VendorsRed Hatopenshift_virtualizationany version
Vulnerabilities

Red Hat Openshift Virtualization any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

7CVEs
CVE-2026-44495
Axios: Credential Theft and Response Hijacking via Prototype Pollution Gadget in Config Merge
Published 2026-06-11 · Modified
7.7EPSS 0.009
CVE-2026-13201
Kubevirt: virt-handler-rhel9: kubevirt: safepath symlink following in virt-handler enables notify socket hijacking and node-level vm disruption
Published 2026-06-24 · Modified
7.3EPSS 0.002
CVE-2026-13208
Kubevirt: virt-handler-rhel9: kubevirt: virt-handler notify server trusts vmi identity from unauthenticated grpc request body
Published 2026-06-24 · Analyzed
6.5EPSS 0.001
CVE-2026-13318
Virt-api-rhel9: kubevirt: kubevirt: ssrf in virt-api port-forward via unvalidated guest-agent-reported ip
Published 2026-06-25 · Analyzed
6.4EPSS 0.002
CVE-2026-13434
Virt-controller-rhel9: kubevirt: kubevirt: multus default-network annotation injection via unvalidated tenant networkname when externalnetresourceinjection is enabled
Published 2026-06-26 · Analyzed
4.9EPSS 0.002
CVE-2026-13218
Kubevirt: kubevirt: symlink following in writetocachedfile allows host file overwrite from virt-launcher
Published 2026-06-25 · Analyzed
4.2EPSS 0.001
CVE-2026-13322
Kubevirt: virt-handler-rhel9: kubevirt: unbounded virtio-serial readline in virt-handler causes oom denial of service
Published 2026-06-26 · Analyzed
3.8EPSS 0.001