CVE Watch
Every new High and Critical vulnerability, updated automatically from NVD, FIRST EPSS and CISA’s Known Exploited Vulnerabilities list, with whether public exploit code exists. Critical CVEs and exploited Highs are also posted to Bluesky as they appear.
All High & Critical Critical High Exploited (KEV) Public exploit
-
CVE-2026-103963: Red Hat Enterprise Linux 10 (High, CVSS 7.5)
A flaw was found in glib-networking. When establishing connections using Transport Layer Security (TLS) version 1.3, the client-side session cache does not limit the number of session tickets retained for a single…
-
CVE-2026-92092: Red Hat OpenShift Container Platform 4 (High, CVSS 7.4)
A flaw was found in openshift-ansible. The installer container's `run` script downloads and executes remote inventory and dynamic scripts without integrity verification. A remote attacker, by performing a Man-in-the-Middle (MITM) attack or…
-
CVE-2026-114488: Red Hat JBoss Enterprise Application Platform 8 (High, CVSS 7.4)
A flaw was found in Wildfly. A remote attacker can bypass authentication on IIOP EJB invocations as the CSIv2 security interceptor accepts ITTPrincipalName identity assertions in the service context without verifying transport-level…
-
CVE-2026-13451: Red Hat OpenShift AI (RHOAI) (High, CVSS 7.7)
A flaw was found in KServe. A namespace-scoped user with create/update permissions on InferenceService custom resources can exploit this vulnerability by providing a malicious `storageUri`. This Server-Side Request Forgery (SSRF) vulnerability allows…
-
CVE-2026-117574: Red Hat OpenShift AI (RHOAI) (Critical, CVSS 9.1)
A flaw was found in ai-gateway-payload-processing. An authenticated remote attacker can exploit this vulnerability by submitting a request specifying another tenant's model identifier in the request body or header. Because the service…
-
CVE-2026-84725: Red Hat JBoss Enterprise Application Platform 7 (High, CVSS 8.1)
when EAP runs with -secmgr, the openjdk-orb's JDKBridge honours attacker-supplied CDR codebase URLs during object unmarshalling on :3528, allowing an unauthenticated attacker to load and instantiate arbitrary classes from a remote URL…
-
CVE-2026-111079: Red Hat Enterprise Linux 10 (High, CVSS 7.4)
A flaw was found in Goose. When the terminal integration feature is enabled, the application captures shell command history and sends it verbatim without sanitization to configured Large Language Model (LLM) provider…