Red Hat has 2,282 CVEs on record between 2020 and 2026. Disclosure cadence is accelerating: 1531 in the last 90 days against 408 in the 90 before. The busiest recent month was October 2026 with 757. The median CVSS is 6.8 (medium), with 119 rated critical. None have a confirmed exploitation report. The dominant weakness classes are CWE-125 (147) and CWE-787 (130). Most affected products: Red Hat Enterprise Linux 9 (339), Red Hat Enterprise Linux 10 (185), Linux (82).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 6.8
- Publish → KEV
- —
- Last 90 days
- 1531 prev 408
Weakness classes
Products
- Red Hat Enterprise Linux 9 339
- Red Hat Enterprise Linux 10 185
- Linux 82
- Chrome 61
- Red Hat Enterprise Linux BaseOS (v. 10) 60
- Red Hat OpenShift AI (RHOAI) 52
Worst active — by depth score
CVE-2024-11394High· 8.8transformers: Hugging Face Transformers Trax Model Deserialization of Untrusted Data Remote Code Execution Vulnerability (CVE-2024-11394)74CVE-2024-11393High· 8.8transformers: Hugging Face Transformers MaskFormer Model Deserialization of Untrusted Data Remote Code Execution Vulnerability (CVE-2024-11…74CVE-2026-4631Critical· 9.8Cockpit's remote login feature passes user-supplied hostnames and usernames from the web interface to the SSH client without validation or sanitization69CVE-2026-92183High· 7.8gimp: gimp: Arbitrary code execution via stack-based buffer overflow in APNG parser (CVE-2026-92183)68CVE-2024-11392High· 7.5transformers: Hugging Face Transformers MobileViTV2 Deserialization of Untrusted Data Remote Code Execution Vulnerability (CVE-2024-11392)68
Red Hat vulnerabilities
CVEs affecting Red Hat, newest first. Open any entry for full detail, references, and exploit status.
2282 CVEsRSS
CVE-2026-101750Medium· 4.9mysql: mysql: Denial of Service in Clone Plugin (CVE-2026-101750)
A flaw was found in the MySQL Clone Plugin. An authenticated remote attacker with high privileges can exploit this vulnerability over network protocols to trigger an abnormal condition. A successful attack allows the attacker to cause the …
CVE-2026-101756Medium· 4.9mysql: mysql: Denial of Service via GIS component (CVE-2026-101756)
A flaw was found in the Geographic Information System (GIS) component of MySQL. An authenticated remote attacker with high privileges can exploit this vulnerability over the network to cause a Denial of Service (DoS). Successful exploitati…
CVE-2026-101755Medium· 5.3mysql: mysql: Denial of Service via client programs (CVE-2026-101755)
A flaw was found in MySQL client programs. An authenticated attacker with network access and low privileges could exploit this vulnerability across multiple protocols. A successful attack allows the threat actor to cause an application han…
CVE-2026-101754Medium· 4.4mysql: mysql: Denial of Service via client programs (CVE-2026-101754)
A flaw was found in MySQL client programs. A remote attacker with high privileges and network access can exploit this vulnerability to compromise the system. Successful exploitation allows the attacker to cause the database server to hang …
CVE-2026-101760Medium· 4.9mysql: mysql: Denial of service in InnoDB (CVE-2026-101760)
A flaw was found in the InnoDB component of MySQL. A remote attacker with high privileges and network access can exploit this vulnerability to cause the server to hang or crash repeatedly, resulting in a denial of service (DoS).
CVE-2026-101753Medium· 4.4mysql: mysql: Denial of Service in RAPID component (CVE-2026-101753)
A flaw was found in the RAPID component of MySQL. A remote attacker with high privileges and network access can exploit this vulnerability to cause the server to hang or repeatedly crash. Successful exploitation results in a complete Denia…
CVE-2026-101766Medium· 4.4mysql: mysql: Denial of service in replication component (CVE-2026-101766)
A flaw was found in the MySQL replication component. A remote, highly privileged attacker could exploit this vulnerability over the network to cause MySQL Server or MySQL Cluster to hang or crash repeatedly. This issue leads to a complete …
CVE-2026-101762Medium· 5.3mysql: mysql: Denial of Service via security encryption component (CVE-2026-101762)
A flaw was found in the Security: Encryption component of MySQL. This issue may allow an attacker to impact the confidentiality, integrity, and/or availability of MySQL Server depending on the vulnerability details. Refer to the Oracle CPU…
CVE-2026-101761Medium· 5.9mysql: mysql: Denial of Service via security encryption component (CVE-2026-101761)
A flaw was found in MySQL. An unauthenticated remote attacker with network access via multiple protocols can exploit this vulnerability in the security encryption component to cause the service to hang or crash repeatedly. Successful explo…
CVE-2026-101770High· 8.1mysql: mysql: System takeover via client programs (CVE-2026-101770)
A flaw was found in the Client programs component of MySQL. This issue may allow an attacker to impact the confidentiality, integrity, and/or availability of MySQL Server depending on the vulnerability details. Refer to the Oracle CPU advi…
CVE-2026-101778Medium· 6.5mysql: mysql: Denial of Service (CVE-2026-101778)
A flaw was found in the Components Services component of MySQL. This issue may allow an attacker to impact the confidentiality, integrity, and/or availability of MySQL Server depending on the vulnerability details. Refer to the Oracle CPU …
CVE-2026-101773High· 7.1mysql: MySQL: Denial of Service via the Group Replication plugin (CVE-2026-101773)
A flaw was found in the MySQL Group Replication plugin. An unauthenticated attacker located on the adjacent network can exploit this vulnerability to compromise the database service. Successful exploitation primarily allows an attacker to …
CVE-2026-101771High· 8.1mysql: mysql: complete service takeover via network access (CVE-2026-101771)
A flaw was found in the Client programs component of MySQL. This issue may allow an attacker to impact the confidentiality, integrity, and/or availability of MySQL Server depending on the vulnerability details. Refer to the Oracle CPU advi…
CVE-2026-101774Medium· 6.5mysql: mysql: Denial of service via Pluggable Authentication component (CVE-2026-101774)
A flaw was found in the Pluggable Authentication component of MySQL. An unauthenticated remote attacker could exploit this vulnerability across multiple network protocols to cause the server to hang or crash repeatedly, resulting in a Deni…
CVE-2026-101772High· 8.1mysql: mysql: unauthorized server takeover (CVE-2026-101772)
A flaw was found in the Client programs component of MySQL. This issue may allow an attacker to impact the confidentiality, integrity, and/or availability of MySQL Server depending on the vulnerability details. Refer to the Oracle CPU advi…
CVE-2026-101779Low· 2.7mysql: mysql: Partial Denial of Service via Telemetry component (CVE-2026-101779)
A flaw was found in the MySQL Server Telemetry component. A remote attacker with high privileges and network access can exploit this vulnerability over multiple protocols to cause a partial Denial of Service (DoS). Successful exploitation …
CVE-2026-101776Medium· 4.9mysql: mysql: Denial of Service in Group Replication plugin (CVE-2026-101776)
A flaw was found in the MySQL Group Replication plugin. A remote attacker with high privileges and network access can exploit this vulnerability across multiple protocols. Successful exploitation allows the attacker to cause the service to…
CVE-2026-101775High· 7.4mysql: mysql: unauthorized data modification via replication component (CVE-2026-101775)
A flaw was found in the MySQL Server replication component. An unauthenticated remote attacker with network access could exploit this vulnerability to create, delete, or modify critical database data. A successful attack can also lead to a…
CVE-2026-101780Medium· 6.5mysql: mysql: Denial of Service via X Plugin (CVE-2026-101780)
A flaw was found in the MySQL Server X Plugin component. An authenticated remote attacker with low privileges and network access can exploit this vulnerability through network protocol requests. Successful exploitation allows the attacker …
CVE-2026-101781High· 8.8mysql: mysql: Server takeover via Group Replication GCS (CVE-2026-101781)
A flaw was found in MySQL's Group Replication Group Communication System (GCS). An unauthenticated attacker located on the same adjacent network segment can exploit this vulnerability without requiring privileges or user interaction. Succe…
CVE-2026-101787Medium· 4.9mysql: mysql: Denial of Service via Server Optimizer flaw (CVE-2026-101787)
A flaw was found in MySQL within the Server Optimizer component. An authenticated remote attacker with high privileges can exploit this vulnerability over the network to cause the database to hang or crash repeatedly. Successful exploitati…
CVE-2026-101785High· 8.3mysql: MySQL: Unauthorized data modification in JSON component (CVE-2026-101785)
A flaw was found in the MySQL Server JSON component. An authenticated remote attacker with low privileges can exploit this vulnerability over network protocols to modify, create, or delete accessible database records. Successful exploitati…
CVE-2026-101784Medium· 4.9mysql: mysql: Denial of service in query optimizer (CVE-2026-101784)
A flaw was found in the query optimizer component of MySQL Server and MySQL Cluster. An authenticated attacker with high privileges and network access can exploit this vulnerability to cause a Denial of Service (DoS). Successful exploitati…
CVE-2026-101789Medium· 6.5mysql: mysql: Denial of Service via the Optimizer component (CVE-2026-101789)
A flaw was found in the MySQL Optimizer component. An authenticated remote attacker with low privileges can exploit this vulnerability over the network to cause a Denial of Service (DoS). Successful exploitation allows the attacker to hang…
CVE-2026-101788Medium· 5.9mysql: mysql: Denial of Service via Server Components Services (CVE-2026-101788)
A flaw was found in MySQL Server and MySQL Cluster within the Server Components Services. This vulnerability allows an unauthenticated remote attacker with network access via multiple protocols to cause a Denial of Service (DoS). A success…
CVE-2026-101799Medium· 6.5mysql: mysql: Denial of Service via Group Replication GCS (CVE-2026-101799)
A flaw was found in the Group Replication GCS component of MySQL. This issue may allow an attacker to impact the confidentiality, integrity, and/or availability of MySQL Server depending on the vulnerability details. Refer to the Oracle CP…
CVE-2026-101797High· 7.5mysql: mysql: system takeover via mysqldump component (CVE-2026-101797)
A flaw was found in the mysqldump component of MySQL. This issue may allow an attacker to impact the confidentiality, integrity, and/or availability of MySQL Server depending on the vulnerability details. Refer to the Oracle CPU advisory f…
CVE-2026-101795Medium· 6.7mysql: mysql: Complete service compromise by a local privileged attacker (CVE-2026-101795)
A flaw was found in the Components Services component of MySQL. This issue may allow an attacker to impact the confidentiality, integrity, and/or availability of MySQL Server depending on the vulnerability details. Refer to the Oracle CPU …
CVE-2026-101794Medium· 6.5mysql: mysql: Denial of Service via XML component flaw (CVE-2026-101794)
A flaw was found in the XML component of MySQL. An authenticated, low-privileged remote attacker with network access can exploit this vulnerability to cause a Denial of Service (DoS). Successful attacks can result in a hang or frequently r…
CVE-2026-101801Medium· 4.9mysql: mysql: Denial of Service in Server Optimizer (CVE-2026-101801)
A flaw was found in the Server Optimizer component of MySQL. A remote attacker with high privileges can exploit this vulnerability across network protocols to cause the database to hang or repeatedly crash. This issue leads to a complete D…