Red Hat OpenShift Container Platform 4.22 vulnerabilities

Product

Red Hat OpenShift Container Platform 4.22

by Red Hat · last CVE Oct 12, 2026

CVEs

On KEV

9.8

Max CVSS

New 30D

Severity mix

Critical 10High 46Medium 7Low 0

Severity

Exploitation

Watch

Add Red Hat OpenShift Container Platform 4.22 to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-42965	6.5	0%	May 29	Openshift/router: openshift/router: cloud metadata ssrf via fqdn-typed endpointslice bypasses destination validation Affected: All versions, or not specified
CVE-2026-1933	6.5	1%	May 27	Samba: missing access check on reparse point operations Affected: All versions, or not specified
CVE-2026-35469	6.5	1%	Apr 16	SpdyStream: DOS on CRI Affected: All versions, or not specified
CVE-2026-39828	6.3	0%	May 22	Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh Affected: All versions, or not specified
CVE-2026-83589	6.1	0%	Oct 1	Oauth-proxy: open redirect via /\ and /\t bypass in post-login redirect Affected: All versions, or not specified
CVE-2026-42338	6.1	0%	May 12	ip-address: XSS in Address6 HTML-emitting methods Affected: All versions, or not specified
CVE-2026-39835	5.3	1%	May 22	Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh Affected: All versions, or not specified