RH
Product
Red Hat OpenShift Container Platform 4.14
by Red Hat · last CVE Oct 21, 2026
On CISA KEVExploited in the wild
97
CVEs
1
On KEV
9.8
Max CVSS
4
New 30D
Severity mix
Critical 10High 77Medium 10Low 0
Watch

Add Red Hat OpenShift Container Platform 4.14 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-114406
New
6.8
0%
Oct 21
Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns
Affected: All versions, or not specified
CVE-2026-3012
6.8
0%
May 27
Samba: group policy certificate enrollment uses http:// without validation
Affected: All versions, or not specified
CVE-2026-1933
6.5
1%
May 27
Samba: missing access check on reparse point operations
Affected: All versions, or not specified
CVE-2026-2340
6.5
1%
May 27
Samba: vfs_worm does not block directory modification
Affected: All versions, or not specified
CVE-2026-35469
6.5
1%
Apr 16
SpdyStream: DOS on CRI
Affected: All versions, or not specified
CVE-2026-39979
6.5
1%
Apr 13
jq: Out-of-Bounds Read in jv_parse_sized() Error Formatting for Non-NUL-Terminated Counted Buffers
Affected: All versions, or not specified
CVE-2026-83589
6.1
0%
Oct 1
Oauth-proxy: open redirect via /\ and /\t bypass in post-login redirect
Affected: All versions, or not specified
CVE-2025-13465
5.3
2%
Jan 21
Prototype Pollution Vulnerability in Lodash _.unset and _.omit functions
Affected: All versions, or not specified
CVE-2024-0874
5.3
1%
Apr 25
Coredns: cd bit response is cached and served later
Affected: All versions, or not specified
CVE-2026-40175
4.8
2%
Apr 10
Axios has Unrestricted Cloud Metadata Exfiltration via Header Injection Chain
Affected: All versions, or not specified
Showing 10