Reference page — cumulative record through Monday, October 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.

Red Hat

Vendor reference — Red Hat · sector: Operating Systems & Platforms. Cumulative disclosure record across the archive.

Follow Red Hat — Atom feed

Career totals

Disclosures & known-exploited
	All-time	YTD
CVEs	1317	1069
KEV entries	2	0

Rate & severity
KEV/100	Med CVSS	Med EPSS	C	H	M	L
0.2	6.5	.0035	68	524	655	70

KEV/100 = KEV entries ÷ CVEs × 100. Med CVSS / Med EPSS are medians over all disclosures. C/H/M/L = disclosures by CVSS severity band.

Monthly disclosures

Trend (by first-seen month, full archive): ▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▂▂▂▄▅▇█▆

Last 12 months (new CVEs by first-seen day)
Month	New CVEs
2025-11	9
2025-12	7
2026-01	10
2026-02	5
2026-03	24
2026-04	32
2026-05	45
2026-06	128
2026-07	163
2026-08	228
2026-09	264
2026-10	170

Notable CVEs

Ranked by the published formula: KEV → EPSS → CVSS → CVE ID.

Notable (ranked)
CVE	CVSS	EPSS %ile	Severity	KEV	First seen
CVE-2017-12149	9.8	99.8	CRITICAL	YES	2021-12-10
CVE-2023-4911	7.8	99.2	HIGH	YES	2023-10-03
CVE-2024-6387	8.1	99.9	HIGH	—	2024-07-01
CVE-2024-3094	10.0	99.8	CRITICAL	—	2024-03-29
CVE-2023-46847	7.5	99.8	HIGH	—	2023-11-03
CVE-2025-26466	5.9	98.6	MEDIUM	—	2025-02-28
CVE-2025-10230	10.0	98.6	CRITICAL	—	2025-11-07
CVE-2024-6409	7.0	98.1	HIGH	—	2024-07-08
CVE-2026-4480	9.0	96.5	CRITICAL	—	2026-05-26
CVE-2023-5178	8.8	95.4	HIGH	—	2023-11-01
CVE-2026-4631	9.8	95.3	CRITICAL	—	2026-04-07
CVE-2024-12085	7.5	95.1	HIGH	—	2025-01-14
CVE-2023-3338	6.5	95.0	MEDIUM	—	2023-06-30
CVE-2025-26465	6.8	94.6	MEDIUM	—	2025-02-18
CVE-2019-14892	9.8	92.8	CRITICAL	—	2020-03-02

Recent CVEs

Most recently seen
CVE	CVSS	EPSS %ile	Severity	KEV	First seen
CVE-2026-16487	8.1	—	HIGH	—	2026-10-19
CVE-2026-16460	7.4	—	HIGH	—	2026-10-19
CVE-2026-62439	7.0	7.5	HIGH	—	2026-10-16
CVE-2026-85977	5.3	19.2	MEDIUM	—	2026-10-16
CVE-2026-17591	3.6	1.2	LOW	—	2026-10-16
CVE-2026-105958	7.5	14.8	HIGH	—	2026-10-16
CVE-2026-105959	7.5	33.1	HIGH	—	2026-10-16
CVE-2026-111555	6.0	1.1	MEDIUM	—	2026-10-16
CVE-2026-111581	3.3	2.1	LOW	—	2026-10-16
CVE-2026-89098	5.5	0.9	MEDIUM	—	2026-10-16
CVE-2026-104715	7.8	3.5	HIGH	—	2026-10-16
CVE-2026-85231	6.5	20.9	MEDIUM	—	2026-10-16
CVE-2026-62438	6.1	1.6	MEDIUM	—	2026-10-16
CVE-2026-111802	6.6	2.2	MEDIUM	—	2026-10-16
CVE-2026-89088	5.5	1.5	MEDIUM	—	2026-10-16

Products

This vendor's products with a reference page (≥2 disclosures), by CVE count. A monolithic vendor total dilutes signal; product pages sharpen it.

Products (by CVE count)
Product	CVEs	KEV
Red Hat Enterprise Linux 9	730	1
Red Hat Enterprise Linux 8	715	1
Red Hat Enterprise Linux 10	630	0
Red Hat Enterprise Linux 7	532	1
Red Hat Enterprise Linux 6	509	1
Red Hat OpenShift Container Platform 4	315	0
Red Hat Hardened Images	195	0
Red Hat Single Sign-On 7	152	0
Red Hat Enterprise Linux 9.6 Extended Update Support	128	0
Red Hat Enterprise Linux 9.2 Update Services For SAP Solutions	126	0
Red Hat Enterprise Linux 10.0 Extended Update Support	122	0
Red Hat Enterprise Linux 8.8 Telecommunications Update Service	119	0
Red Hat Enterprise Linux 8.8 Update Services For SAP Solutions	119	0
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support	117	0
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support	117	0
Red Hat JBoss Enterprise Application Platform Expansion Pack	117	0
Red Hat Build Of Keycloak	103	0
Red Hat Enterprise Linux 9.4 Update Services For SAP Solutions	103	0
Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On	100	0
Red Hat Data Grid 8	86	0
Red Hat Enterprise Linux 7 Extended Lifecycle Support	86	0
Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On	86	0
Red Hat JBoss Enterprise Application Platform 7	75	0
Red Hat JBoss Enterprise Application Platform 8	75	0
Red Hat Fuse 7	70	0
Red Hat OpenShift Container Platform 4.16	68	0
Red Hat OpenShift Container Platform 4.18	67	0
Red Hat OpenShift Container Platform 4.17	65	0
Red Hat OpenShift Container Platform 4.14	63	0
Red Hat OpenShift AI 3.4	62	0
Red Hat Build Of Keycloak 26.6	62	0
Red Hat OpenShift Container Platform 4.13	60	0
Red Hat OpenShift Container Platform 4.15	58	0
Red Hat Update Infrastructure 5	57	0
Red Hat Discovery 2	54	0
Red Hat OpenShift Container Platform 4.12	53	0
Red Hat OpenShift Container Platform 4.19	53	0
Red Hat Enterprise Linux 9.4 Extended Update Support	51	0
Red Hat Satellite 6	46	0
Red Hat Build Of Keycloak 26.4	46	0
Red Hat Ansible Automation Platform 2	41	0
Red Hat Ansible Automation Platform 2.7	41	0
Red Hat Advanced Cluster Management For Kubernetes 2.17	38	0
Cert Manager Support For Red Hat OpenShift Release 1.18	37	0
Red Hat Ansible Automation Platform 2.6 For RHEL 9	37	0
Red Hat Enterprise Linux 9.0 Update Services For SAP Solutions	37	0
Red Hat Ansible Automation Platform 2.6	36	0
Red Hat Build Of Apache Camel For Spring Boot 4	36	0
Red Hat Ansible Automation Platform 2.5 For RHEL 8	35	0
Red Hat Ansible Automation Platform 2.5 For RHEL 9	35	0
Cert Manager Support For Red Hat OpenShift Release 1.20	34	0
Red Hat OpenShift Container Platform 4.20	34	0
Cert Manager Support For Red Hat OpenShift Release 1.17	33	0
Red Hat Build Of Apache Camel 4 For Quarkus 3	33	0
Red Hat Advanced Cluster Management For Kubernetes 2.13	32	0
Red Hat Advanced Cluster Management For Kubernetes 2.14	32	0
Red Hat Directory Server 12	32	0
Red Hat Enterprise Linux 8.2 Advanced Update Support	32	0
Red Hat Advanced Cluster Management For Kubernetes 2.15	31	0
Red Hat Advanced Cluster Management For Kubernetes 2.16	31	0
Red Hat Directory Server 13	31	0
Red Hat Enterprise Linux 8.6 Telecommunications Update Service	31	0
Red Hat Enterprise Linux 8.6 Update Services For SAP Solutions	31	0
Red Hat Process Automation 7	31	0
Red Hat Advanced Cluster Management For Kubernetes 2.11	30	0
Red Hat OpenShift AI (RHOAI)	30	0
Red Hat AI Inference Server 3.2	29	0
Red Hat Enterprise Linux 9.2 Extended Update Support	29	0
Red Hat Insights Proxy 1.5	28	0
Red Hat Quay 3	28	0
RHEL-8 Based Middleware Containers	27	0
Red Hat OpenShift AI 3.3	27	0
Red Hat OpenShift Container Platform 4.22	26	0
Red Hat Build Of Keycloak 26.6.7	26	0
Red Hat AMQ Broker 7	24	0
Red Hat OpenShift AI 3.5	24	0
Red Hat OpenShift Container Platform 4.21	24	0
Red Hat Advanced Cluster Management For Kubernetes 2	23	0
Red Hat Directory Server 11	23	0
Red Hat Enterprise Linux 8.8 Extended Update Support	23	0
Red Hat Build Of Apicurio Registry 3	23	0
Red Hat Build Of Quarkus	22	0
Red Hat Enterprise Linux 8.6 Extended Update Support	21	1
Red Hat JBoss Data Grid 7	21	0
Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 8	21	0
Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 9	21	0
Red Hat Single Sign-On 7.6 For RHEL 7	21	0
Red Hat Single Sign-On 7.6 For RHEL 8	21	0
Red Hat Single Sign-On 7.6 For RHEL 9	21	0
Red Hat OpenShift AI 2.25	20	0
Red Hat OpenStack Platform 13 (Queens)	20	0
Red Hat Satellite 6.17 For RHEL 9	20	0
Red Hat Satellite 6.18 For RHEL 9	20	0
Red Hat Satellite 6.19 For RHEL 9	20	0
Red Hat Satellite 6.16 For RHEL 8	19	0
Red Hat Build Of Apache Camel - HawtIO 4	19	0
Fast Datapath For RHEL 8	18	0
Fast Datapath For RHEL 9	18	0
Red Hat Satellite 6.16 For RHEL 9	18	0
Red Hat Build Of Quarkus 3.27.5.SP2	18	0
Red Hat Build Of Quarkus 3.33.3.SP2	18	0
Red Hat OpenShift AI 3.0	17	0
Red Hat OpenShift Virtualization 4	17	0
Fast Datapath For RHEL 10	16	0
Red Hat OpenShift AI 3.2	16	0
Red Hat Build Of Keycloak 26.4.13	16	0
Red Hat Build Of Debezium 3.6	15	0
Red Hat Enterprise Linux 8.4 Telecommunications Update Service	15	0
Red Hat Enterprise Linux 8.4 Update Services For SAP Solutions	15	0
Red Hat JBoss Enterprise Application Platform 7.4 ELS On RHEL 7	15	0
Red Hat JBoss Enterprise Application Platform 7.4 ELS On RHEL 8	15	0
Red Hat JBoss Enterprise Application Platform 7.4 ELS On RHEL 9	15	0
Red Hat JBoss Enterprise Application Platform 8.0 For RHEL 8	15	0
Red Hat OpenShift Dev Spaces	15	0
Red Hat Integration Camel K 1	14	0
Red Hat JBoss Enterprise Application Platform 8.0 For RHEL 9	14	0
Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 10	14	0
Red Hat OpenStack Platform 17.1	14	0
Red Hat Virtualization 4 For Red Hat Enterprise Linux 8	14	1
Red Hat Build Of Keycloak 26.4.14	14	0
Red Hat Build Of Keycloak 26.6.5	14	0
Multicluster Engine For Kubernetes 2.9	14	0
Red Hat Enterprise Linux 9.0 Extended Update Support	13	1
Red Hat OpenStack Platform 18.0	13	0
Red Hat Build Of Keycloak 26.0	13	0
Multicluster Engine For Kubernetes 2.11	13	0
Multicluster Engine For Kubernetes 2.6	13	0
Multicluster Engine For Kubernetes 2.8	13	0
Multicluster Engine For Kubernetes	12	0
OpenShift Serverless	12	0
Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION	12	0
Red Hat JBoss Enterprise Application Platform 7.4 For RHEL 8	12	0
Red Hat JBoss Enterprise Application Platform 7.4 For RHEL 9	12	0
Red Hat JBoss Enterprise Application Platform 7.4 On RHEL 7	12	0
Red Hat JBoss Enterprise Application Platform 7.4.25	12	0
Red Hat JBoss Enterprise Application Platform 8.1	12	0
Red Hat AI Inference Server 3.3	11	0
Red Hat Directory Server 11.5 E4S For RHEL 8	11	0
Red Hat Directory Server 11.7 E4S For RHEL 8	11	0
Red Hat Directory Server 11.9 For RHEL 8	11	0
Red Hat Directory Server 12.2 E4S For RHEL 9	11	0
Red Hat Directory Server 12.4 E4S For RHEL 9	11	0
Red Hat OpenStack Platform 16.2	11	0
Red Hat Update Infrastructure 4 For Cloud Providers	11	0
Red Hat Build Of Apicurio Registry 2	11	0
Red Hat AI Inference Server 3.5	10	0
Red Hat Ceph Storage 7	10	0
Red Hat JBoss Enterprise Application Platform 7.3 EUS For RHEL 7	10	0
Red Hat Build Of Keycloak 22	10	0
Red Hat Build Of OptaPlanner 8	10	0
Multicluster Engine For Kubernetes 2.17	10	0
Red Hat Build Of Apache Camel 3.33.3.SP2	9	0
Red Hat Ceph Storage 8	9	0
Red Hat Certificate System 9	9	0
Red Hat Enterprise Linux For NVIDIA 26	9	0
Red Hat OpenShift Container Platform 3.11	9	0
Red Hat Single Sign-On 7.6.13	9	0
Red Hat Build Of Keycloak 26.2	9	0
Red Hat Build Of Keycloak 26.6.3	9	0
Multicluster Engine For Kubernetes 2.10	9	0
Red Hat AMQ Clients	8	0
Red Hat Enterprise Linux 8.2 Telecommunications Update Service	8	0
Red Hat Enterprise Linux 8.2 Update Services For SAP Solutions	8	0
Red Hat JBoss Enterprise Application Platform	8	0
Red Hat JBoss Enterprise Application Platform 7.1 EUS For RHEL 7	8	0
Red Hat OpenShift Update Service	8	0
Red Hat Build Of Keycloak 24	8	0
Red Hat Build Of Keycloak 26.6.4	8	0
Cert Manager Support For Red Hat OpenShift Release 1.19	7	0
Cost Management 4	7	0
Exploit Intelligence	7	0
RHOL-5.8-RHEL-9	7	0
Red Hat Advanced Cluster Security 4	7	0
Red Hat Ansible Automation Platform 2.4 For RHEL 8	7	0
Red Hat Ansible Automation Platform 2.4 For RHEL 9	7	0
Red Hat Certificate System 10	7	0
Red Hat Certificate System 11	7	0
Red Hat Directory Server 13.2	7	0
Red Hat Build Of Apache Camel For Spring Boot 3	7	0
Red Hat AI Inference Server	6	0
Red Hat Ceph Storage 9	6	0
Red Hat Decision Manager 7	6	0
Red Hat Integration Camel Quarkus 2	6	0
Red Hat JBoss Core Services	6	0
Red Hat Quay 3.10	6	0
Red Hat Quay 3.12	6	0
Red Hat Quay 3.14	6	0
Red Hat Quay 3.15	6	0
Red Hat Quay 3.16	6	0
Red Hat Quay 3.9	6	0
Red Hat Build Of Debezium 3	6	0
Red Hat Build Of Keycloak 26.4.16	6	0
Red Hat Build Of Quarkus 3.27.6.redhat	6	0
Red Hat Build Of Quarkus 3.33.4.redhat	6	0
OpenShift Developer Tools And Services	5	0
OpenShift File Integrity Operator - FIO 1	5	0
Pen Drive Powered By Red Hat Lightspeed	5	0
RHOSS-1.36-RHEL-8	5	0
Red Hat Container Native Virtualization 4.18	5	0
Red Hat Container Native Virtualization 4.19	5	0
Red Hat Container Native Virtualization 4.20	5	0
Red Hat Container Native Virtualization 4.21	5	0
Red Hat Cost Management On-Premise 1	5	0
Red Hat JBoss Enterprise Application Platform 6	5	0
Red Hat OpenShift GitOps	5	0
Red Hat Openshift Data Foundation 4	5	0
Red Hat Quay 3.17	5	0
Red Hat Web Terminal 1.11 On RHEL 9	5	0
Red Hat Web Terminal 1.12 On RHEL 9	5	0
Red Hat Build Of Keycloak 26.6.6	5	0
Cert-manager Operator For Red Hat OpenShift 1.16	5	0
Mirror Registry For Red Hat OpenShift	5	0
Streams For Apache Kafka	5	0
Compliance Operator 1	4	0
Logging Subsystem For Red Hat OpenShift	4	0
Migration Toolkit For Virtualization	4	0
OpenShift Pipelines	4	0
RHODF-4.15-RHEL-9	4	0
Red Hat Ceph Storage 5	4	0
Red Hat Certification Program For Red Hat Enterprise Linux 9	4	0
Red Hat Container Native Virtualization 4.14	4	0
Red Hat Container Native Virtualization 4.16	4	0
Red Hat Container Native Virtualization 4.17	4	0
Red Hat Discovery 1.14	4	0
Red Hat Enterprise Linux AI (RHEL AI) 3	4	0
Red Hat Enterprise Linux AI 3.3	4	0
Red Hat Enterprise Linux AI 3.3 For RHEL 9	4	0
Red Hat Enterprise Linux AI 3.4 For RHEL 9	4	0
Red Hat Enterprise Linux AI 3.5 For RHEL 9	4	0
Red Hat JBoss Core Services 2.4.62.SP2	4	0
Red Hat JBoss Enterprise Application Platform 7.4.24	4	0
Red Hat JBoss Fuse Service Works 6	4	0
Red Hat OpenShift Distributed Tracing 3	4	0
Red Hat OpenShift Distributed Tracing 3.5.3	4	0
Red Hat Build Of Apache Camel 4.4.1 For Spring Boot 3.2	4	0
Red Hat Build Of Keycloak 24.0.9	4	0
Red Hat Build Of Keycloak 26.0.6	4	0
Red Hat Build Of Quarkus 3.2.11.Final	4	0
Single Sign-On 7.6.6	4	0
Mirror Registry For Red Hat OpenShift 2	4	0
Multicluster Engine For Kubernetes 2.1	4	0
Confidential Compute Attestation	3	0
MTA-6.2-RHEL-9	3	0
Migration Toolkit For Applications 6	3	0
Migration Toolkit For Applications 7	3	0
Migration Toolkit For Applications 8	3	0
Multicluster Global Hub 1.4.9	3	0
Multicluster Global Hub 1.5.8	3	0
Multicluster Global Hub 1.6.6	3	0
OpenShift Service Mesh 3	3	0

KEV entries

CISA Known Exploited Vulnerabilities (newest addition first)
CVE	KEV added	CVSS	EPSS %ile	Severity
CVE-2023-4911	2023-11-21	7.8	99.2	HIGH
CVE-2017-12149	2021-12-10	9.8	99.8	CRITICAL

KEV timing

Fastest to KEV
CVE	Days
CVE-2017-12149	0
CVE-2023-4911	49

Longest unpatched (KEV due date passed)
CVE	Due	Days over
CVE-2017-12149	2022-06-10	1592
CVE-2023-4911	2023-12-12	1042

Methodology

Rate statistics are arithmetic over published figures: KEV/100 = KEV entries ÷ CVEs × 100; medians are taken over this vendor's disclosures. Vendor names are normalized (case, punctuation, common aliases) before aggregation; monthly counts are keyed to first-seen day, the day this archive first observed the record, not the upstream publication date.

Raw counts are not comparable across vendors: disclosure practices, product breadth, and CNA conventions differ widely, so a larger number here does not mean less secure software. This is a reference page assembled from the public record — not a record of its own, and not a ranking of vendors by our judgment.

Sources. CVE records from the CVE Program (cvelistV5); enrichment from NVD (NIST); known-exploited status from the CISA KEV catalog; exploit probability from FIRST EPSS.