVE-2025-62718) Affected: All versions, or not specified |
| CVE-2026-44495 | 7.7 | Jun 11 | Axios: Credential Theft and Response Hijacking via Prototype Pollution Gadget in Config Merge Affected: All versions, or not specified |
| CVE-2026-13201 | 7.3 | Jun 24 | Kubevirt: virt-handler-rhel9: kubevirt: safepath symlink following in virt-handler enables notify socket hijacking and node-level vm disruption Affected: All versions, or not specified |
| CVE-2026-35469 | 6.5 | Apr 16 | SpdyStream: DOS on CRI Affected: All versions, or not specified |
| CVE-2026-40175 | 4.8 | Apr 10 | Axios has Unrestricted Cloud Metadata Exfiltration via Header Injection Chain Affected: All versions, or not specified |
Showing 8