RH
Product
Red Hat OpenShift Container Platform 4.21
On CISA KEVExploited in the wild
84
CVEs
2
On KEV
10.0
Max CVSS
5
New 30D
Severity mix
Critical 15High 58Medium 11Low 0
Watch
Add Red Hat OpenShift Container Platform 4.21 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-50236 | 7.4 | Aug 11 | Openshift/console: authenticated ssrf with full response reflection and path neutralization via dev console webhook helpers in openshift console Affected: All versions, or not specified |
| CVE-2026-50237 | 7.4 | Aug 11 | Openshift/console: namespace tenant ssrf with egress bypass, catalog poisoning, and admin-mediated supply chain escalation via projecthelmchartrepository in openshift console Affected: All versions, or not specified |
| CVE-2026-42033 | 7.4 | Apr 24 | Axios: Prototype Pollution Gadgets - Response Tampering, Data Exfiltration, and Request Hijacking Affected: All versions, or not specified |
| CVE-2026-75886 | 7.2 | Sep 23 | Openshift/console: openshift/console: unauthenticated reverse proxy to in-cluster catalogd service with session token forwarding Affected: All versions, or not specified |
| CVE-2026-96577 | 7.1 | Oct 1 | Oc-mirror__release-4.21: embedded local cache registry listens on all interfaces without authentication, with delete enabled Affected: All versions, or not specified |
| CVE-2026-87114 | 7.1 | Sep 28 | Kube-compare: container:// reference extraction runs the image entrypoint and silently escalates to sudo Affected: All versions, or not specified |
| CVE-2026-46243 | 7.1 | Jun 1 | smb: client: reject userspace cifs.spnego descriptions Affected: All versions, or not specified |
| CVE-2025-54518 | 7.0 | May 15 | Improper isolation of shared resources within the CPU operation cache on Zen 2-based products could allow an attacker to corrupt instructions executed at a different privilege… Affected: All versions, or not specified |