OV
Product
Openshift Virtualization
10
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 1High 3Medium 5Low 1
Watch
Add Openshift Virtualization to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-13208 | 6.5 | Jun 24 | Kubevirt: virt-handler-rhel9: kubevirt: virt-handler notify server trusts vmi identity from unauthenticated grpc request body Affected: 4 through 4.22.0 |
| CVE-2026-13318 | 6.4 | Jun 25 | Virt-api-rhel9: kubevirt: kubevirt: ssrf in virt-api port-forward via unvalidated guest-agent-reported ip Affected: 4 through 4.22.0 |
| CVE-2023-48795 | 5.9 | Dec 18 | The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some… Affected: 4 |
| CVE-2026-13434 | 4.9 | Jun 26 | Virt-controller-rhel9: kubevirt: kubevirt: multus default-network annotation injection via unvalidated tenant networkname when externalnetresourceinjection is enabled Affected: 4 through 4.22.0 |
| CVE-2026-13218 | 4.2 | Jun 25 | Kubevirt: kubevirt: symlink following in writetocachedfile allows host file overwrite from virt-launcher Affected: 4 through 4.22.0 |
Showing 5