Red Hat
In 18 briefs, most recently 3 November 2026. RSS for this tag
Learn more: Vulnerabilities (NVD) ↗
Known exploited (CISA KEV)
9 Red Hat vulnerabilities are on CISA's list of vulnerabilities exploited in the wild, 4 of them used in ransomware campaigns. Most recent:
- CVE-2015-5287 Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability
- CVE-2015-3246 Red Hat Libuser Race Condition Vulnerability
- CVE-2018-14667 Red Hat JBoss RichFaces Framework Expression Language Injection Vulnerability
- CVE-2021-3560 Red Hat Polkit Incorrect Authorization Vulnerability
- CVE-2021-4034 Red Hat Polkit Out-of-Bounds Read and Write Vulnerability
- CVE-2010-1428 Red Hat JBoss Information Disclosure Vulnerability
- CVE-2010-0738 Red Hat JBoss Authentication Bypass Vulnerability
- CVE-2017-12149 Red Hat JBoss Application Server Remote Code Execution Vulnerability
Coverage in DanSec Daily
- Harvard alumni data breach, Frontline Education breach of 1.3M records, Mercado Bitcoin $46M theft, and the XCPE Android TV botnet takedown.
- Binance's $6.3B heist tied to TraderTraitor, Polymarket supply-chain hack, and critical CVEs in GitLab and Cisco SD-WAN exploited in the wild.
- Iran-linked hackers shut a UK power plant for four days, Oracle WebLogic flaw CVE-2026-21962 is actively exploited, and TikTok pays $400M COPPA settlement.
- Google and FBI disrupt NetNut proxy network, Scattered Spider suspect extradited, and Pegasus spyware hits EU Parliament investigators; plus Cursor and WinRAR …
- WeedHack malware infected 116,000+ Minecraft systems, Red Hat NPM packages hit by credential-stealing worm, and Gamaredon exploits WinRAR in Ukraine attacks.
- The Dashlane vault breach, the Miasma npm supply chain attack on Red Hat packages, and active exploitation of Windows Netlogon CVE-2026-41089 and Palo Alto …
- Charter and Carnival breaches by ShinyHunters, FortiClient EMS CVE-2026-35616 exploitation, and Gogs and Gitea flaws.
- Shai-Hulud worm source leak and TanStack supply chain breach at OpenAI, Exchange zero-day CVE-2026-42897, and JDownloader installer hijack.
- Jaguar Land Rover's cyberattack fallout, Sedgwick Government Solutions breach, and malicious Chrome extensions stealing ChatGPT and DeepSeek chats from 900,000 …
- The French postal service cyberattack, the Nissan and Red Hat GitLab data exposure, and the Baker University breach affecting 53,000 people.
- Nissan customer records exposed via Red Hat breach, Coupang's 33.7M-user breach, and Clop's University of Phoenix attack.
- Discord Zendesk breach affecting 5.5M users, Qilin's Asahi brewery leak, and a LockBit-Qilin-DragonForce ransomware cartel.
- Red Hat and Discord breaches, Cl0p exploiting an Oracle E-Business Suite zero-day, and a GoAnywhere MFT flaw abused in Medusa ransomware attacks.
- Red Hat GitLab repo breach claim, WestJet breach affecting 1.2M, and Oracle E-Business Suite extortion campaign possibly tied to Cl0p are the top stories.
- Clop's Oracle E-Business Suite extortion campaign, the WestJet and Allianz Life breaches, and the WireTap/Battering RAM physical attack on Intel SGX and AMD …
- DOJ seizes four crypting service domains; Ubuntu, RHEL and Fedora core dump flaws expose password hashes; Cisco IOS XE WLC CVE-2025-20188 exploit published.
- Procolored printer drivers spread malware for six months, Coinbase offers $20M bounty after extortion, and Intel CPUs face new Spectre-style flaws.
- The Coinbase insider data breach and extortion attempt, SAP NetWeaver exploitation by BianLian and RansomExx, and Samsung MagicINFO Mirai attacks.