redhat has 2,514 CVEs on record between 2010 and 2026. Disclosure cadence is accelerating: 1428 in the last 90 days against 494 in the 90 before. The busiest recent month was October 2026 with 633. The median CVSS is 6.8 (medium), with 131 rated critical. 0% have been exploited in the wild, in line with the corpus average. The median gap from publication to a KEV listing is 2722 days (6 cases). The dominant weakness classes are CWE-125 (156) and CWE-787 (143). Most affected products: Red Hat Enterprise Linux 9 (281), Red Hat Enterprise Linux 10 (173), Linux (72).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 6.8
- Publish → KEV
- 2722 d median(6)
- Last 90 days
- 1428 prev 494
Weakness classes
Products
- Red Hat Enterprise Linux 9 281
- Red Hat Enterprise Linux 10 173
- Linux 72
- Red Hat Enterprise Linux BaseOS (v. 10) 55
- Red Hat OpenShift AI (RHOAI) 50
- build_of_keycloak 49
Worst active — by depth score
CVE-2017-12149Critical· 9.8In Jboss Application Server as shipped with Red Hat Enterprise Application Platform 5.2, it was found that the doFilter method in the ReadOnlyAccessFilter of the HTTP Invoker does not restrict classes for which it performs deserializatio…100CVE-2021-40438Critical· 9.0A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user99CVE-2026-31431High· 7.8In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data. There is no benefit in op…88CVE-2024-3094Critical· 10.0Xz: malicious code in distributed source85CVE-2010-1428High· 7.5The Web Console (aka web-console) in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 performs access control only for the GET and POST methods, which allow…82
redhat vulnerabilities
CVEs affecting redhat, newest first. Open any entry for full detail, references, and exploit status.
2514 CVEsRSS
CVE-2026-101754Medium· 4.4mysql: mysql: Denial of Service via client programs (CVE-2026-101754)
A flaw was found in MySQL client programs. A remote attacker with high privileges and network access can exploit this vulnerability to compromise the system. Successful exploitation allows the attacker to cause the database server to hang …
CVE-2026-101760Medium· 4.9mysql: mysql: Denial of service in InnoDB (CVE-2026-101760)
A flaw was found in the InnoDB component of MySQL. A remote attacker with high privileges and network access can exploit this vulnerability to cause the server to hang or crash repeatedly, resulting in a denial of service (DoS).
CVE-2026-101753Medium· 4.4mysql: mysql: Denial of Service in RAPID component (CVE-2026-101753)
A flaw was found in the RAPID component of MySQL. A remote attacker with high privileges and network access can exploit this vulnerability to cause the server to hang or repeatedly crash. Successful exploitation results in a complete Denia…
CVE-2026-101766Medium· 4.4mysql: mysql: Denial of service in replication component (CVE-2026-101766)
A flaw was found in the MySQL replication component. A remote, highly privileged attacker could exploit this vulnerability over the network to cause MySQL Server or MySQL Cluster to hang or crash repeatedly. This issue leads to a complete …
CVE-2026-101762Medium· 5.3mysql: mysql: Denial of Service via security encryption component (CVE-2026-101762)
A flaw was found in the Security: Encryption component of MySQL. This issue may allow an attacker to impact the confidentiality, integrity, and/or availability of MySQL Server depending on the vulnerability details. Refer to the Oracle CPU…
CVE-2026-101761Medium· 5.9mysql: mysql: Denial of Service via security encryption component (CVE-2026-101761)
A flaw was found in MySQL. An unauthenticated remote attacker with network access via multiple protocols can exploit this vulnerability in the security encryption component to cause the service to hang or crash repeatedly. Successful explo…
CVE-2026-101770High· 8.1mysql: mysql: System takeover via client programs (CVE-2026-101770)
A flaw was found in the Client programs component of MySQL. This issue may allow an attacker to impact the confidentiality, integrity, and/or availability of MySQL Server depending on the vulnerability details. Refer to the Oracle CPU advi…
CVE-2026-101778Medium· 6.5mysql: mysql: Denial of Service (CVE-2026-101778)
A flaw was found in the Components Services component of MySQL. This issue may allow an attacker to impact the confidentiality, integrity, and/or availability of MySQL Server depending on the vulnerability details. Refer to the Oracle CPU …
CVE-2026-101773High· 7.1mysql: MySQL: Denial of Service via the Group Replication plugin (CVE-2026-101773)
A flaw was found in the MySQL Group Replication plugin. An unauthenticated attacker located on the adjacent network can exploit this vulnerability to compromise the database service. Successful exploitation primarily allows an attacker to …
CVE-2026-101771High· 8.1mysql: mysql: complete service takeover via network access (CVE-2026-101771)
A flaw was found in the Client programs component of MySQL. This issue may allow an attacker to impact the confidentiality, integrity, and/or availability of MySQL Server depending on the vulnerability details. Refer to the Oracle CPU advi…
CVE-2026-101774Medium· 6.5mysql: mysql: Denial of service via Pluggable Authentication component (CVE-2026-101774)
A flaw was found in the Pluggable Authentication component of MySQL. An unauthenticated remote attacker could exploit this vulnerability across multiple network protocols to cause the server to hang or crash repeatedly, resulting in a Deni…
CVE-2026-101772High· 8.1mysql: mysql: unauthorized server takeover (CVE-2026-101772)
A flaw was found in the Client programs component of MySQL. This issue may allow an attacker to impact the confidentiality, integrity, and/or availability of MySQL Server depending on the vulnerability details. Refer to the Oracle CPU advi…
CVE-2026-101779Low· 2.7mysql: mysql: Partial Denial of Service via Telemetry component (CVE-2026-101779)
A flaw was found in the MySQL Server Telemetry component. A remote attacker with high privileges and network access can exploit this vulnerability over multiple protocols to cause a partial Denial of Service (DoS). Successful exploitation …
CVE-2026-101776Medium· 4.9mysql: mysql: Denial of Service in Group Replication plugin (CVE-2026-101776)
A flaw was found in the MySQL Group Replication plugin. A remote attacker with high privileges and network access can exploit this vulnerability across multiple protocols. Successful exploitation allows the attacker to cause the service to…
CVE-2026-101775High· 7.4mysql: mysql: unauthorized data modification via replication component (CVE-2026-101775)
A flaw was found in the MySQL Server replication component. An unauthenticated remote attacker with network access could exploit this vulnerability to create, delete, or modify critical database data. A successful attack can also lead to a…
CVE-2026-101780Medium· 6.5mysql: mysql: Denial of Service via X Plugin (CVE-2026-101780)
A flaw was found in the MySQL Server X Plugin component. An authenticated remote attacker with low privileges and network access can exploit this vulnerability through network protocol requests. Successful exploitation allows the attacker …
CVE-2026-101781High· 8.8mysql: mysql: Server takeover via Group Replication GCS (CVE-2026-101781)
A flaw was found in MySQL's Group Replication Group Communication System (GCS). An unauthenticated attacker located on the same adjacent network segment can exploit this vulnerability without requiring privileges or user interaction. Succe…
CVE-2026-101787Medium· 4.9mysql: mysql: Denial of Service via Server Optimizer flaw (CVE-2026-101787)
A flaw was found in MySQL within the Server Optimizer component. An authenticated remote attacker with high privileges can exploit this vulnerability over the network to cause the database to hang or crash repeatedly. Successful exploitati…
CVE-2026-101785High· 8.3mysql: MySQL: Unauthorized data modification in JSON component (CVE-2026-101785)
A flaw was found in the MySQL Server JSON component. An authenticated remote attacker with low privileges can exploit this vulnerability over network protocols to modify, create, or delete accessible database records. Successful exploitati…
CVE-2026-101784Medium· 4.9mysql: mysql: Denial of service in query optimizer (CVE-2026-101784)
A flaw was found in the query optimizer component of MySQL Server and MySQL Cluster. An authenticated attacker with high privileges and network access can exploit this vulnerability to cause a Denial of Service (DoS). Successful exploitati…
CVE-2026-101789Medium· 6.5mysql: mysql: Denial of Service via the Optimizer component (CVE-2026-101789)
A flaw was found in the MySQL Optimizer component. An authenticated remote attacker with low privileges can exploit this vulnerability over the network to cause a Denial of Service (DoS). Successful exploitation allows the attacker to hang…
CVE-2026-101788Medium· 5.9mysql: mysql: Denial of Service via Server Components Services (CVE-2026-101788)
A flaw was found in MySQL Server and MySQL Cluster within the Server Components Services. This vulnerability allows an unauthenticated remote attacker with network access via multiple protocols to cause a Denial of Service (DoS). A success…
CVE-2026-101799Medium· 6.5mysql: mysql: Denial of Service via Group Replication GCS (CVE-2026-101799)
A flaw was found in the Group Replication GCS component of MySQL. This issue may allow an attacker to impact the confidentiality, integrity, and/or availability of MySQL Server depending on the vulnerability details. Refer to the Oracle CP…
CVE-2026-101797High· 7.5mysql: mysql: system takeover via mysqldump component (CVE-2026-101797)
A flaw was found in the mysqldump component of MySQL. This issue may allow an attacker to impact the confidentiality, integrity, and/or availability of MySQL Server depending on the vulnerability details. Refer to the Oracle CPU advisory f…
CVE-2026-101795Medium· 6.7mysql: mysql: Complete service compromise by a local privileged attacker (CVE-2026-101795)
A flaw was found in the Components Services component of MySQL. This issue may allow an attacker to impact the confidentiality, integrity, and/or availability of MySQL Server depending on the vulnerability details. Refer to the Oracle CPU …
CVE-2026-101794Medium· 6.5mysql: mysql: Denial of Service via XML component flaw (CVE-2026-101794)
A flaw was found in the XML component of MySQL. An authenticated, low-privileged remote attacker with network access can exploit this vulnerability to cause a Denial of Service (DoS). Successful attacks can result in a hang or frequently r…
CVE-2026-101801Medium· 4.9mysql: mysql: Denial of Service in Server Optimizer (CVE-2026-101801)
A flaw was found in the Server Optimizer component of MySQL. A remote attacker with high privileges can exploit this vulnerability across network protocols to cause the database to hang or repeatedly crash. This issue leads to a complete D…
CVE-2026-101798Medium· 4.9mysql: mysql: Denial of Service in the server optimizer (CVE-2026-101798)
A flaw was found in the MySQL Server optimizer component. A remote attacker with high privileges and network access can exploit this vulnerability by submitting crafted requests across supported protocols. Successful exploitation allows th…
CVE-2026-101796High· 7.5mysql: mysql: Complete server takeover via replication component (CVE-2026-101796)
A flaw was found in the Replication component of MySQL. This issue may allow an attacker to impact the confidentiality, integrity, and/or availability of MySQL Server depending on the vulnerability details. Refer to the Oracle CPU advisory…
CVE-2026-101802Medium· 6.5mysql: mysql: Denial of Service via the Server Parser (CVE-2026-101802)
A flaw was found in the MySQL Server Parser component. An authenticated remote attacker with low privileges can exploit this vulnerability through network access using multiple protocols. A successful attack can cause the service to hang o…