Product by Red Hat
Red Hat Openshift Container Platform 4.20
43 known vulnerabilities in Red Hat Openshift Container Platform 4.20 (Red Hat), 0 of them actively exploited (CISA KEV).
Key figures
43
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
6
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-4408 | Samba: remote code execution in samr | 9.8 | |
| Medium | CVE-2025-5318 | Libssh: out-of-bounds read in sftp_handle() | 5.4 | |
| High | CVE-2025-9566 | Podman: podman kube play command may overwrite host files | 8.1 | |
| Critical | CVE-2025-49796 | Libxml: type confusion leads to denial of service (dos) | 9.1 | |
| Critical | CVE-2026-42010 | Gnutls: gnutls: authentication bypass via nul character in username | 9.8 | |
| High | CVE-2025-5987 | Libssh: invalid return code for chacha20 poly1305 with openssl backend | 8.1 | |
| Critical | CVE-2026-75885 | Red Hat OpenShift Container Platform: Server-Side Request Forgery (SSRF) | 9.3 | |
| Critical | CVE-2026-16242 | Red Hat multicluster engine for Kubernetes 2.1: Missing Authentication for Critical Function | 9.4 | |
| High | CVE-2026-42009 | Gnutls: gnutls: denial of service via dtls packet reordering vulnerability | 7.5 | |
| High | CVE-2026-14164 | Red Hat Enterprise Linux 10: Double Free | 7.5 | |
| High | CVE-2025-6032 | Podman: podman missing tls verification | 8.3 | |
| High | CVE-2026-49329 | Red Hat OpenShift Container Platform: Inefficient Algorithmic Complexity | 7.5 | |
| High | CVE-2026-5260 | Gnutls: gnutls: information disclosure via heap overread in rsa key exchange | 8.2 | |
| High | CVE-2026-49332 | Red Hat OpenShift Container Platform: Interpretation Conflict | 8.5 | |
| High | CVE-2026-75887 | Openshift/console: openshift/console: unauthenticated path traversal in i18n locale handler | 7.5 | |
| High | CVE-2026-14474 | Red Hat: Initialization of a Resource with an Insecure Default | 8.8 | |
| High | CVE-2026-14476 | Red Hat: Relative Path Traversal | 8.0 | |
| Critical | CVE-2025-49794 | Libxml: heap use after free (uaf) leads to denial of service (dos) | 9.1 | |
| High | CVE-2025-11561 | Sssd: sssd default kerberos configuration allows privilege escalation on ad-joined linux systems | 8.8 | |
| High | CVE-2026-1933 | Samba: missing access check on reparse point operations | 6.5 | |
| High | CVE-2026-75888 | Openshift/console: openshift/console: authenticated ssrf via helm chart url fetch | 7.7 | |
| High | CVE-2026-93017 | Red Hat OpenShift Container Platform: Improper Privilege Management | 7.7 | |
| High | CVE-2025-5914 | Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c | 7.8 | |
| High | CVE-2026-16313 | Sg3_utils: sg3_utils: arbitrary command execution via udev property injection in sg_inq --export | 7.6 | |
| High | CVE-2025-5222 | Icu: stack buffer overflow in the srbroot::addtag function | 7.0 |