RH
Product
Red Hat Enterprise Linux 10
On CISA KEVExploited in the wild
860
CVEs
2
On KEV
10.0
Max CVSS
128
New 30D
Severity mix
Critical 74High 419Medium 7Low 0
Watch
Add Red Hat Enterprise Linux 10 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-114406 New | 6.8 | Oct 21 | Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns Affected: All versions, or not specified |
| CVE-2026-92821 | 6.8 | Oct 6 | Sssd: sssd: access control bypass via premature ldap access rule evaluation Affected: All versions, or not specified |
| CVE-2026-6390 | 6.8 | Jul 23 | Nano: gnu nano: arbitrary memory writes, information disclosure, or denial of service via format string vulnerability in error handling. Affected: All versions, or not specified |
| CVE-2026-16615 | 6.8 | Jul 22 | Librest: weak random number generation in pkce implementation Affected: All versions, or not specified |
| CVE-2026-53196 | 6.8 | Jun 25 | USB: serial: io_ti: fix heap overflow in get_manuf_info() Affected: All versions, or not specified |
| CVE-2026-3012 | 6.8 | May 27 | Samba: group policy certificate enrollment uses http:// without validation Affected: All versions, or not specified |
| CVE-2026-48914 | 6.7 | Jun 12 | Qemu-kvm: heap buffer overflow in virtio-blk scsi request handling Affected: All versions, or not specified |
Showing 7
The 500 most important CVEs for this product (exploited first, then by severity)