Product by Red Hat
Red Hat Advanced Cluster Security 4
14 known vulnerabilities in Red Hat Advanced Cluster Security 4 (Red Hat), 0 of them actively exploited (CISA KEV).
Key figures
14
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-103314 | Stackrox: stackrox: saml response replay allows multiple central authentication tokens | 7.4 | |
| High | CVE-2026-9165 | Stackrox: stackrox: unbounded graphql query depth allows authenticated denial of service | 7.7 | |
| Medium | CVE-2024-11831 | Npm-serialize-javascript: cross-site scripting (xss) in serialize-javascript | 5.4 | |
| Medium | CVE-2026-114406 | Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns | 6.8 | |
| High | CVE-2026-10079 | Stackrox: stackrox: deploy-time policy enforcement and visibility bypass via label injection | 8.5 | |
| High | CVE-2024-0406 | Mholt/archiver: path traversal vulnerability | 6.1 | |
| Medium | CVE-2026-19278 | Red Hat Advanced Cluster Security 4: Permissive Regular Expression | 6.8 | |
| Medium | CVE-2026-19519 | Claircore: claircore: denial of service via unchecked type assertion in rpm header parser | 4.3 | |
| Medium | CVE-2025-11065 | Github.com/go-viper/mapstructure/v2: Generation of Error Message Containing Sensitive Information | 5.3 | |
| Medium | CVE-2026-16254 | Red Hat Advanced Cluster Security 4: Out-of-bounds Read | 4.3 | |
| Low | CVE-2026-114236 | Red Hat Confidential Compute Attestation: Missing Release of Resource after Effective Lifetime | 3.3 | |
| Medium | CVE-2025-7195 | Operator-sdk: privilege escalation due to incorrect permissions of /etc/passwd | 6.4 | |
| Low | CVE-2025-8556 | Github.com/cloudflare/circl: circl-fourq: missing and wrong validation can lead to incorrect results | 3.7 | |
| Medium | CVE-2025-5198 | Stackrox: xss in stackrox | 5.0 |