Spremljamo ranljivosti v izdelkih največjih proizvajalcev, kot so Microsoft, Cisco, Fortinet, Citrix in drugi. Izberite proizvajalca za seznam njegovih aktivnih ranljivosti in naših člankov.
Redhat: ranljivosti v zadnjem letu
| CVE | CVSS | EPSS | CISA KEV | Proizvajalec | Opis (NVD, angleško) |
|---|---|---|---|---|---|
| CVE-2026-46300 | 7,8 Visoko | 16,1 % | Aktivno izkoriščana od 28. 10. 2026 | Linux, Redhat, Siemens | In the Linux kernel, the following vulnerability has been resolved: net: skbuff: preserve shared-frag marker during coalescing skb_try_coalesce() can attach paged frags from @from to @to. If @from has SKBFL_SHARED_FRAG set, the resulting @to skb can contain |
| CVE-2026-9800 | 8,1 Visoko | 0,7 % | – | Redhat | A flaw was found in Keycloak Policy Enforcer. This vulnerability allows any authenticated user to bypass all authorization policies, including role, scope, and User-Managed Access (UMA) permission checks. By including the configured access-denied page path wit |
| CVE-2026-9086 | 7,3 Visoko | 0,8 % | – | Redhat | A flaw was found in Keycloak. A remote attacker with administrative privileges, specifically those with `manage-client` permission or access to client registration endpoints, could bypass client Uniform Resource Identifier (URI) validation. This is achieved by |
| CVE-2026-9705 | 6,5 Srednje | 0,5 % | – | Redhat | A flaw was found in Keycloak's client registration service. A remote attacker, possessing a previously issued Registration Access Token (RAT), could exploit this vulnerability to re-enable a client that an administrator had explicitly disabled. This bypasses s |
| CVE-2026-4897 | 5,5 Srednje | 0,2 % | – | Freedesktop, Redhat | A flaw was found in polkit. A local user can exploit this by providing a specially crafted, excessively long input to the `polkit-agent-helper-1` setuid binary via standard input (stdin). This unbounded input can lead to an out-of-memory (OOM) condition, resul |
| CVE-2026-9083 | 4,9 Srednje | 0,8 % | – | Redhat | A flaw was found in Keycloak. A realm administrator with the "manage-realm" role can exploit this vulnerability by submitting an arbitrary filesystem path as a keystore parameter when creating a key provider component. This allows the administrator to probe ar |
| CVE-2026-9799 | 4,6 Srednje | 0,3 % | – | Redhat | A flaw was found in org.keycloak.authorization. An authenticated user with a granted User-Managed Access (UMA) permission ticket for one resource can exploit this by using a specific permission request prefix to bypass per-resource access control. This allows |