Cyberfeed6 › Vendors › Red Hat
CISA lists 9 Red Hat vulnerabilities as exploited in real attacks, and 4 of them are known to be used in ransomware campaigns. Most entries concern Polkit, JBoss, Automatic Bug Reporting Tool, Libuser.
Showing the 9 most recently added of 9. Check the vendor notice before you act: it names the fixed versions.
| Vulnerability | Product | Added to list | Severity | Ransomware | Fix |
|---|---|---|---|---|---|
| CVE-2015-5287Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability | Automatic Bug Reporting Tool | 2026-08-26 | High (7.8) | No | Vendor notice |
| CVE-2015-3246Red Hat Libuser Race Condition Vulnerability | Libuser | 2026-08-26 | High (7.4) | No | Vendor notice |
| CVE-2018-14667Red Hat JBoss RichFaces Framework Expression Language Injection Vulnerability | JBoss RichFaces Framework | 2023-09-28 | Critical (9.8) | No | Vendor notice |
| CVE-2021-3560Red Hat Polkit Incorrect Authorization Vulnerability | Polkit | 2023-05-12 | High (7.8) | No | Vendor notice |
| CVE-2021-4034Red Hat Polkit Out-of-Bounds Read and Write Vulnerability | Polkit | 2022-06-27 | High (7.8) | Yes | |
| CVE-2010-1428Red Hat JBoss Information Disclosure Vulnerability | JBoss | 2022-05-25 | Medium (5.9) | Yes | |
| CVE-2010-0738Red Hat JBoss Authentication Bypass Vulnerability | JBoss | 2022-05-25 | Low (3.7) | Yes | |
| CVE-2017-12149Red Hat JBoss Application Server Remote Code Execution Vulnerability | JBoss Application Server | 2021-12-10 | Critical (9.8) | Yes | |
| CVE-2010-1871Red Hat Linux JBoss Seam 2 Remote Code Execution Vulnerability | JBoss Seam 2 | 2021-12-10 | High (8.8) | No |
Source: CISA Known Exploited Vulnerabilities catalog, released 2026-11-04. Severity scores are CVSS where available. "Ransomware" means CISA has marked the flaw as known to be used in ransomware campaigns.