Vulnerability feed

CVE and vendor PSIRT advisories from 13 sources, last 30 days. Updated hourly, last run Oct 26 03:05 UTC

Critical in the last 24 hours

1602 in 30 days

Newly known exploited

In the last 24 hours, CISA KEV and vendor reports

Sources checked

Every hour, see the list

New in the last 24 hours

149-75% vs 7-day avg of 597

2 critical, 41 high, 60 medium, 26 low

Expand	Severity	Score	Advisory	Title	Source	Published
	Low	3.5	CVE-2026-115449	A flaw was found in libslirp Red Hat, libslirpRed Hat Enterprise Linux 10, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat OpenShift Container Platform 4, libslirp	NVD	Oct 22 22:18 UTC
CVE-2026-115449A flaw was found in libslirp Executive summary A flaw in libslirp, the user-mode networking library used by some virtual machine setups, can leak the host's real IP address to a guest system. Red Hat rates it as low severity, with a CVSS v3 base score of 3.5 in its own assessment, and the flaw only occurs under specific conditions. The advisory describes the normal ICMP path as unaffected and recommends ensuring the QEMU user's group is in ping_group_range, or avoiding user-mode networking. Technical summary The issue is a CWE-200 information exposure caused by an ICMP echo reply length that is not updated to match the data received from the host. It occurs only when the SOCK_DGRAM ICMP socket is unavailable and libslirp falls back to a raw socket, such as when ping_group_range is restricted, and the guest pings a nonexistent host on the hypervisor's LAN. The advisory says the attack vector is network with high complexity and low privileges required, and the Red Hat CVSS vector is CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N. The advisory says the leak is limited to 4 bytes of host IP address and not arbitrary heap memory. Mitigations are to include the QEMU process user's GID in net.ipv4.ping_group_range or to use --net none or virtio-net with a TAP backend. Affected and fixed version numbers, and detection guidance, are not stated in the advisory text. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from access.redhat.com/security/cve/CVE-2026-115449 Impact if exploited ConfidentialityLow IntegrityNone AvailabilityNone How it is exploited Attack vector Network Attack complexity High Privileges required Low User interaction None Scope Changed CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N Affects Red Hat libslirp Red Hat Enterprise Linux 10 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 9 Red Hat OpenShift Container Platform 4 libslirp NIST National Vulnerability DatabasePublished Oct 22, 2026 22:18 UTC Read the advisory
	Medium	5.5	CVE-2026-115424	A flaw was found in the OpenShift client oc Red HatRed Hat OpenShift Container Platform 4, Red Hat OpenShift, Red Hat oc	NVD	Oct 22 22:18 UTC
CVE-2026-115424A flaw was found in the OpenShift client oc Executive summary A flaw in the OpenShift command-line client oc lets a malicious container image write files outside the intended extraction folder when a user runs oc image extract. The advisory rates it 5.5 (Medium) on Red Hat's CVSS v3.1 score and says the affected versions are still being determined, so no fixed release is named yet. Until an updated oc client is available, the vendor recommends extracting only from trusted container images. Technical summary The weakness is a symbolic and hard link target validation bypass (CWE-61, UNIX symbolic link following) in oc image extract. Symlink and hardlink targets can point to absolute paths or to sibling directories, and a string-prefix containment check lets them pass, so later archive entries are written through the planted link. Exploitation requires a user to extract a malicious image (CVSS AV:L/AC:L/PR:N/UI:R, integrity impact High, no confidentiality or availability impact). Affected versions are not yet stated, and no fixed version is stated. The advisory says no configuration option disables only this behavior, so the workarounds are to treat images as trusted, run as an unprivileged user into an isolated destination, avoid fixed predictable paths in CI, and restrict who can change image references. Detection guidance is not stated. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from access.redhat.com/security/cve/CVE-2026-115424 Impact if exploited ConfidentialityNone IntegrityHigh AvailabilityNone How it is exploited Attack vector Local Attack complexity Low Privileges required None User interaction Required Scope Unchanged CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N Affects Red Hat Red Hat OpenShift Container Platform 4 Red Hat OpenShift Red Hat oc NIST National Vulnerability DatabasePublished Oct 22, 2026 22:18 UTC Read the advisory
	Medium	6.2	CVE-2026-92824	A flaw was found in libmodulemd Red HatRed Hat Enterprise Linux 10, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Hardened Images, Red Hat OpenShift Container Platform 4	NVD	Oct 21 04:18 UTC
CVE-2026-92824A flaw was found in libmodulemd From the advisory A flaw was found in libmodulemd. In the module stream v2 rpm-map emission path, an inner loop incorrectly uses the count of digest algorithms as its bound instead of the number of checksums in the current digest table. Crafted modulemd v2 metadata with multiple digest types can trigger an out-of-bounds read during YAML serialization, typically causing a crash and resulting in a denial of service. Impact if exploited ConfidentialityNone IntegrityNone AvailabilityHigh How it is exploited Attack vector Local Attack complexity Low Privileges required None User interaction None Scope Unchanged CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affects Red Hat Red Hat Enterprise Linux 10 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 9 Red Hat Hardened Images Red Hat OpenShift Container Platform 4 NIST National Vulnerability DatabasePublished Oct 21, 2026 04:18 UTC Read the advisory
	Medium	6.2	CVE-2026-92823	A flaw was found in libmodulemd Red HatRed Hat Enterprise Linux 10, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Hardened Images, Red Hat OpenShift Container Platform 4	NVD	Oct 21 04:18 UTC
CVE-2026-92823A flaw was found in libmodulemd From the advisory A flaw was found in libmodulemd. In builds with rpmio support enabled, compressed modulemd YAML is decompressed through a custom read handler that does not enforce a cumulative decompressed-size limit before parsing. An attacker who can supply a highly compressible compressed YAML file can cause excessive CPU and memory consumption, resulting in a denial of service. Impact if exploited ConfidentialityNone IntegrityNone AvailabilityHigh How it is exploited Attack vector Local Attack complexity Low Privileges required None User interaction None Scope Unchanged CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affects Red Hat Red Hat Enterprise Linux 10 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 9 Red Hat Hardened Images Red Hat OpenShift Container Platform 4 NIST National Vulnerability DatabasePublished Oct 21, 2026 04:18 UTC Read the advisory
	Medium	6.2	CVE-2026-92822	A flaw was found in libmodulemd Red HatRed Hat Enterprise Linux 10, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Hardened Images, Red Hat OpenShift Container Platform 4	NVD	Oct 21 04:18 UTC
CVE-2026-92822A flaw was found in libmodulemd From the advisory A flaw was found in libmodulemd. When parsing module metadata, the xmd field is converted into nested GVariant values through recursive YAML mapping and sequence helpers without a recursion-depth or node-count limit. An attacker who can supply crafted modulemd YAML with deeply nested xmd content can cause stack exhaustion or excessive resource consumption, resulting in a denial of service. Impact if exploited ConfidentialityNone IntegrityNone AvailabilityHigh How it is exploited Attack vector Local Attack complexity Low Privileges required None User interaction None Scope Unchanged CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affects Red Hat Red Hat Enterprise Linux 10 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 9 Red Hat Hardened Images Red Hat OpenShift Container Platform 4 NIST National Vulnerability DatabasePublished Oct 21, 2026 04:18 UTC Read the advisory
	Medium	5.1	CVE-2026-114038	A flaw was found in device-mapper-multipath Red HatRed Hat Enterprise Linux 10, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 6, Red Hat OpenShift Container Platform 4	NVD	Oct 21 01:17 UTC
CVE-2026-114038A flaw was found in device-mapper-multipath From the advisory A flaw was found in device-mapper-multipath. A local user can trigger an out-of-bounds read by sending a command with a format string ending in a trailing percent character to the multipath daemon. This issue can allow the user to expose unintended daemon memory, leading to information disclosure, or cause the daemon to crash, resulting in a Denial of Service (DoS). Impact if exploited ConfidentialityLow IntegrityNone AvailabilityLow How it is exploited Attack vector Local Attack complexity Low Privileges required None User interaction None Scope Unchanged CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L Affects Red Hat Red Hat Enterprise Linux 10 Red Hat Enterprise Linux 7 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 6 Red Hat OpenShift Container Platform 4 NIST National Vulnerability DatabasePublished Oct 21, 2026 01:17 UTC Read the advisory
	High	7.4	CVE-2026-16460	A flaw was found in bootc and ostree Red HatRed Hat Enterprise Linux 10, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Hardened Images, Red Hat OpenShift Container Platform 4	NVD	Oct 19 07:16 UTC
CVE-2026-16460A flaw was found in bootc and ostree From the advisory A flaw was found in bootc and ostree. Already-staged deployments are finalized without revalidating the deployment's container image against the current containers signature policy. Unsigned OS content staged under a prior permissive policy can remain bootable after policy is hardened to reject unsigned images, leading to full host compromise on reboot. Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Local Attack complexity High Privileges required None User interaction None Scope Unchanged CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affects Red Hat Red Hat Enterprise Linux 10 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 9 Red Hat Hardened Images Red Hat OpenShift Container Platform 4 NIST National Vulnerability DatabasePublished Oct 19, 2026 07:16 UTC Read the advisory
	Medium	5.9	CVE-2026-89096	A flaw was found in nfs-utils Red HatRed Hat Enterprise Linux 10, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 6, Red Hat OpenShift Container Platform 4	NVD	Oct 16 23:17 UTC
CVE-2026-89096A flaw was found in nfs-utils From the advisory A flaw was found in nfs-utils. An unauthenticated remote attacker can trigger a Denial of Service (DoS) by sending repeated state notification requests to an exposed rpc.statd service. The service fails to properly release memory allocated during callback processing, leading to continuous memory growth. Sustained requests can exhaust system resources, eventually causing the service to degrade or crash. Impact if exploited ConfidentialityNone IntegrityNone AvailabilityHigh How it is exploited Attack vector Network Attack complexity High Privileges required None User interaction None Scope Unchanged CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Affects Red Hat Red Hat Enterprise Linux 10 Red Hat Enterprise Linux 7 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 6 Red Hat OpenShift Container Platform 4 NIST National Vulnerability DatabasePublished Oct 16, 2026 23:17 UTC Read the advisory
	Medium	5.3	CVE-2026-85977	A flaw was found in libtirpc Red HatRed Hat Enterprise Linux 10, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Hardened Images, Red Hat Enterprise Linux 6, Red Hat OpenShift Container Platform 4	NVD	Oct 16 19:17 UTC
CVE-2026-85977A flaw was found in libtirpc From the advisory A flaw was found in libtirpc. A remote attacker can exploit this vulnerability by sending specially crafted PMAPPROC_DUMP replies to a client application that uses the pmap_getmaps() function against an attacker-controlled host. This unbounded decoding can lead to excessive memory and CPU allocation, causing the client process to experience a Denial of Service (DoS) due to resource exhaustion. Impact if exploited ConfidentialityNone IntegrityNone AvailabilityHigh How it is exploited Attack vector Network Attack complexity High Privileges required None User interaction Required Scope Unchanged CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H Affects Red Hat Red Hat Enterprise Linux 10 Red Hat Enterprise Linux 7 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 9 Red Hat Hardened Images Red Hat Enterprise Linux 6 Red Hat OpenShift Container Platform 4 NIST National Vulnerability DatabasePublished Oct 16, 2026 19:17 UTC Read the advisory
	Medium	6.5	CVE-2026-85231	A flaw was found in libtirpc Red HatRed Hat Enterprise Linux 10, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Hardened Images, Red Hat Enterprise Linux 6, Red Hat OpenShift Container Platform 4	NVD	Oct 16 19:17 UTC
CVE-2026-85231A flaw was found in libtirpc From the advisory A flaw was found in libtirpc. An authenticated remote attacker could exploit this vulnerability by sending oversized wrapped data requests to an RPC (Remote Procedure Call) service configured with RPCSEC_GSS (Remote Procedure Call Security-Generic Security Service) integrity or privacy. This can lead to unbounded memory allocation, resulting in a Denial of Service (DoS) by exhausting system resources and causing the service to become unstable or terminate. Impact if exploited ConfidentialityNone IntegrityNone AvailabilityHigh How it is exploited Attack vector Network Attack complexity Low Privileges required Low User interaction None Scope Unchanged CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affects Red Hat Red Hat Enterprise Linux 10 Red Hat Enterprise Linux 7 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 9 Red Hat Hardened Images Red Hat Enterprise Linux 6 Red Hat OpenShift Container Platform 4 NIST National Vulnerability DatabasePublished Oct 16, 2026 19:17 UTC Read the advisory
	Medium	5.5	CVE-2026-89098	A flaw was found in nfs-utils Red HatRed Hat Enterprise Linux 10, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 6, Red Hat OpenShift Container Platform 4	NVD	Oct 16 18:19 UTC
CVE-2026-89098A flaw was found in nfs-utils From the advisory A flaw was found in nfs-utils. The fsidd daemon improperly handles input received over its local domain socket by relying on program assertions to verify command arguments. A local user can exploit this vulnerability by sending a malformed request lacking the required arguments to trigger an assertion failure. This causes the daemon to crash, resulting in a Denial of Service (DoS) for filesystem identifier lookup services until restarted. Impact if exploited ConfidentialityNone IntegrityNone AvailabilityHigh How it is exploited Attack vector Local Attack complexity Low Privileges required Low User interaction None Scope Unchanged CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affects Red Hat Red Hat Enterprise Linux 10 Red Hat Enterprise Linux 7 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 6 Red Hat OpenShift Container Platform 4 NIST National Vulnerability DatabasePublished Oct 16, 2026 18:19 UTC Read the advisory
	Medium	6.0	CVE-2026-111555	A flaw was found in luksmeta Red HatRed Hat Enterprise Linux 10, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat OpenShift Container Platform 4	NVD	Oct 16 13:16 UTC
CVE-2026-111555A flaw was found in luksmeta From the advisory A flaw was found in luksmeta. Improper boundary validation of metadata slots allows an attacker capable of supplying or modifying a disk header to redirect wipe or load operations outside the intended metadata area. An attacker could exploit this vulnerability by providing a crafted header with valid checksums to overwrite or zero out encrypted payload data, resulting in persistent data loss and corrupted storage. Exploitation typically requires privileged access to modify raw block devices or the ability to induce an administrator to process an untrusted disk image. Impact if exploited ConfidentialityNone IntegrityHigh AvailabilityHigh How it is exploited Attack vector Local Attack complexity Low Privileges required High User interaction None Scope Unchanged CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H Affects Red Hat Red Hat Enterprise Linux 10 Red Hat Enterprise Linux 7 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 9 Red Hat OpenShift Container Platform 4 NIST National Vulnerability DatabasePublished Oct 16, 2026 13:16 UTC Read the advisory
	High	7.8	CVE-2026-104715	A flaw was found in cifs-utils Red HatRed Hat Enterprise Linux 10, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 6, Red Hat OpenShift Container Platform 4	NVD	Oct 16 07:17 UTC
CVE-2026-104715A flaw was found in cifs-utils From the advisory A flaw was found in cifs-utils. This flaw allows an unprivileged local user to achieve privilege escalation. When a privileged service mounts a Common Internet File System (CIFS) share using a user-controlled credentials file, input values are not properly sanitized before being assembled into mount options. A local attacker can exploit this vulnerability to inject unauthorized mount options, allowing them to bypass permission checks and execute files with administrative (root) privileges. Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Local Attack complexity Low Privileges required Low User interaction None Scope Unchanged CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affects Red Hat Red Hat Enterprise Linux 10 Red Hat Enterprise Linux 7 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 6 Red Hat OpenShift Container Platform 4 NIST National Vulnerability DatabasePublished Oct 16, 2026 07:17 UTC Read the advisory
	High	8.5	CVE-2026-92982	A flaw was found in Ansible Operator Plugins Red HatRed Hat OpenShift Container Platform 4, Red Hat OpenShift Virtualization 4, Red Hat Ansible Automation Platform 2, Red Hat Migration Toolkit for Applications 8, Red Hat Migration Toolkit for Virtualization, Red Hat OpenShift Service Mesh 3, Red Hat Advanced Cluster Management for Kubernetes 2, Red Hat Ansible Automation Platform 2.6, Red Hat Ansible Automation Platform 2.7, Red Hat Migration Toolkit for Containers, Red Hat OpenStack Platform 16.2, Red Hat OpenStack Platform 17.1	NVD	Oct 15 16:18 UTC
CVE-2026-92982A flaw was found in Ansible Operator Plugins From the advisory A flaw was found in Ansible Operator Plugins. A low-privileged Kubernetes user can exploit a Jinja2 template injection vulnerability by crafting malicious custom resource (CR) specification values. These values are processed by Ansible without proper sanitization, allowing embedded Jinja2 expressions to be executed within the operator pod. This can lead to arbitrary code execution and privilege escalation, granting the attacker control over the operator's service account with cluster-wide permissions. Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Network Attack complexity High Privileges required Low User interaction None Scope Changed CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H Affects Red Hat Red Hat OpenShift Container Platform 4 Red Hat OpenShift Virtualization 4 Red Hat Ansible Automation Platform 2 Red Hat Migration Toolkit for Applications 8 Red Hat Migration Toolkit for Virtualization Red Hat OpenShift Service Mesh 3 Red Hat Advanced Cluster Management for Kubernetes 2 Red Hat Ansible Automation Platform 2.6 Red Hat Ansible Automation Platform 2.7 Red Hat Migration Toolkit for Containers Red Hat OpenStack Platform 16.2 Red Hat OpenStack Platform 17.1 NIST National Vulnerability DatabasePublished Oct 15, 2026 16:18 UTC Read the advisory
	Medium	6.5	CVE-2026-86856	A flaw was found in the DPDK nfp vDPA driver Red HatRed Hat Enterprise Linux 10, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat OpenShift Container Platform 4, Red Hat Fast Datapath for RHEL 10, Red Hat Fast Datapath for RHEL 8, Red Hat Fast Datapath for RHEL 9, Red Hat OpenStack Platform 13 (Queens)	NVD	Oct 14 18:19 UTC
CVE-2026-86856A flaw was found in the DPDK nfp vDPA driver From the advisory A flaw was found in the DPDK nfp vDPA driver. Stack and heap buffers sized for a single queue pair can be overflowed when more virtqueues are configured, leading to a host crash or memory corruption. Impact if exploited ConfidentialityNone IntegrityNone AvailabilityHigh How it is exploited Attack vector Local Attack complexity Low Privileges required Low User interaction None Scope Changed CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H Affects Red Hat Red Hat Enterprise Linux 10 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 9 Red Hat OpenShift Container Platform 4 Red Hat Fast Datapath for RHEL 10 Red Hat Fast Datapath for RHEL 8 Red Hat Fast Datapath for RHEL 9 Red Hat OpenStack Platform 13 (Queens) NIST National Vulnerability DatabasePublished Oct 14, 2026 18:19 UTC Read the advisory
	Medium	6.5	CVE-2026-86849	A flaw was found in DPDK lib/vhost vhost-crypto Red HatRed Hat Enterprise Linux 10, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat OpenShift Container Platform 4, Red Hat Fast Datapath for RHEL 10, Red Hat Fast Datapath for RHEL 8, Red Hat Fast Datapath for RHEL 9, Red Hat OpenStack Platform 13 (Queens)	NVD	Oct 14 18:19 UTC
CVE-2026-86849A flaw was found in DPDK lib/vhost vhost-crypto From the advisory A flaw was found in DPDK lib/vhost vhost-crypto. Integer overflow in chain length checks, and missing length checks on the RSA path, can overflow a host buffer in the vhost-crypto backend. Impact if exploited ConfidentialityNone IntegrityNone AvailabilityHigh How it is exploited Attack vector Local Attack complexity Low Privileges required Low User interaction None Scope Changed CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H Affects Red Hat Red Hat Enterprise Linux 10 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 9 Red Hat OpenShift Container Platform 4 Red Hat Fast Datapath for RHEL 10 Red Hat Fast Datapath for RHEL 8 Red Hat Fast Datapath for RHEL 9 Red Hat OpenStack Platform 13 (Queens) NIST National Vulnerability DatabasePublished Oct 14, 2026 18:19 UTC Read the advisory
	High	8.8	CVE-2026-86848	A flaw was found in DPDK lib/vhost vhost-crypto Red HatRed Hat Enterprise Linux 10, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat OpenShift Container Platform 4, Red Hat Fast Datapath for RHEL 10, Red Hat Fast Datapath for RHEL 8, Red Hat Fast Datapath for RHEL 9, Red Hat OpenStack Platform 13 (Queens)	NVD	Oct 14 18:19 UTC
CVE-2026-86848A flaw was found in DPDK lib/vhost vhost-crypto From the advisory A flaw was found in DPDK lib/vhost vhost-crypto. The indirect-descriptor snapshot double-fetches a guest descriptor next index, allowing a malicious guest to cause an out-of-bounds access in the host backend. Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Local Attack complexity Low Privileges required Low User interaction None Scope Changed CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H Affects Red Hat Red Hat Enterprise Linux 10 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 9 Red Hat OpenShift Container Platform 4 Red Hat Fast Datapath for RHEL 10 Red Hat Fast Datapath for RHEL 8 Red Hat Fast Datapath for RHEL 9 Red Hat OpenStack Platform 13 (Queens) NIST National Vulnerability DatabasePublished Oct 14, 2026 18:19 UTC Read the advisory
	Medium	6.5	CVE-2026-86847	A flaw was found in DPDK lib/vhost vhost-crypto Red HatRed Hat Enterprise Linux 10, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat OpenShift Container Platform 4, Red Hat Fast Datapath for RHEL 10, Red Hat Fast Datapath for RHEL 8, Red Hat Fast Datapath for RHEL 9, Red Hat OpenStack Platform 13 (Queens)	NVD	Oct 14 18:19 UTC
CVE-2026-86847A flaw was found in DPDK lib/vhost vhost-crypto From the advisory A flaw was found in DPDK lib/vhost vhost-crypto. Write-back chain cleanup can follow an uninitialized next pointer when mapping a guest descriptor fails, causing the host vhost-crypto process to hang or crash. Impact if exploited ConfidentialityNone IntegrityNone AvailabilityHigh How it is exploited Attack vector Local Attack complexity Low Privileges required Low User interaction None Scope Changed CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H Affects Red Hat Red Hat Enterprise Linux 10 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 9 Red Hat OpenShift Container Platform 4 Red Hat Fast Datapath for RHEL 10 Red Hat Fast Datapath for RHEL 8 Red Hat Fast Datapath for RHEL 9 Red Hat OpenStack Platform 13 (Queens) NIST National Vulnerability DatabasePublished Oct 14, 2026 18:19 UTC Read the advisory
	Medium	6.5	CVE-2026-86846	A flaw was found in DPDK lib/vhost vhost-crypto Red HatRed Hat Enterprise Linux 10, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat OpenShift Container Platform 4, Red Hat Fast Datapath for RHEL 10, Red Hat Fast Datapath for RHEL 8, Red Hat Fast Datapath for RHEL 9, Red Hat OpenStack Platform 13 (Queens)	NVD	Oct 14 18:19 UTC
CVE-2026-86846A flaw was found in DPDK lib/vhost vhost-crypto From the advisory A flaw was found in DPDK lib/vhost vhost-crypto. A guest can supply an avail-ring descriptor index that is used without bounds checking, causing an out-of-bounds write in the host vhost-crypto backend. Impact if exploited ConfidentialityNone IntegrityNone AvailabilityHigh How it is exploited Attack vector Local Attack complexity Low Privileges required Low User interaction None Scope Changed CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H Affects Red Hat Red Hat Enterprise Linux 10 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 9 Red Hat OpenShift Container Platform 4 Red Hat Fast Datapath for RHEL 10 Red Hat Fast Datapath for RHEL 8 Red Hat Fast Datapath for RHEL 9 Red Hat OpenStack Platform 13 (Queens) NIST National Vulnerability DatabasePublished Oct 14, 2026 18:19 UTC Read the advisory
	Medium	6.5	CVE-2026-86845	A flaw was found in DPDK lib/vhost vhost-crypto Red HatRed Hat Enterprise Linux 10, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat OpenShift Container Platform 4, Red Hat Fast Datapath for RHEL 10, Red Hat Fast Datapath for RHEL 8, Red Hat Fast Datapath for RHEL 9, Red Hat OpenStack Platform 13 (Queens)	NVD	Oct 14 18:19 UTC
CVE-2026-86845A flaw was found in DPDK lib/vhost vhost-crypto From the advisory A flaw was found in DPDK lib/vhost vhost-crypto. Session cleanup can leave a stale cached session pointer, and the data path does not check the session type before attaching it, leading to use-after-free or type confusion in the host vhost-crypto backend. Impact if exploited ConfidentialityNone IntegrityNone AvailabilityHigh How it is exploited Attack vector Local Attack complexity Low Privileges required Low User interaction None Scope Changed CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H Affects Red Hat Red Hat Enterprise Linux 10 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 9 Red Hat OpenShift Container Platform 4 Red Hat Fast Datapath for RHEL 10 Red Hat Fast Datapath for RHEL 8 Red Hat Fast Datapath for RHEL 9 Red Hat OpenStack Platform 13 (Queens) NIST National Vulnerability DatabasePublished Oct 14, 2026 18:19 UTC Read the advisory
	High	8.8	CVE-2026-86567	A flaw was found in DPDK lib/vhost Red HatRed Hat Enterprise Linux 10, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat OpenShift Container Platform 4, Red Hat Fast Datapath for RHEL 10, Red Hat Fast Datapath for RHEL 8, Red Hat Fast Datapath for RHEL 9, Red Hat OpenStack Platform 13 (Queens)	NVD	Oct 14 18:19 UTC
CVE-2026-86567A flaw was found in DPDK lib/vhost From the advisory A flaw was found in DPDK lib/vhost. The VDUSE handler fails to invalidate vring pointers when the IOTLB is invalidated, leading to use-after-unmap. Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Local Attack complexity Low Privileges required Low User interaction None Scope Changed CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H Affects Red Hat Red Hat Enterprise Linux 10 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 9 Red Hat OpenShift Container Platform 4 Red Hat Fast Datapath for RHEL 10 Red Hat Fast Datapath for RHEL 8 Red Hat Fast Datapath for RHEL 9 Red Hat OpenStack Platform 13 (Queens) NIST National Vulnerability DatabasePublished Oct 14, 2026 18:19 UTC Read the advisory
	Medium	6.5	CVE-2026-86566	A flaw was found in DPDK lib/vhost Red HatRed Hat Enterprise Linux 10, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat OpenShift Container Platform 4, Red Hat Fast Datapath for RHEL 10, Red Hat Fast Datapath for RHEL 8, Red Hat Fast Datapath for RHEL 9, Red Hat OpenStack Platform 13 (Queens)	NVD	Oct 14 18:19 UTC
CVE-2026-86566A flaw was found in DPDK lib/vhost From the advisory A flaw was found in DPDK lib/vhost. A guest with runt RX descriptors can underflow the copy length in vhost enqueue, causing a denial of service in a shared vhost backend such as OVS-DPDK. Impact if exploited ConfidentialityNone IntegrityNone AvailabilityHigh How it is exploited Attack vector Local Attack complexity Low Privileges required Low User interaction None Scope Changed CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H Affects Red Hat Red Hat Enterprise Linux 10 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 9 Red Hat OpenShift Container Platform 4 Red Hat Fast Datapath for RHEL 10 Red Hat Fast Datapath for RHEL 8 Red Hat Fast Datapath for RHEL 9 Red Hat OpenStack Platform 13 (Queens) NIST National Vulnerability DatabasePublished Oct 14, 2026 18:19 UTC Read the advisory
	High	8.2	CVE-2026-86565	A flaw was found in DPDK lib/vhost Red HatRed Hat Enterprise Linux 10, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat OpenShift Container Platform 4, Red Hat Fast Datapath for RHEL 10, Red Hat Fast Datapath for RHEL 8, Red Hat Fast Datapath for RHEL 9, Red Hat OpenStack Platform 13 (Queens)	NVD	Oct 14 17:20 UTC
CVE-2026-86565A flaw was found in DPDK lib/vhost From the advisory A flaw was found in DPDK lib/vhost. A guest can desynchronize virtqueue size from inflight descriptor table size, causing an out-of-bounds write in the host vhost process. Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Local Attack complexity Low Privileges required High User interaction None Scope Changed CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H Affects Red Hat Red Hat Enterprise Linux 10 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 9 Red Hat OpenShift Container Platform 4 Red Hat Fast Datapath for RHEL 10 Red Hat Fast Datapath for RHEL 8 Red Hat Fast Datapath for RHEL 9 Red Hat OpenStack Platform 13 (Queens) NIST National Vulnerability DatabasePublished Oct 14, 2026 17:20 UTC Read the advisory
	High	7.8	CVE-2026-86563	A flaw was found in DPDK lib/vhost Red HatRed Hat Enterprise Linux 10, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat OpenShift Container Platform 4, Red Hat Fast Datapath for RHEL 10, Red Hat Fast Datapath for RHEL 8, Red Hat Fast Datapath for RHEL 9, Red Hat OpenStack Platform 13 (Queens)	NVD	Oct 14 17:20 UTC
CVE-2026-86563A flaw was found in DPDK lib/vhost From the advisory A flaw was found in DPDK lib/vhost. A double-offset bug in vhost log mapping calculation can lead to incorrect memory access. Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Local Attack complexity Low Privileges required Low User interaction None Scope Unchanged CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affects Red Hat Red Hat Enterprise Linux 10 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 9 Red Hat OpenShift Container Platform 4 Red Hat Fast Datapath for RHEL 10 Red Hat Fast Datapath for RHEL 8 Red Hat Fast Datapath for RHEL 9 Red Hat OpenStack Platform 13 (Queens) NIST National Vulnerability DatabasePublished Oct 14, 2026 17:20 UTC Read the advisory
	High	7.8	CVE-2026-86562	A flaw was found in DPDK lib/vhost Red HatRed Hat Enterprise Linux 10, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat OpenShift Container Platform 4, Red Hat Fast Datapath for RHEL 10, Red Hat Fast Datapath for RHEL 8, Red Hat Fast Datapath for RHEL 9, Red Hat OpenStack Platform 13 (Queens)	NVD	Oct 14 17:20 UTC
CVE-2026-86562A flaw was found in DPDK lib/vhost From the advisory A flaw was found in DPDK lib/vhost. A TOCTOU double-fetch of control-queue descriptors allows a heap buffer overflow with attacker-controlled content in the VDUSE control-queue handler. Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Local Attack complexity Low Privileges required Low User interaction None Scope Unchanged CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affects Red Hat Red Hat Enterprise Linux 10 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 9 Red Hat OpenShift Container Platform 4 Red Hat Fast Datapath for RHEL 10 Red Hat Fast Datapath for RHEL 8 Red Hat Fast Datapath for RHEL 9 Red Hat OpenStack Platform 13 (Queens) NIST National Vulnerability DatabasePublished Oct 14, 2026 17:20 UTC Read the advisory

Example	Finds
	Every word appears somewhere: title, summaries, IDs, vendor, or product
	An exact phrase
	One vendor. product: for a product, vp: for either
	Commas mean any of them, in every field
	Severity: critical, high, medium, low, or unknown
	CVSS score, with >, >=, <, or <=
	A score range
	Known exploited. is:kev works too, and kev:no leaves them out
	One source, by name
	Confidentiality impact: high, low, none, or any (low or high)
	Integrity and availability work the same way
	An advisory or CVE ID, or part of one
	A minus sign leaves out whatever the term matches

Vulnerability feed

Executive summary

Technical summary

Impact if exploited

How it is exploited

Affects

Executive summary

Technical summary

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory