| | CVE-2026-58162 |  Apache | critical | 10.0 | 0.2%
| | The Apache Traffic Server certifier plugin generates certificates based on attacker-controlled clien… | Jul 29, 2026 | Aug 3, 2026 |
| | CVE-2026-58163 | Apache | high | 7.5 | 0.4%
| | Apache Traffic Server mishandles on-disk cache fields and object lifetimes, corrupting state or cras… | Jul 29, 2026 | Aug 3, 2026 |
| | CVE-2026-58164 | Apache | high | 7.5 | 0.4%
| | Apache Traffic Server has use-after-free and time-of-check/time-of-use errors in remap configuration… | Jul 29, 2026 | Aug 3, 2026 |
| | CVE-2026-58175 | Apache | high | 7.5 | 0.6%
| | Apache Traffic Server leaks memory when handling HostDB SRV records.
This issue affects Apache Traf… | Jul 29, 2026 | Jul 31, 2026 |
| | CVE-2026-58177 | Apache | high | 8.1 | 0.5%
| | The Apache Traffic Server Cripts framework has out-of-bounds writes, path traversal, and use-after-f… | Jul 29, 2026 | Jul 31, 2026 |
| | CVE-2026-58178 | Apache | high | 7.5 | 0.6%
| | The Apache Traffic Server ESI plugin can recurse without bound and fetch attacker-controlled URLs.
… | Jul 29, 2026 | Jul 31, 2026 |
| | CVE-2026-58179 | Apache | high | 8.1 | 0.6%
| | The Apache Traffic Server regex_remap plugin overflows the stack and integers from substitution inpu… | Jul 29, 2026 | Jul 31, 2026 |
| | CVE-2026-58180 | Apache | high | 7.5 | 0.6%
| | The Apache Traffic Server txn_box plugin overflows the stack from attacker-controlled input.
This i… | Jul 29, 2026 | Jul 31, 2026 |
| | CVE-2026-58181 | Apache | high | 7.5 | 0.5%
| | The Apache Traffic Server uri_signing and url_sig plugins can exhaust the stack or crash on attacker… | Jul 29, 2026 | Jul 31, 2026 |
| | CVE-2026-58182 | Apache | high | 8.6 | 0.5%
| | The Apache Traffic Server ts_lua plugin mishandles initialization, transform context, and per-instan… | Jul 29, 2026 | Jul 31, 2026 |
| | CVE-2026-58183 | Apache | medium | 5.9 | 0.5%
| | The Apache Traffic Server prefetch plugin can crash when processing attacker-influenced input.
This… | Jul 29, 2026 | Jul 31, 2026 |
| | CVE-2026-58184 | Apache | high | 8.2 | 0.5%
| | The Apache Traffic Server header_rewrite plugin can crash or corrupt memory during cookie operations… | Jul 29, 2026 | Jul 31, 2026 |
| | CVE-2026-58185 | Apache | medium | 5.9 | 0.4%
| | The Apache Traffic Server intercept plugin has a use-after-free.
This issue affects Apache Traffic … | Jul 29, 2026 | Jul 31, 2026 |
| | CVE-2026-58186 | Apache | high | 7.5 | 0.5%
| | The Apache Traffic Server webp_transform plugin can decode unsafely and serve mislabeled, cacheable … | Jul 29, 2026 | Jul 31, 2026 |
| | CVE-2026-58187 | Apache | low | 3.7 | 0.5%
| | The Apache Traffic Server multiplexer plugin overruns its chunk-decode buffer on upstream input, ena… | Jul 29, 2026 | Jul 31, 2026 |
| | CVE-2026-58188 | Apache | high | 8.2 | 0.4%
| | Several Apache Traffic Server experimental plugins have memory-safety and limit-bypass errors.
This… | Jul 29, 2026 | Aug 3, 2026 |
| | CVE-2026-58189 | Apache | high | 7.5 | 0.4%
| | Apache Traffic Server allows redirect-limit bypass when plugins reset the retry counter, enabling SS… | Jul 29, 2026 | Aug 3, 2026 |
| | CVE-2026-59243 | Apache | critical | 9.8 | 0.5%
| | The FAB auth manager's Azure AD OAuth login defaulted `verify_signature=False` when decoding the ID … | Jul 29, 2026 | Aug 5, 2026 |
| | CVE-2026-65100 | Apache | medium | 4.8 | 0.3%
| | Apache Traffic Server updates the HTTP/2 HPACK dynamic table before confirming the header block enco… | Jul 29, 2026 | Aug 3, 2026 |
| | CVE-2026-44943 |  Red Hat | high | 8.6 | — | | A flaw was found in open-iscsi. This vulnerability, known as Path Traversal, allows remote Man-in-th… | Jul 29, 2026 | Jul 29, 2026 |
| | CVE-2026-44944 | Red Hat | high | 7.8 | — | | A flaw was found in open-iscsi. An incorrect authorization vulnerability allows unprivileged local u… | Jul 29, 2026 | Jul 29, 2026 |
| | CVE-2026-16308 | Red Hat | high | 7.5 | — | ✓ Fix | A flaw was found in Quarkus REST. An unauthenticated remote attacker can exploit this vulnerability … | Jul 29, 2026 | Jul 29, 2026 |
| | CVE-2026-67216 | Red Hat | medium | 5.9 | — | | A flaw was found in cJSON. An inefficient algorithmic complexity flaw in the `cJSON_Compare()` funct… | Jul 29, 2026 | Jul 29, 2026 |
| | CVE-2026-55995 | Red Hat | high | 7.5 | — | | A flaw was found in open-iscsi. An unauthenticated man-in-the-middle (MITM) attacker can exploit a d… | Jul 29, 2026 | Jul 29, 2026 |
| | CVE-2026-55707 | Red Hat | high | 7.1 | — | | An authorization bypass was found in the OpenStack Neutron subnetpool onboarding API endpoint (PUT /… | Jul 29, 2026 | Jul 29, 2026 |
| | CVE-2026-20316 |  Cisco | medium | 5.3 | 0.8%
| ⚠ KEV | A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could… | Jul 29, 2026 | Aug 1, 2026 |
| | CVE-2026-18382 | Red Hat | medium | 6.8 | — | | A flaw was found in koku-metrics-operator. The operator's CostManagementMetricsConfig custom resourc… | Jul 30, 2026 | Jul 30, 2026 |
| | CVE-2026-18381 | Red Hat | high | 7.6 | — | | A flaw was found in the koku-metrics-operator for Red Hat OpenShift. The operator's CostManagementMe… | Jul 30, 2026 | Jul 30, 2026 |
| | CVE-2026-18378 | Red Hat | high | 7.6 | — | | A flaw was found in koku-metrics-operator. The operator's CostManagementMetricsConfig custom resourc… | Jul 30, 2026 | Jul 30, 2026 |
| | CVE-2026-16531 | Red Hat | medium | 5.3 | — | | An unauthenticated remote attacker can exploit a path traversal vulnerability in the PCP pmproxy log… | Jul 30, 2026 | Jul 30, 2026 |
| | CVE-2026-16530 | Red Hat | medium | 6.5 | — | | A flaw was found in the PCP (Performance Co-Pilot) `pmproxy` service. A remote attacker can exploit … | Jul 30, 2026 | Jul 30, 2026 |
| | CVE-2026-16529 | Red Hat | high | 7.5 | — | | A signed integer overflow in the PCP __pmGetPDU() function can be exploited via crafted network pack… | Jul 30, 2026 | Jul 30, 2026 |
| | CVE-2026-16527 | Red Hat | high | 7.3 | — | | An unauthenticated remote attacker can bypass access controls by sending crafted requests to the PCP… | Jul 30, 2026 | Jul 30, 2026 |
| | CVE-2026-16526 | Red Hat | high | 8.8 | — | | A flaw in the PCP linux_sockets module exposes an unsecured internal connection.
An attacker with in… | Jul 30, 2026 | Jul 30, 2026 |
| | CVE-2026-16524 | Red Hat | high | 7.8 | — | | A command injection flaw in PCP's linux_sockets PMDA allows malicious shell metacharacters via the n… | Jul 30, 2026 | Jul 30, 2026 |
| | CVE-2026-62363 | Red Hat | medium | 5.0 | — | | A flaw was found in ImageMagick. A local attacker with low privileges could cause a heap buffer over… | Jul 30, 2026 | Jul 30, 2026 |
| | CVE-2026-62946 | Red Hat | medium | 5.1 | — | | A flaw was found in ImageMagick. When processing extremely large JNX image files on 32-bit systems, … | Jul 30, 2026 | Jul 30, 2026 |
| | CVE-2026-17653 | Red Hat | critical | 9.0 | — | | An use after free flaw was found in the Skia component of the Chromium browser.
Upstream bug(s):
htt… | Jul 30, 2026 | Jul 30, 2026 |
| | CVE-2026-17659 | Red Hat | high | 8.7 | — | | An inappropriate implementation flaw was found in the SiteIsolation component of the Chromium browse… | Jul 30, 2026 | Jul 30, 2026 |
| | CVE-2026-17663 | Red Hat | high | 9.0 | — | | An insufficient validation of untrusted input flaw was found in the GPU component of the Chromium br… | Jul 30, 2026 | Jul 30, 2026 |
| | CVE-2026-17671 | Red Hat | high | 8.2 | — | | An insufficient validation of untrusted input flaw was found in the ANGLE component of the Chromium … | Jul 30, 2026 | Jul 30, 2026 |
| | CVE-2026-17673 | Red Hat | high | 9.0 | — | | An integer overflow flaw was found in the QUIC component of the Chromium browser.
Upstream bug(s):
h… | Jul 30, 2026 | Jul 30, 2026 |
| | CVE-2026-17672 | Red Hat | high | 9.0 | — | | An insufficient validation of untrusted input flaw was found in the Chromecast component of the Chro… | Jul 30, 2026 | Jul 30, 2026 |
| | CVE-2026-17677 | Red Hat | high | 9.6 | — | | An inappropriate implementation flaw was found in the ANGLE component of the Chromium browser.
Upstr… | Jul 30, 2026 | Jul 30, 2026 |
| | CVE-2026-17682 | Red Hat | high | 9.0 | — | | An integer overflow flaw was found in the ANGLE component of the Chromium browser.
Upstream bug(s):
… | Jul 30, 2026 | Jul 30, 2026 |
| | CVE-2026-17679 | Red Hat | high | 6.8 | — | | An insufficient validation of untrusted input flaw was found in the Print Preview component of the C… | Jul 30, 2026 | Jul 30, 2026 |
| | CVE-2026-17689 | Red Hat | high | 7.4 | — | | An uninitialized use flaw was found in the ANGLE component of the Chromium browser.
Upstream bug(s):… | Jul 30, 2026 | Jul 30, 2026 |
| | CVE-2026-17690 | Red Hat | high | 6.8 | — | | An insufficient validation of untrusted input flaw was found in the PDF component of the Chromium br… | Jul 30, 2026 | Jul 30, 2026 |
| | CVE-2026-17696 | Red Hat | high | 6.5 | 0.3%
| | A side-channel information leakage flaw was found in the Media component of the Chromium browser.
Up… | Jul 30, 2026 | Jul 30, 2026 |
| | CVE-2026-17695 | Red Hat | high | 9.6 | 0.3%
| | An inappropriate implementation flaw was found in the ANGLE component of the Chromium browser.
Upstr… | Jul 30, 2026 | Jul 30, 2026 |