Red Hat Advanced Cluster Management For Kubernetes
52 CVEs tracked. None of them is in CISA KEV.
This hub aggregates every CVE we track for Red Hat Advanced Cluster Management For Kubernetes, a product in the operating systems space. Use it to gauge the current risk picture and drill into individual advisories.
Red Hat Advanced Cluster Management For Kubernetes CVEs per month
| Month | CVEs |
|---|---|
| 2024-10 | 0 |
| 2024-11 | 0 |
| 2024-12 | 1 |
| 2025-01 | 2 |
| 2025-02 | 0 |
| 2025-03 | 0 |
| 2025-04 | 2 |
| 2025-05 | 0 |
| 2025-06 | 0 |
| 2025-07 | 1 |
| 2025-08 | 0 |
| 2025-09 | 1 |
| 2025-10 | 0 |
| 2025-11 | 0 |
| 2025-12 | 1 |
| 2026-01 | 1 |
| 2026-02 | 1 |
| 2026-03 | 1 |
| 2026-04 | 3 |
| 2026-05 | 0 |
| 2026-06 | 0 |
| 2026-07 | 0 |
| 2026-08 | 0 |
| 2026-09 | 0 |
Severity
How the 52 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.
- Critical6
- High26
- Medium16
- Low4
Latest CVEs
The 15 most recently published vulnerabilities affecting Red Hat Advanced Cluster Management For Kubernetes.
- CVE-2026-32281Inefficient policy validation in crypto/x5097.5
- CVE-2026-32280Unexpected work during chain building in crypto/x5097.5
- CVE-2026-32283Unauthenticated TLS 1.3 KeyUpdate record can cause persistent connection retention and DoS in crypto/tls7.5
- CVE-2026-32285Denial of service in github.com/buger/jsonparser7.5
- CVE-2026-27903minimatch has a ReDoS: matchOne() combinatorial backtracking via multiple non-adjacent GLOBSTAR segments7.5
- CVE-2026-23490pyasn1 has a DoS vulnerability in decoder7.5
- CVE-2025-66471urllib3 Streaming API improperly handles highly compressed data7.5
- CVE-2025-59375libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing.7.5
- CVE-2025-54410Moby's Firewalld reload removes bridge network isolation3.3
- CVE-2025-32386Helm Allows A Specially Crafted Chart Archive To Cause Out Of Memory Termination6.5
- CVE-2025-32387Helm Allows A Specially Crafted JSON Schema To Cause A Stack Overflow6.5
- CVE-2025-21614go-git clients vulnerable to DoS via maliciously crafted Git server replies7.5
- CVE-2025-21613go-git has an Argument Injection via the URL field9.8
- CVE-2024-53259quic-go affected by an ICMP Packet Too Large Injection Attack on Linux6.5
- CVE-2024-45801Tampering by prototype polution in DOMPurify7.3
Product grouping is registry-driven, with AI assist and human review. How it works