Red Hat Red Hat Update Infrastructure 4 for Cloud Providers
13 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-103870 | | Pulp-rpm: distribution tree publish creates directories from .treeinfo ids | MEDIUM 5.0 | 0.2 % | ||
| CVE-2026-103868 | | Pulp-container: registry credentials are reused across remotes in a worker | MEDIUM 6.5 | 0.2 % | ||
| CVE-2026-90959 | | Pulpcore: pulpcore: file:// scheme allowlist bypass in content upload file_url field enables arbitrary file read and pulp container regis… | HIGH 8.1 | 0.4 % | ||
| CVE-2026-84232 | | Pulpcore: python-pulpcore: stored cross-site scripting via inline rendering of uploaded html/svg content | MEDIUM 5.4 | 0.2 % | ||
| CVE-2026-82327 | | Libsolv: libsolv: out-of-bounds write in repo_write() via unvalidated directory id from vertical/paged .solv filelist data | MEDIUM 5.5 | 0.2 % | ||
| CVE-2026-12701 | | Pulpcore: pulpcore: relative_path_validator bypass via directory traversal in filesystemexport | CRITICAL 9.0 | 1.2 % | ||
| CVE-2026-48863 | | Libsolv: stack-based buffer overflow in libsolv eddsa pgp signature verification allows denial of service | HIGH 7.5 | 0.8 % | ||
| CVE-2026-9149 | | Libsolv: heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv file | MEDIUM 6.5 | 0.3 % | ||
| CVE-2026-9150 | | Libsolv: stack-based buffer overflow in libsolv's debian metadata parser when handling sha384/sha512 checksums | MEDIUM 6.5 | 0.4 % | ||
| CVE-2024-7923 | | Puppet-pulpcore: an authentication bypass vulnerability exists in pulpcore | CRITICAL 9.8 | 0.8 % | ||
| CVE-2024-7143 | | Pulpcore: rbac permissions incorrectly assigned in tasks that create objects | HIGH 8.3 | 0.6 % | ||
| CVE-2023-50782 | | Python-cryptography: bleichenbacher timing oracle attack against rsa decryption - incomplete fix for cve-2020-25659 | HIGH 7.5 | 1.1 % | ||
| CVE-2023-50781 | | M2crypto: bleichenbacher timing attacks in the rsa decryption api - incomplete fix for cve-2020-25657 | HIGH 7.5 | 1.1 % |