Red Hat Red Hat Ceph Storage 9
11 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-93009 | | Dnsmasq: dnsmasq: heap out-of-bounds read in dhcpv6 option 39 fqdn decoder | MEDIUM 4.3 | 0.2 % | ||
| CVE-2026-93010 | | Dnsmasq: dnsmasq: --leasequery without address argument applies no source address check | MEDIUM 4.3 | 0.2 % | ||
| CVE-2026-93006 | | Dnsmasq: dnsmasq: tftp prefetch cache keyed on stale heap pointer serves wrong file content | MEDIUM 6.8 | 0.3 % | ||
| CVE-2026-93007 | | Dnsmasq: dnsmasq: tcp/53 child-slot exhaustion starves dnssec validation | MEDIUM 5.3 | 0.4 % | ||
| CVE-2026-93011 | | Dnsmasq: dnsmasq: heap out-of-bounds write in dnssec validator via to_wire/from_wire transforms | MEDIUM 5.3 | 0.6 % | ||
| CVE-2026-93008 | | Dnsmasq: dnsmasq: out-of-bailiwick cache injection through cname chase in split-dns configurations | MEDIUM 6.8 | 0.1 % | ||
| CVE-2026-18495 | | Libtiff: libtiff: heap-buffer overflow via numeric truncation in the jpeg raw passthrough | MEDIUM 6.1 | 0.1 % | ||
| CVE-2026-87872 | | Community.general: community.general: ocapi module_utils (ocapi_command, ocapi_info) hardcode validate_certs=false with no override, enab… | MEDIUM 6.8 | 0.1 % | ||
| CVE-2026-87874 | | Community.general: community.general: memcached cache plugin deserializes untrusted pickle data from memcached, enabling cache-poisoning … | HIGH 8.1 | 0.7 % | ||
| CVE-2026-80158 | | Ansible-collection-community-general: community.general: ipa_getkeytab does not set no_log on the bind_pw parameter, disclosing the ipa b… | MEDIUM 5.5 | 0.1 % | ||
| CVE-2025-14104 | | Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames | MEDIUM 6.1 | 0.2 % |