Skip to content
COOEY

FAIL › dossier

redhat

VENDOR

· dossier confidence 20%

Red Hat is a major open-source software vendor with a significant security track record, evidenced by multiple critical and high-severity vulnerabilities in core components and cloud platforms over the last year.

Failure events
51
Zero-days
1
RCEs
2
On KEV
0
Critical
38
Worst shame
50
PROFILE
CategorySoftware VendorWhat they doRed Hat is a global software company that provides open-source software solutions, primarily focused on enterprise Linux, cloud computing, and containerization technologies. Websitehttps://www.redhat.com ↗
SECURITY POSTURE

Red Hat has a history of releasing critical and high-severity vulnerabilities across multiple product lines, including RCE flaws in core components like Samba, GLib, and Undertow, indicating a need for rigorous patch management.

Notable failures
  • CVE-2026-1709: Critical Keylime registrar flaw
  • CVE-2026-12543: Critical Undertow HTTP server core flaw
  • CVE-2026-4408: Critical Samba RCE0day
  • CVE-2026-5483: High Red Hat Openshift AI odh-dashboard flaw
  • CVE-2026-28369: High Undertow HTTP request flaw
  • CVE-2026-17107: High RHACM cluster-proxy impersonation escalation
Patterns: Repeated unpatched edge-device RCEs; Core component vulnerabilities (GLib, Undertow, Samba); Cloud platform security flaws (OpenShift, Keylime)
FAILURE HISTORY · 51
DATEEVENTSEVSUMMARY
2026-05-28 CVE-2026-4408 critical A flaw was found in Samba. A remote attacker can exploit a misconfiguration in Samba file servers and classic domain controllers that use the "check password script" feature. If this script is configured with the %u substitution character, the client-controlled username is passed
2025-12-10 CVE-2025-14087 medium A flaw was found in GLib (Gnome Lib). This vulnerability allows a remote attacker to cause heap corruption, leading to a denial of service or potential code execution via a buffer-underflow in the GVariant parser when processing maliciously crafted input strings.
2026-06-30 CVE-2026-58016 high A flaw was found in GLib. A state confusion issue exists in g_dbus_node_info_new_for_xml() in the gio/gdbusintrospection.c file when processing malformed D-Bus introspection XML, specifically with a <node> element nested within other elements like <method>, <signal>, <property> o
2026-05-07 CVE-2026-42010 high A flaw was found in gnutls. Servers configured with RSA-PSK (Rivest–Shamir–Adleman – Pre-Shared Key) wrongfully matched usernames containing a NUL character with truncated usernames. A remote attacker could exploit this by sending a specially crafted username, leading to an authe
2026-04-30 CVE-2026-33845 high A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero offset, leading to an integer underflow during reassembly and resulting in an out-of-bounds read. This issue is remotely exploitable and may cause information disclosure or denial of
2026-09-22 CVE-2026-17618 high CVE-2026-17618: IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remot
2026-08-10 CVE-2026-59090 high CVE-2026-59090: A flaw was found in GIMP's PSD file format plugin. This vulnerability, an unsign
2026-08-05 CVE-2026-16442 high CVE-2026-16442: A flaw was found in the SAML broker component of Keycloak, which is used to mana
2026-08-05 CVE-2026-16443 high CVE-2026-16443: A flaw was found in the SAML metadata import functionality of the keycloak-servi
2026-04-10 CVE-2026-5483 high CVE-2026-5483: A flaw was found in odh-dashboard in Red Hat Openshift AI. This vulnerability in
2026-03-27 CVE-2026-28367 high CVE-2026-28367: A flaw was found in Undertow. A remote attacker can exploit this vulnerability b
2026-03-27 CVE-2026-28369 high CVE-2026-28369: A flaw was found in Undertow. When Undertow receives an HTTP request where the f
2026-03-27 CVE-2026-28368 high CVE-2026-28368: A flaw was found in Undertow. This vulnerability allows a remote attacker to con
2026-02-06 CVE-2026-1709 critical CVE-2026-1709: A flaw was found in Keylime. The Keylime registrar, since version 7.12.0, does n
2026-01-07 CVE-2025-12543 critical CVE-2025-12543: A flaw was found in the Undertow HTTP server core, which is used in WildFly, JBo
2023-12-09 CVE-2023-6394 high CVE-2023-6394: A flaw was found in Quarkus. This issue occurs when receiving a request over web
2021-09-16 CVE-2021-40438 critical CVE-2021-40438: A crafted request uri-path can cause mod_proxy to forward the request to an orig
2021-03-12 CVE-2021-20231 critical CVE-2021-20231: A flaw was found in gnutls. A use after free issue in client sending key_share e
2021-03-12 CVE-2021-20232 critical CVE-2021-20232: A flaw was found in gnutls. A use after free issue in client_send_params in lib/
2020-03-02 CVE-2019-14892 critical CVE-2019-14892: A flaw was discovered in jackson-databind in versions before 2.9.10, 2.8.11.5 an
2020-01-29 CVE-2019-20445 critical CVE-2019-20445: HttpObjectDecoder.java in Netty before 4.1.44 allows a Content-Length header to
2020-01-29 CVE-2019-20444 critical CVE-2019-20444: HttpObjectDecoder.java in Netty before 4.1.44 allows an HTTP header that lacks a
2019-10-12 CVE-2019-17531 critical CVE-2019-17531: A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 th
2019-10-07 CVE-2019-17267 critical CVE-2019-17267: A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2
2019-10-01 CVE-2019-16942 critical CVE-2019-16942: A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 th
2019-10-01 CVE-2019-16943 critical CVE-2019-16943: A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 th
2019-09-15 CVE-2019-14540 critical CVE-2019-14540: A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2
2019-09-15 CVE-2019-16335 critical CVE-2019-16335: A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2
2019-07-29 CVE-2019-14379 critical CVE-2019-14379: SubTypeValidator.java in FasterXML jackson-databind before 2.9.9.2 mishandles de
2019-07-09 CVE-2018-11307 critical CVE-2018-11307: An issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.5. Use o
2019-06-07 CVE-2019-10160 critical CVE-2019-10160: A security regression of CVE-2019-9636 was discovered in python since commit d53
2019-03-23 CVE-2019-9948 critical CVE-2019-9948: urllib in Python 2.x through 2.7.16 supports the local_file: scheme, which makes
2019-03-08 CVE-2019-9636 critical CVE-2019-9636: Python 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handl
2019-01-02 CVE-2018-14721 critical CVE-2018-14721: FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to cond
2019-01-02 CVE-2018-14720 critical CVE-2018-14720: FasterXML jackson-databind 2.x before 2.9.7 might allow attackers to conduct ext
2019-01-02 CVE-2018-14719 critical CVE-2018-14719: FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to exec
2019-01-02 CVE-2018-14718 critical CVE-2018-14718: FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to exec
2019-01-02 CVE-2018-19360 critical CVE-2018-19360: FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspec
2019-01-02 CVE-2018-19361 critical CVE-2018-19361: FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspec
2019-01-02 CVE-2018-19362 critical CVE-2018-19362: FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspec
2018-04-06 CVE-2018-1270 critical CVE-2018-1270: Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 a
2018-02-26 CVE-2018-7489 critical CVE-2018-7489: FasterXML jackson-databind before 2.7.9.3, 2.8.x before 2.8.11.1 and 2.9.x befor
2018-02-06 CVE-2017-7525 critical CVE-2017-7525: A deserialization flaw was discovered in the jackson-databind, versions before 2
2018-02-06 CVE-2017-15095 critical CVE-2017-15095: A deserialization flaw was discovered in the jackson-databind in versions before
2017-10-04 CVE-2017-12149 critical CVE-2017-12149: In Jboss Application Server as shipped with Red Hat Enterprise Application Platf
2017-08-10 CVE-2016-5018 critical CVE-2016-5018: In Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.
2017-05-23 CVE-2016-9841 critical CVE-2016-9841: inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecif
2017-04-17 CVE-2017-5645 critical CVE-2017-5645: In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket
2017-04-06 CVE-2016-8735 critical CVE-2016-8735: Remote code execution is possible with Apache Tomcat before 6.0.48, 7.x before 7
2016-05-11 CVE-2016-4117 critical CVE-2016-4117: Adobe Flash Player 21.0.0.226 and earlier allows remote attackers to execute arb
2012-08-28 CVE-2012-4681 critical CVE-2012-4681: Multiple vulnerabilities in the Java Runtime Environment (JRE) component in Orac
SENTIMENT · TRUSTED SOURCES
synthesissevere-fallout-0.60
Red Hat shipped a vulnerable JBoss Application Server with arbitrary code execution via deserialization, a critical flaw that was publicly disclosed and required urgent patching.
cooey ↗severe-fallout-0.60
Red Hat shipped a vulnerable JBoss Application Server with arbitrary code execution via deserialization, a critical flaw that was publicly disclosed and required urgent patching.
"In Jboss Application Server as shipped with Red Hat Enterprise Application Platform 5.2, it was found that the doFilter method in the ReadOnlyAccessFilter of the HTTP Invoker does not restrict classes for which it performs deserialization and thus allowing an attacker to execute arbitrary code via crafted serialized data."
DOSSIER SOURCES
Open questions: Red Hat's response time to critical vulnerabilities · Red Hat's patch management effectiveness across enterprise deployments
DOSSIER · dex-RAG synthesis · grounded in our own collection + trusted sourcesbuilt 2026-07-30 03:47:11.491678+00:00