Product by Red Hat
Red Hat Ceph Storage 9
12 known vulnerabilities in Red Hat Ceph Storage 9 (Red Hat), 0 of them actively exploited (CISA KEV).
Key figures
12
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-87874 | Red Hat: Deserialization of Untrusted Data | 8.1 | |
| Medium | CVE-2024-11831 | Npm-serialize-javascript: cross-site scripting (xss) in serialize-javascript | 5.4 | |
| Medium | CVE-2026-93006 | Dnsmasq: dnsmasq: tftp prefetch cache keyed on stale heap pointer serves wrong file content | 6.8 | |
| Medium | CVE-2026-93008 | Dnsmasq: dnsmasq: out-of-bailiwick cache injection through cname chase in split-dns configurations | 6.8 | |
| Medium | CVE-2026-18495 | Libtiff: libtiff: heap-buffer overflow via numeric truncation in the jpeg raw passthrough | 6.1 | |
| Medium | CVE-2026-87872 | Red Hat: Improper Certificate Validation | 6.8 | |
| Medium | CVE-2026-93007 | Dnsmasq: dnsmasq: tcp/53 child-slot exhaustion starves dnssec validation | 5.3 | |
| Medium | CVE-2026-93011 | Dnsmasq: dnsmasq: heap out-of-bounds write in dnssec validator via to_wire/from_wire transforms | 5.3 | |
| Medium | CVE-2025-14104 | Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames | 6.1 | |
| Medium | CVE-2026-80158 | Red Hat: Invocation of Process Using Visible Sensitive Information | 5.5 | |
| Medium | CVE-2026-93009 | Dnsmasq: dnsmasq: heap out-of-bounds read in dhcpv6 option 39 fqdn decoder | 4.3 | |
| Medium | CVE-2026-93010 | Dnsmasq: dnsmasq: --leasequery without address argument applies no source address check | 4.3 |