https://127.0.0.1:10001 Latest vulnerabilities published by the CNAs operating under the redhat root of the CVE Program. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 16:09:15 +0000 https://127.0.0.1:10001/vuln/cve-2026-105105 Unauthenticated ZeroMQ command/telemetry bus in AIT-Core allows remote spacecraft command injection and telemetry exfiltration Unauthenticated ZeroMQ command/telemetry bus in AIT-Core allows remote spacecraft command injection and telemetry exfiltration https://127.0.0.1:10001/vuln/cve-2026-105105 Sat, 03 Oct 2026 11:55:44 +0000 https://127.0.0.1:10001/vuln/cve-2026-104988 Pki-core: dogtag-pki: redhat-pki: pki: est fullcmc authentication bypass allows certificate mis-issuance with arbitrary subject Pki-core: dogtag-pki: redhat-pki: pki: est fullcmc authentication bypass allows certificate mis-issuance with arbitrary subject https://127.0.0.1:10001/vuln/cve-2026-104988 Fri, 02 Oct 2026 19:34:33 +0000 https://127.0.0.1:10001/vuln/cve-2026-94422 xdg-dbus-proxy: message filtering bypass via reply serial allows sandbox escape xdg-dbus-proxy: message filtering bypass via reply serial allows sandbox escape https://127.0.0.1:10001/vuln/cve-2026-94422 Fri, 02 Oct 2026 13:54:10 +0000 https://127.0.0.1:10001/vuln/cve-2026-95512 Freetype: freetype: denial of service via repeated subroutine allocations in cid font loader Freetype: freetype: denial of service via repeated subroutine allocations in cid font loader https://127.0.0.1:10001/vuln/cve-2026-95512 Fri, 02 Oct 2026 09:05:11 +0000 https://127.0.0.1:10001/vuln/cve-2026-86345 389-ds-base: 389-ds-base: starttls plaintext-buffer retention allows on-path attacker to forge an ldap client's authentication result 389-ds-base: 389-ds-base: starttls plaintext-buffer retention allows on-path attacker to forge an ldap client's authentication result https://127.0.0.1:10001/vuln/cve-2026-86345 Thu, 01 Oct 2026 23:27:47 +0000 https://127.0.0.1:10001/vuln/cve-2026-86344 389-ds-base: 389-ds-base: unauthenticated worker-thread-pool exhaustion via completed-operation-then-incomplete-pdu connection requeue 389-ds-base: 389-ds-base: unauthenticated worker-thread-pool exhaustion via completed-operation-then-incomplete-pdu connection requeue https://127.0.0.1:10001/vuln/cve-2026-86344 Thu, 01 Oct 2026 21:29:55 +0000 https://127.0.0.1:10001/vuln/cve-2026-103484 pgvector buffer overflow in IVFFlat index build pgvector buffer overflow in IVFFlat index build https://127.0.0.1:10001/vuln/cve-2026-103484 Thu, 01 Oct 2026 19:49:03 +0000 https://127.0.0.1:10001/vuln/cve-2026-103884 Keycloak-services: keycloak-services: path traversal in x.509 crl distribution point allows arbitrary local file read Keycloak-services: keycloak-services: path traversal in x.509 crl distribution point allows arbitrary local file read https://127.0.0.1:10001/vuln/cve-2026-103884 Thu, 01 Oct 2026 17:16:21 +0000 https://127.0.0.1:10001/vuln/cve-2026-56098 Rubygem-katello: improper authorization logic allows resource enumeration Rubygem-katello: improper authorization logic allows resource enumeration https://127.0.0.1:10001/vuln/cve-2026-56098 Thu, 01 Oct 2026 17:14:56 +0000 https://127.0.0.1:10001/vuln/cve-2026-56097 Rubygem-katello: sql injection in registry proxy via labels Rubygem-katello: sql injection in registry proxy via labels https://127.0.0.1:10001/vuln/cve-2026-56097 Thu, 01 Oct 2026 17:14:50 +0000