RH
Product
Red Hat OpenShift Container Platform 4.17
On CISA KEVExploited in the wild
110
CVEs
2
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 13High 84Medium 12Low 1
Watch
Add Red Hat OpenShift Container Platform 4.17 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-42965 | 6.5 | May 29 | Openshift/router: openshift/router: cloud metadata ssrf via fqdn-typed endpointslice bypasses destination validation Affected: All versions, or not specified |
| CVE-2026-1933 | 6.5 | May 27 | Samba: missing access check on reparse point operations Affected: All versions, or not specified |
| CVE-2026-2340 | 6.5 | May 27 | Samba: vfs_worm does not block directory modification Affected: All versions, or not specified |
| CVE-2026-35469 | 6.5 | Apr 16 | SpdyStream: DOS on CRI Affected: All versions, or not specified |
| CVE-2026-39979 | 6.5 | Apr 13 | jq: Out-of-Bounds Read in jv_parse_sized() Error Formatting for Non-NUL-Terminated Counted Buffers Affected: All versions, or not specified |
| CVE-2025-12801 | 6.5 | Mar 4 | Nfs-utils: rpc.mountd in the nfs-utils privilege escalation Affected: All versions, or not specified |
| CVE-2026-22029 | 6.1 | Jan 10 | React Router vulnerable to XSS via Open Redirects Affected: All versions, or not specified |
| CVE-2026-24049 | 5.5 | Jan 22 | wheel Allows Arbitrary File Permission Modification via Path Traversal Affected: All versions, or not specified |
| CVE-2025-13465 | 5.3 | Jan 21 | Prototype Pollution Vulnerability in Lodash _.unset and _.omit functions Affected: All versions, or not specified |
| CVE-2025-69873 | 2.9 | Feb 11 | ajv (Another JSON Schema Validator) before 8.18.0 is vulnerable to Regular Expression Denial of Service (ReDoS) when the $data option is enabled Affected: All versions, or not specified |