Known vulnerabilities in rhc (Red Hat package)
Vendor:
Red Hat Inc.
Software:
rhc (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:rhc_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
20
Public exploits:
1
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
0.2.5-10.el8_10
0.2.7-11.el9_8
0.3.2-6.el10_0
0.2.2-1.el9_2.4
0.2.4-9.el9_4
0.2.7-1.el9_6.5
0.3.2-5.el10_0
0.2.2-1.el9_2.3
0.2.4-8.el9_4
0.2.5-9.el8_10
0.2.7-8.el9_8
0.3.8-6.el10_2
0.2.7-1.el9_6.4
0.3.2-4.el10_0
0.2.7-7.el9_8
0.3.8-5.el10_2
0.2.7-6.el9_8
0.2.5-7.el8_10
0.2.7-4.el9_7
0.2.7-1.el9_6.3
0.2.5-6.el8_10
0.2.2-1.el8_8.2
0.2.4-5.el7_9
0.2.1-13.el9_0
0.2.1-14.el8_6
0.2.0-6.el8_4
0.2.4-7.el9_4
0.2.2-1.el9_2.2
0.2.4-3.el7_9
0.2.5-5.el8_10
0.3.4-3.el10_1
0.2.7-1.el9_6.2
0.3.2-3.el10_0
0.2.7-3.el9_7
0.2.7-2.el9_7
0.2.1-12.el9_0
0.2.1-13.el8_6
0.2.0-5.el8_4
0.2.2-1.el8_8.1
0.2.5-4.el8_10
0.3.2-2.el10_0
0.3.4-2.el10_1
0.2.6-3.el9_6
0.2.7-1.el9_6
1.38.7.1-1.el6op
0.2.5-1.el8_10
0.2.5-1.el9_5
1.31.3.1-1.el6op
0.2.4-3.el8_9
1.3.2-1.3.el6op
1.23.7.1-1.el6op
1.37.1.2-1.el6op
1.38.4.5-1.el6op
1.38.7.1-1.el6
1.38.6.1-1.el6
1.38.4.5-1.el6
1.37.1.2-1.el6
1.36.1.1-1.el6
1.35.2.1-1.el6
1.33.4.1-1.el6
1.32.2.1-1.el6
1.31.3.1-1.el6
1.29.3.1-1.el6
1.24.3.1-1.el6
1.23.7.1-1.el6
1.17.5.3-2.el6
1.17.5.3-1.el6
1.17.5.2-1.el6
1.17.5-2.el6
1.9.7-1.el6
1.9.6-1.el6
1.0.6-1.el6
Vulnerabilities (20)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU144181 - Uncontrolled Recursion CVE-2026-33818 |
CWE-674 | Medium | 0.2.5-10.el8_10, 0.2.7-11.el9_8 | 18.08.2026 |
SB2026081856 SB2026082658 SB2026082659 and 19 more |
||
| #VU144179 - Resource exhaustion CVE-2026-56853 |
CWE-400 | Medium | 0.2.5-10.el8_10 | 18.08.2026 |
SB2026081856 SB2026082658 SB2026082659 and 16 more |
||
| #VU144178 - Improper control of a resource through its lifetime CVE-2026-56862 |
CWE-664 | Medium | 0.2.5-10.el8_10, 0.2.7-11.el9_8 | 18.08.2026 |
SB2026081856 SB2026082658 SB2026082659 and 19 more |
||
| #VU144177 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2026-56858 |
CWE-79 | Medium | 0.2.7-11.el9_8 | 18.08.2026 |
SB2026081856 SB2026082658 SB2026082659 and 16 more |
||
| #VU144174 - Resource exhaustion CVE-2026-56860 |
CWE-400 | Medium | 0.2.5-10.el8_10, 0.2.7-11.el9_8 | 18.08.2026 |
SB2026081856 SB2026082658 SB2026082659 and 19 more |
||
| #VU140611 - Double Free CVE-2026-33811 |
CWE-415 | Medium | 0.3.2-6.el10_0 | 31.07.2026 |
SB2026073126 SB20260731121 SB20260731123 and 14 more |
||
| #VU140607 - Time-of-check Time-of-use (TOCTOU) Race Condition CVE-2026-32282 |
CWE-367 | Low | 0.2.2-1.el9_2.3, 0.2.4-8.el9_4, 0.2.5-7.el8_10, 0.2.7-1.el9_6.4 | 31.07.2026 |
SB2026073125 SB2026073160 SB2026073161 and 51 more |
||
| #VU140605 - Improper Certificate Validation CVE-2026-33810 |
CWE-295 | Medium | 0.3.2-6.el10_0 | 31.07.2026 |
SB2026073125 SB2026073183 SB2026073184 and 11 more |
||
| #VU140600 - Improper input validation CVE-2026-32281 |
CWE-20 | Medium | 0.2.2-1.el9_2.3, 0.2.4-8.el9_4, 0.2.7-1.el9_6.4, 0.2.7-7.el9_8 | 31.07.2026 |
SB2026073125 SB2026073183 SB2026073184 and 38 more |
||
| #VU140599 - Resource exhaustion CVE-2026-32280 |
CWE-400 | Medium | 0.2.2-1.el9_2.3, 0.2.4-8.el9_4, 0.2.5-7.el8_10, 0.2.7-1.el9_6.4, 0.2.7-7.el9_8, 0.3.2-4.el10_0, 0.3.8-5.el10_2 | 31.07.2026 |
SB2026073125 SB2026073160 SB2026073161 and 75 more |
||
| #VU136680 - Dependency on Vulnerable Third-Party Component CVE-2026-32283 |
CWE-1395 | Medium | 0.2.2-1.el9_2.3, 0.2.4-8.el9_4, 0.2.5-7.el8_10, 0.2.7-1.el9_6.4, 0.3.2-4.el10_0 | 02.07.2026 |
SB2026070218 SB2026070239 SB2026070240 and 63 more |
||
| #VU128730 - Improper Authorization CVE-2026-33186 |
CWE-285 | High | 0.2.5-6.el8_10, 0.2.7-1.el9_6.3, 0.2.7-4.el9_7 | 01.05.2026 |
SB2026050106 SB2026050107 SB2026050108 and 70 more |
||
| #VU124118 - Improper input validation CVE-2026-25679 |
CWE-20 | Medium | 0.2.0-6.el8_4, 0.2.1-13.el9_0, 0.2.1-14.el8_6, 0.2.2-1.el8_8.2, 0.2.2-1.el9_2.2, 0.2.4-5.el7_9, 0.2.4-7.el9_4, 0.2.5-5.el8_10, 0.2.7-1.el9_6.2, 0.2.7-3.el9_7, 0.3.2-3.el10_0, 0.3.4-3.el10_1 | 19.03.2026 |
SB2026031903 SB2026031904 SB2026031905 and 136 more |
||
| #VU124034 - Resource exhaustion CVE-2025-61726 |
CWE-400 | Medium | 0.2.0-5.el8_4, 0.2.1-12.el9_0, 0.2.1-13.el8_6, 0.2.2-1.el8_8.1, 0.2.4-3.el7_9, 0.2.5-4.el8_10, 0.3.2-2.el10_0, 0.3.4-2.el10_1 | 16.03.2026 |
SB2026031636 SB2026031637 SB2026031638 and 144 more |
||
| #VU123129 - Improper Certificate Validation CVE-2025-68121 |
CWE-295 | High | 0.2.2-1.el9_2.3, 0.2.4-8.el9_4, 0.2.5-4.el8_10, 0.3.2-2.el10_0, 0.3.4-2.el10_1 | 23.02.2026 |
SB2026022333 SB2026030334 SB2026030343 and 118 more |
||
| #VU119235 - Resource exhaustion CVE-2025-61729 |
CWE-400 | Medium | 0.2.0-5.el8_4, 0.2.1-12.el9_0, 0.2.1-13.el8_6, 0.2.2-1.el8_8.1, 0.2.4-3.el7_9, 0.2.5-4.el8_10, 0.3.2-2.el10_0, 0.3.4-2.el10_1 | 06.12.2025 |
SB2025120604 SB20251210172 SB20251210173 and 146 more |
||
| #VU82064 - Resource exhaustion CVE-2023-39325 |
CWE-400 | Medium | 0.2.2-1.el9_2.2 | 16.10.2023 |
SB2023101651 SB2023101652 SB2023101653 and 341 more |
||
| #VU81728 - Resource exhaustion CVE-2023-44487 |
CWE-400 | High | 0.2.2-1.el9_2.2 | 10.10.2023 |
SB2023101023 SB2023101024 SB2023101037 and 651 more |
||
| #VU72686 - Resource exhaustion CVE-2022-41723 |
CWE-400 | Medium | 0.2.4-3.el8_9 | 01.03.2023 |
SB2023030130 SB2023030131 SB2023030946 and 190 more |
||
| #VU72314 - Resource exhaustion CVE-2022-3064 |
CWE-400 | Medium | 0.2.5-1.el8_10, 0.2.5-1.el9_5 | 16.02.2023 |
SB2023021601 SB2023021602 SB2023022185 and 37 more |