CVE Watch
Every new High and Critical vulnerability, updated automatically from NVD, FIRST EPSS and CISA’s Known Exploited Vulnerabilities list, with whether public exploit code exists. Critical CVEs and exploited Highs are also posted to Bluesky as they appear.
All High & Critical Critical High Exploited (KEV) Public exploit
-
CVE-2026-119777: Red Hat Enterprise Linux 10 (High, CVSS 7.8)
A flaw was found in GStreamer's gst-plugins-bad H.266/VVC parser. When processing a malformed H.266 media file or stream, an integer overflow while parsing profile, tier, and level fields can lead to a…
-
CVE-2026-119528: Red Hat Enterprise Linux 10 (High, CVSS 7.8)
A flaw was found in GIMP. The PSD plug-in’s image resource header loader uses an incorrect destination size when copying a converted resource name into a fixed stack buffer. Opening a crafted…
-
CVE-2026-103963: Red Hat Enterprise Linux 10 (High, CVSS 7.5)
A flaw was found in glib-networking. When establishing connections using Transport Layer Security (TLS) version 1.3, the client-side session cache does not limit the number of session tickets retained for a single…
-
CVE-2026-92092: Red Hat OpenShift Container Platform 4 (High, CVSS 7.4)
A flaw was found in openshift-ansible. The installer container's `run` script downloads and executes remote inventory and dynamic scripts without integrity verification. A remote attacker, by performing a Man-in-the-Middle (MITM) attack or…
-
CVE-2026-15564: Red Hat JBoss Enterprise Application Platform 7 (High, CVSS 7.4)
Wildfly's IIOP listener may permit deserialization of input streams before authentication is performed. An attacker who can gain access to the IIOP port may be able to construct and send malicious objects…
-
CVE-2026-114488: Red Hat JBoss Enterprise Application Platform 8 (High, CVSS 7.4)
A flaw was found in Wildfly. A remote attacker can bypass authentication on IIOP EJB invocations as the CSIv2 security interceptor accepts ITTPrincipalName identity assertions in the service context without verifying transport-level…
-
CVE-2026-13451: Red Hat OpenShift AI (RHOAI) (High, CVSS 7.7)
A flaw was found in KServe. A namespace-scoped user with create/update permissions on InferenceService custom resources can exploit this vulnerability by providing a malicious `storageUri`. This Server-Side Request Forgery (SSRF) vulnerability allows…
-
CVE-2026-117574: Red Hat OpenShift AI (RHOAI) (Critical, CVSS 9.1)
A flaw was found in ai-gateway-payload-processing. An authenticated remote attacker can exploit this vulnerability by submitting a request specifying another tenant's model identifier in the request body or header. Because the service…
-
CVE-2026-84725: Red Hat JBoss Enterprise Application Platform 7 (High, CVSS 8.1)
when EAP runs with -secmgr, the openjdk-orb's JDKBridge honours attacker-supplied CDR codebase URLs during object unmarshalling on :3528, allowing an unauthenticated attacker to load and instantiate arbitrary classes from a remote URL…
-
CVE-2026-115484: Red Hat Enterprise Linux 10 (High, CVSS 7.6)
A flaw was found in the iscsiuio component of open-iscsi. The DHCPv4 option parser incorrectly calculates the length of the options data, causing it to read beyond the allocated buffer into adjacent…
-
CVE-2026-115486: Red Hat Enterprise Linux 10 (High, CVSS 7.1)
A flaw was found in the iscsiuio component of open-iscsi. The IPv6 Neighbor Discovery handler accesses link-layer address options at a fixed offset without verifying the packet contains them. Additionally, the ARP…
-
CVE-2026-111079: Red Hat Enterprise Linux 10 (High, CVSS 7.4)
A flaw was found in Goose. When the terminal integration feature is enabled, the application captures shell command history and sends it verbatim without sanitization to configured Large Language Model (LLM) provider…
-
CVE-2021-4034: Red Hat Polkit (High, CVSS 7.8)
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies.…