Product by Red Hat

    Red Hat Update Infrastructure 4 For Cloud Providers

    14 known vulnerabilities in Red Hat Update Infrastructure 4 For Cloud Providers (Red Hat), 0 of them actively exploited (CISA KEV).

    Key figures

    14

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    2

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Red Hat Update Infrastructure 4 For Cloud Providers (Red Hat)
    CriticalCVE-2026-12701

    Pulpcore: pulpcore: relative_path_validator bypass via directory traversal in filesystemexport

    also in 12 other products

    9.0
    HighCVE-2026-48863

    openSUSE Libsolv: Stack-based Buffer Overflow

    also in 8 other products

    7.5
    CriticalCVE-2024-7923

    Puppet-pulpcore: an authentication bypass vulnerability exists in pulpcore

    also in 6 other products

    9.8
    HighCVE-2026-90959

    Red Hat: Path Traversal

    also in 7 other products

    8.1
    HighCVE-2023-50781

    M2crypto: Observable Discrepancy

    also in 7 other products

    7.5
    HighCVE-2023-50782

    Python-cryptography: Observable Discrepancy

    also in 11 other products

    7.5
    MediumCVE-2026-103868

    Pulp-container: registry credentials are reused across remotes in a worker

    also in 3 other products

    6.5
    MediumCVE-2026-9150

    Red Hat: Stack-based Buffer Overflow

    also in 14 other products

    6.5
    HighCVE-2024-7143

    Pulpcore: rbac permissions incorrectly assigned in tasks that create objects

    also in 3 other products

    6.7
    HighCVE-2026-48864

    Red Hat Enterprise Linux 10: Out-of-bounds Write

    also in 43 other products

    7.8
    MediumCVE-2026-103870

    Pulp-rpm: distribution tree publish creates directories from .treeinfo ids

    also in 2 other products

    5.0
    MediumCVE-2026-9149

    Libsolv: heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv file

    also in 14 other products

    6.5
    MediumCVE-2026-84232

    Red Hat: Cross-site Scripting

    also in 3 other products

    5.4
    MediumCVE-2026-82327

    Red Hat: Improper Validation of Array Index

    also in 7 other products

    3.3

    All products by Red Hat