https://patchfirst.co/vendor/red-hat/New and newly exploited Red Hat CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 13:00:36 GMThttps://patchfirst.co/cve/CVE-2026-105312/CVE-2026-105312Tue, 20 Oct 2026 00:00:00 GMTRed Hat · StreamsHub Console for Apache Kafka®. Not in CISA KEV. EPSS 0.3% (higher than 27% of CVEs). CVSS 9.9 CRITICAL. Priority 14.3 of 100.https://patchfirst.co/cve/CVE-2026-87744/CVE-2026-87744Mon, 12 Oct 2026 00:00:00 GMTRed Hat · Red Hat build of Quarkus 3.27.6.redhat. Not in CISA KEV. EPSS 0.4% (higher than 32.8% of CVEs). CVSS 9.1 CRITICAL. Priority 15.1 of 100.https://patchfirst.co/cve/CVE-2026-107935/CVE-2026-107935Fri, 09 Oct 2026 00:00:00 GMTRed Hat · Red Hat Build of Podman Desktop. Not in CISA KEV. EPSS 0.2% (higher than 15% of CVEs). CVSS 9.3 CRITICAL. Priority 12.0 of 100.https://patchfirst.co/cve/CVE-2026-96659/CVE-2026-96659Thu, 01 Oct 2026 00:00:00 GMTRed Hat · Red Hat Satellite 6.16 for RHEL 8. Not in CISA KEV. EPSS 0.3% (higher than 28.3% of CVEs). CVSS 9.1 CRITICAL. Priority 13.6 of 100.https://patchfirst.co/cve/CVE-2015-3246/CVE-2015-3246#kevWed, 26 Aug 2026 00:00:00 GMTRed Hat · Libuser. In CISA KEV since 2026-08-26. ENISA EUVD lists it as exploited. EPSS 8.5% (higher than 95% of CVEs). CVSS 7.4 HIGH. Public exploit code exists. Priority 77.2 of 100.kevpublic-exploithttps://patchfirst.co/cve/CVE-2015-5287/CVE-2015-5287#kevWed, 26 Aug 2026 00:00:00 GMTRed Hat · Automatic Bug Reporting Tool. In CISA KEV since 2026-08-26. ENISA EUVD lists it as exploited. EPSS 5.0% (higher than 92.2% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1078 Valid Accounts; T1068 Exploitation for Privilege Escalation. Priority 76.9 of 100.kevpublic-exploitT1078T1068https://patchfirst.co/cve/CVE-2026-18963/CVE-2026-18963Tue, 18 Aug 2026 00:00:00 GMTRed Hat · Red Hat build of Keycloak 26.4. Not in CISA KEV. EPSS 4.7% (higher than 91.8% of CVEs). CVSS 9.1 CRITICAL. Public exploit code exists. Priority 75.4 of 100.public-exploithttps://patchfirst.co/cve/CVE-2026-4480/CVE-2026-4480Tue, 26 May 2026 00:00:00 GMTRed Hat · Red Hat Enterprise Linux 10. Not in CISA KEV. EPSS 13.9% (higher than 96.5% of CVEs). CVSS 9.0 CRITICAL. Public exploit code exists. Priority 72.8 of 100.public-exploithttps://patchfirst.co/cve/CVE-2026-4631/CVE-2026-4631Tue, 07 Apr 2026 00:00:00 GMTRed Hat · Red Hat Enterprise Linux 10. Not in CISA KEV. EPSS 15.5% (higher than 96.8% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. Priority 74.0 of 100.public-exploithttps://patchfirst.co/cve/CVE-2026-23536/CVE-2026-23536Fri, 20 Mar 2026 00:00:00 GMTRed Hat · Red Hat OpenShift AI (RHOAI). Not in CISA KEV. EPSS 2.4% (higher than 84.1% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. Priority 73.8 of 100.public-exploithttps://patchfirst.co/cve/CVE-2025-12548/CVE-2025-12548Tue, 13 Jan 2026 00:00:00 GMTRed Hat · Red Hat OpenShift Dev Spaces (RHOSDS) 3.22. Not in CISA KEV. EPSS 1.3% (higher than 70.4% of CVEs). CVSS 9.0 CRITICAL. Public exploit code exists. Priority 65.4 of 100.public-exploithttps://patchfirst.co/cve/CVE-2025-6019/CVE-2025-6019Thu, 19 Jun 2025 00:00:00 GMTRed Hat · Red Hat Enterprise Linux 10. Not in CISA KEV. EPSS 0.5% (higher than 41.4% of CVEs). CVSS 7.0 HIGH. Public exploit code exists. Priority 53.9 of 100.public-exploithttps://patchfirst.co/cve/CVE-2024-12084/CVE-2024-12084Wed, 15 Jan 2025 00:00:00 GMTRed Hat · Red Hat Enterprise Linux 10. Not in CISA KEV. EPSS 72.5% (higher than 99.44% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. Priority 31.7 of 100.public-exploithttps://patchfirst.co/cve/CVE-2024-8883/CVE-2024-8883Thu, 19 Sep 2024 00:00:00 GMTRed Hat · Red Hat Build of Keycloak. Not in CISA KEV. EPSS 2.1% (higher than 81.8% of CVEs). CVSS 6.1 MEDIUM. Public exploit code exists. Priority 66.7 of 100.public-exploithttps://patchfirst.co/cve/CVE-2024-6409/CVE-2024-6409Mon, 08 Jul 2024 00:00:00 GMTRed Hat · Red Hat Enterprise Linux 9. Not in CISA KEV. EPSS 27.9% (higher than 98.1% of CVEs). CVSS 7.0 HIGH. Priority 61.3 of 100.https://patchfirst.co/cve/CVE-2024-6387/CVE-2024-6387Mon, 01 Jul 2024 00:00:00 GMTRed Hat · Red Hat Enterprise Linux 9. Not in CISA KEV. EPSS 99.5% (higher than 99.95% of CVEs). CVSS 8.1 HIGH. Public exploit code exists. Priority 68.7 of 100.public-exploithttps://patchfirst.co/cve/CVE-2024-3094/CVE-2024-3094Fri, 29 Mar 2024 00:00:00 GMTRed Hat · Red Hat Enterprise Linux 10. Not in CISA KEV. EPSS 90.9% (higher than 99.81% of CVEs). CVSS 10.0 CRITICAL. Public exploit code exists. Priority 35.0 of 100.public-exploithttps://patchfirst.co/cve/CVE-2024-0582/CVE-2024-0582Tue, 16 Jan 2024 00:00:00 GMTRed Hat · Red Hat Enterprise Linux 6. Not in CISA KEV. EPSS 12.8% (higher than 96.3% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. Priority 65.4 of 100.public-exploithttps://patchfirst.co/cve/CVE-2023-4320/CVE-2023-4320Mon, 18 Dec 2023 00:00:00 GMTRed Hat · Red Hat Satellite 6.15 for RHEL 8. Not in CISA KEV. EPSS 0.7% (higher than 51.3% of CVEs). CVSS 7.6 HIGH. Priority 60.6 of 100.https://patchfirst.co/cve/CVE-2023-46847/CVE-2023-46847Fri, 03 Nov 2023 00:00:00 GMTRed Hat · Red Hat Enterprise Linux 6 Extended Lifecycle Support. Not in CISA KEV. EPSS 78.5% (higher than 99.58% of CVEs). CVSS 8.6 HIGH. Priority 27.3 of 100.https://patchfirst.co/cve/CVE-2018-14667/CVE-2018-14667#kevThu, 28 Sep 2023 00:00:00 GMTRed Hat · JBoss RichFaces Framework. In CISA KEV since 2023-09-28. ENISA EUVD lists it as exploited. EPSS 74.2% (higher than 99.49% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 69.8 of 100.kevpublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2023-34966/CVE-2023-34966Thu, 20 Jul 2023 00:00:00 GMTRed Hat · Red Hat Enterprise Linux 8. Not in CISA KEV. EPSS 62.4% (higher than 99.18% of CVEs). CVSS 7.5 HIGH. Priority 25.1 of 100.https://patchfirst.co/cve/CVE-2023-34967/CVE-2023-34967Thu, 20 Jul 2023 00:00:00 GMTRed Hat · Red Hat Enterprise Linux 8. Not in CISA KEV. EPSS 61.2% (higher than 99.16% of CVEs). CVSS 5.3 MEDIUM. Priority 23.5 of 100.https://patchfirst.co/cve/CVE-2023-3269/CVE-2023-3269Tue, 11 Jul 2023 00:00:00 GMTRed Hat · Red Hat Enterprise Linux 6. Not in CISA KEV. EPSS 1.3% (higher than 70.5% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. Priority 59.6 of 100.public-exploithttps://patchfirst.co/cve/CVE-2023-1183/CVE-2023-1183Mon, 10 Jul 2023 00:00:00 GMTRed Hat · Red Hat Enterprise Linux 6. Not in CISA KEV. EPSS 64.6% (higher than 99.24% of CVEs). CVSS 5.0 MEDIUM. Priority 23.3 of 100.https://patchfirst.co/cve/CVE-2021-3560/CVE-2021-3560#kevFri, 12 May 2023 00:00:00 GMTRed Hat · Polkit. In CISA KEV since 2023-05-12. ENISA EUVD lists it as exploited. EPSS 23.7% (higher than 97.8% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation; T1078 Valid Accounts. Priority 68.0 of 100.kevpublic-exploitT1068T1078https://patchfirst.co/cve/CVE-2021-4034/CVE-2021-4034#kevMon, 27 Jun 2022 00:00:00 GMTRed Hat · Polkit. In CISA KEV since 2022-06-27, known ransomware use. ENISA EUVD lists it as exploited. EPSS 94.9% (higher than 99.86% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation. Named in 3 threat reports. Priority 86.2 of 100.kevransomwarepublic-exploitT1068https://patchfirst.co/cve/CVE-2010-1428/CVE-2010-1428#kevWed, 25 May 2022 00:00:00 GMTRed Hat · JBoss. In CISA KEV since 2022-05-25, known ransomware use. ENISA EUVD lists it as exploited. EPSS 52.7% (higher than 99% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1005 Data from Local System. Priority 78.0 of 100.kevransomwarepublic-exploitT1190T1005https://patchfirst.co/cve/CVE-2010-0738/CVE-2010-0738#kevWed, 25 May 2022 00:00:00 GMTRed Hat · JBoss. In CISA KEV since 2022-05-25, known ransomware use. ENISA EUVD lists it as exploited. EPSS 73.8% (higher than 99.48% of CVEs). CVSS 5.3 MEDIUM. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1211 Exploitation for Stealth. Priority 76.6 of 100.kevransomwarepublic-exploitT1190T1211https://patchfirst.co/cve/CVE-2017-12149/CVE-2017-12149#kevFri, 10 Dec 2021 00:00:00 GMTRed Hat · JBoss Application Server. In CISA KEV since 2021-12-10, known ransomware use. ENISA EUVD lists it as exploited. EPSS 90.7% (higher than 99.8% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 79.8 of 100.kevransomwarepublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2010-1871/CVE-2010-1871#kevFri, 10 Dec 2021 00:00:00 GMTRed Hat · JBoss Seam 2. In CISA KEV since 2021-12-10. ENISA EUVD lists it as exploited. EPSS 83.4% (higher than 99.68% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1059 Command and Scripting Interpreter. Named in 1 threat report. Priority 73.0 of 100.kevpublic-exploitT1059https://patchfirst.co/cve/CVE-2020-10684/CVE-2020-10684Tue, 24 Mar 2020 00:00:00 GMTRed Hat · Ansible. Not in CISA KEV. EPSS 0.3% (higher than 26.7% of CVEs). CVSS 7.9 HIGH. Priority 46.6 of 100.https://patchfirst.co/cve/CVE-2018-1111/CVE-2018-1111Thu, 17 May 2018 00:00:00 GMTRed Hat · dhcp. Not in CISA KEV. EPSS 97.9% (higher than 99.91% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. Priority 30.2 of 100.public-exploithttps://patchfirst.co/cve/CVE-2017-7504/CVE-2017-7504Fri, 19 May 2017 00:00:00 GMTRed Hat, Inc. · JBoss. Not in CISA KEV. EPSS 38.9% (higher than 98.6% of CVEs). Public exploit code exists. Priority 62.0 of 100.public-exploit