RH
Product
Red Hat Update Infrastructure 4 for Cloud Providers
10
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 2Medium 6Low 0
Watch
Add Red Hat Update Infrastructure 4 for Cloud Providers to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-27459 | 9.8 | Mar 17 | pyOpenSSL DTLS cookie callback buffer overflow Affected: All versions, or not specified |
| CVE-2026-12701 | 9.0 | Jul 20 | Pulpcore: pulpcore: relative_path_validator bypass via directory traversal in filesystemexport Affected: All versions, or not specified |
| CVE-2023-50781 | 7.5 | Feb 5 | M2crypto: bleichenbacher timing attacks in the rsa decryption api - incomplete fix for cve-2020-25657 Affected: All versions, or not specified |
| CVE-2026-34993 | 7.3 | Jun 2 | AIOHTTP Vulnerable to Deserialization of Untrusted Data Affected: All versions, or not specified |
| CVE-2026-9149 | 6.5 | May 20 | Libsolv: heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv file Affected: All versions, or not specified |
| CVE-2026-9150 | 6.5 | May 20 | Libsolv: stack-based buffer overflow in libsolv's debian metadata parser when handling sha384/sha512 checksums Affected: All versions, or not specified |
| CVE-2026-82327 | 5.5 | Aug 28 | Libsolv: libsolv: out-of-bounds write in repo_write() via unvalidated directory id from vertical/paged .solv filelist data Affected: All versions, or not specified |
| CVE-2026-1312 | 5.4 | Feb 3 | Potential SQL injection via QuerySet.order_by and FilteredRelation Affected: All versions, or not specified |
| CVE-2026-1287 | 5.4 | Feb 3 | Potential SQL injection in column aliases via control characters Affected: All versions, or not specified |
| CVE-2026-1207 | 5.4 | Feb 3 | Potential SQL injection via raster lookups on PostGIS Affected: All versions, or not specified |
Showing 10