Red Hat Red Hat Openshift Container Platform 5
12 CVEs affecting Red Hat Red Hat Openshift Container Platform 5. Latest disclosed: 2026-10-29. Critical: 0, High: 9.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-104795 | High | 8.8 | 2026-10-14 | The insights-runtime-extractor runs as a privileged DaemonSet (`hostPID: true`) that scans container processes for runtime fingerprinting. When scanning a cont… |
CVE-2026-92574 | High | 8.8 | 2026-09-21 | A vulnerability in CRI-O checkpoint restore allows a user who can create a pod from a malicious checkpointed container to bypass the destination Kubernetes sec… |
CVE-2026-92982 | High | 8.5 | 2026-10-15 | A flaw was found in Ansible Operator Plugins. A low-privileged Kubernetes user can exploit a Jinja2 template injection vulnerability by crafting malicious cust… |
CVE-2026-15801 | High | 8.0 | 2026-09-21 | A vulnerability was found in CRI-O related to the container checkpoint and restore feature. When CRI-O is configured to restore containers from checkpoint arch… |
CVE-2026-75888 | High | 7.7 | 2026-10-12 | A flaw was found in the OpenShift console. An authenticated console user can exploit a Server-Side Request Forgery (SSRF) vulnerability by providing a speciall… |
CVE-2026-93017 | High | 7.7 | 2026-10-08 | The `insights-operator-gather` ClusterRole grants the operator's service account read access to secrets in the core API group with no namespace or resourceName… |
CVE-2026-94640 | High | 7.5 | 2026-09-22 | A flaw was found in rpcbind. This vulnerability allows a remote, unauthenticated attacker to cause a Denial of Service (DoS) by sending a large number of uniqu… |
CVE-2026-92092 | High | 7.4 | 2026-10-29 | A flaw was found in openshift-ansible. The installer container's `run` script downloads and executes remote inventory and dynamic scripts without integrity ver… |
CVE-2026-12080 | High | 7.3 | 2026-07-20 | A flaw was found in the QEMU Guest Agent (qga). A local unprivileged user can exploit a vulnerability in the guest-ssh-add-authorized-keys command handler by m… |
CVE-2026-93006 | Medium | 6.8 | 2026-10-29 | A flaw was found in dnsmasq. The TFTP server can serve the wrong file contents because a recently used transfer cache is not invalidated when a transfer finish… |
CVE-2026-114406 | Medium | 6.8 | 2026-10-21 | The system certificate authority (CA) store in Red Hat products, distributed via ca-certificates RPM packages, included multiple root CA certificates of author… |
CVE-2026-85498 | Low | 3.5 | 2026-10-29 | A flaw was found in polkit. When processing input that begins with a null byte, an arithmetic error in the authentication agent helper causes an integer underf… |