Red Hat OpenShift Container Platform 4.19 vulnerabilities

Product

Red Hat OpenShift Container Platform 4.19

by Red Hat · last CVE Oct 12, 2026

On CISA KEVExploited in the wild

112

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities112 In the news12 Timeline

Severity mix

Critical 13High 88Medium 11Low 0

Severity

All severities112 Critical13 High88 Medium11 Low0

Exploitation

On CISA KEV1 Exploited in the wild1

Watch

Add Red Hat OpenShift Container Platform 4.19 to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2025-5222	7.0	0%	May 27	Icu: stack buffer overflow in the srbroot::addtag function Affected: All versions, or not specified
CVE-2026-3012	6.8	0%	May 27	Samba: group policy certificate enrollment uses http:// without validation Affected: All versions, or not specified
CVE-2026-42965	6.5	0%	May 29	Openshift/router: openshift/router: cloud metadata ssrf via fqdn-typed endpointslice bypasses destination validation Affected: All versions, or not specified
CVE-2026-1933	6.5	1%	May 27	Samba: missing access check on reparse point operations Affected: All versions, or not specified
CVE-2026-2340	6.5	1%	May 27	Samba: vfs_worm does not block directory modification Affected: All versions, or not specified
CVE-2026-35469	6.5	1%	Apr 16	SpdyStream: DOS on CRI Affected: All versions, or not specified
CVE-2026-39979	6.5	1%	Apr 13	jq: Out-of-Bounds Read in jv_parse_sized() Error Formatting for Non-NUL-Terminated Counted Buffers Affected: All versions, or not specified
CVE-2025-12801	6.5	0%	Mar 4	Nfs-utils: rpc.mountd in the nfs-utils privilege escalation Affected: All versions, or not specified
CVE-2026-83589	6.1	0%	Oct 1	Oauth-proxy: open redirect via /\ and /\t bypass in post-login redirect Affected: All versions, or not specified
CVE-2026-4891	5.3	6%	May 11	No description published yet Affected: All versions, or not specified
CVE-2025-13465	5.3	2%	Jan 21	Prototype Pollution Vulnerability in Lodash _.unset and _.omit functions Affected: All versions, or not specified
CVE-2026-40175	4.8	2%	Apr 10	Axios has Unrestricted Cloud Metadata Exfiltration via Header Injection Chain Affected: All versions, or not specified