Red Hat Update Infrastructure 4 For Cloud Providers
12 CVEs tracked. None of them is in CISA KEV.
This hub aggregates every CVE we track for Red Hat Update Infrastructure 4 For Cloud Providers. Use it to gauge the current risk picture and drill into individual advisories.
Red Hat Update Infrastructure 4 For Cloud Providers CVEs per month
| Month | CVEs |
|---|---|
| 2024-10 | 0 |
| 2024-11 | 0 |
| 2024-12 | 0 |
| 2025-01 | 0 |
| 2025-02 | 0 |
| 2025-03 | 0 |
| 2025-04 | 0 |
| 2025-05 | 0 |
| 2025-06 | 0 |
| 2025-07 | 0 |
| 2025-08 | 0 |
| 2025-09 | 0 |
| 2025-10 | 0 |
| 2025-11 | 0 |
| 2025-12 | 0 |
| 2026-01 | 0 |
| 2026-02 | 0 |
| 2026-03 | 0 |
| 2026-04 | 0 |
| 2026-05 | 3 |
| 2026-06 | 0 |
| 2026-07 | 2 |
| 2026-08 | 1 |
| 2026-09 | 2 |
Severity
How the 12 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.
- Critical2
- High6
- Medium4
Latest CVEs
The 12 most recently published vulnerabilities affecting Red Hat Update Infrastructure 4 For Cloud Providers.
- CVE-2026-90959Pulpcore: pulpcore: file:// scheme allowlist bypass in content upload file_url field enables arbitrary file read and pulp container registry signing key theft8.1
- CVE-2026-84232Pulpcore: python-pulpcore: stored cross-site scripting via inline rendering of uploaded html/svg content5.4
- CVE-2026-82327Libsolv: libsolv: out-of-bounds write in repo_write() via unvalidated directory id from vertical/paged .solv filelist data5.5
- CVE-2026-12701Pulpcore: pulpcore: relative_path_validator bypass via directory traversal in filesystemexport9.0
- CVE-2026-48863Libsolv: stack-based buffer overflow in libsolv eddsa pgp signature verification allows denial of service7.5
- CVE-2026-48864Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data7.8
- CVE-2026-9149Libsolv: heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv file6.5
- CVE-2026-9150Libsolv: stack-based buffer overflow in libsolv's debian metadata parser when handling sha384/sha512 checksums6.5
- CVE-2024-7923Puppet-pulpcore: an authentication bypass vulnerability exists in pulpcore9.8
- CVE-2024-7143Pulpcore: rbac permissions incorrectly assigned in tasks that create objects8.3
- CVE-2023-50782Python-cryptography: bleichenbacher timing oracle attack against rsa decryption - incomplete fix for cve-2020-256597.5
- CVE-2023-50781M2crypto: bleichenbacher timing attacks in the rsa decryption api - incomplete fix for cve-2020-256577.5
Product grouping is registry-driven, with AI assist and human review. How it works