Product by Red Hat
Red Hat Openshift Container Platform 4.21
34 known vulnerabilities in Red Hat Openshift Container Platform 4.21 (Red Hat), 0 of them actively exploited (CISA KEV).
Key figures
34
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
4
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-4408 | Samba: remote code execution in samr | 9.8 | |
| Critical | CVE-2026-42010 | Gnutls: gnutls: authentication bypass via nul character in username | 9.8 | |
| Critical | CVE-2026-75885 | Red Hat OpenShift Container Platform: Server-Side Request Forgery (SSRF) | 9.3 | |
| Critical | CVE-2026-16242 | Red Hat multicluster engine for Kubernetes 2.1: Missing Authentication for Critical Function | 9.4 | |
| High | CVE-2026-42009 | Gnutls: gnutls: denial of service via dtls packet reordering vulnerability | 7.5 | |
| High | CVE-2026-14164 | Red Hat Enterprise Linux 10: Double Free | 7.5 | |
| High | CVE-2026-49329 | Red Hat OpenShift Container Platform: Inefficient Algorithmic Complexity | 7.5 | |
| High | CVE-2026-5260 | Gnutls: gnutls: information disclosure via heap overread in rsa key exchange | 8.2 | |
| High | CVE-2026-49332 | Red Hat OpenShift Container Platform: Interpretation Conflict | 8.5 | |
| High | CVE-2026-75887 | Openshift/console: openshift/console: unauthenticated path traversal in i18n locale handler | 7.5 | |
| High | CVE-2026-14474 | Red Hat: Initialization of a Resource with an Insecure Default | 8.8 | |
| High | CVE-2026-14476 | Red Hat: Relative Path Traversal | 8.0 | |
| High | CVE-2026-1933 | Samba: missing access check on reparse point operations | 6.5 | |
| High | CVE-2026-75888 | Openshift/console: openshift/console: authenticated ssrf via helm chart url fetch | 7.7 | |
| High | CVE-2026-93017 | Red Hat OpenShift Container Platform: Improper Privilege Management | 7.7 | |
| High | CVE-2026-16313 | Sg3_utils: sg3_utils: arbitrary command execution via udev property injection in sg_inq --export | 7.6 | |
| High | CVE-2026-104795 | Red Hat OpenShift Container Platform: Execution with Unnecessary Privileges | 8.8 | |
| High | CVE-2026-50237 | Red Hat OpenShift Container Platform: Server-Side Request Forgery (SSRF) | 7.4 | |
| High | CVE-2026-50236 | Red Hat OpenShift Container Platform: Server-Side Request Forgery (SSRF) | 7.4 | |
| High | CVE-2026-15816 | Red Hat: OS Command Injection | 7.5 | |
| High | CVE-2026-87114 | Red Hat OpenShift Container Platform 4.19: Inclusion of Functionality from Untrusted Control Sphere | 7.1 | |
| High | CVE-2026-46579 | Red Hat OpenShift Container Platform: Improper Authentication | 7.4 | |
| High | CVE-2026-75886 | Red Hat OpenShift Container Platform: Confused Deputy | 7.2 | |
| High | CVE-2026-42013 | Gnutls: gnutls: certificate validation bypass due to oversized subject alternative name | 8.2 | |
| Medium | CVE-2026-114406 | Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns | 6.8 |