Skip to content
Exploit Radar Choose my productsProducts My radar

Products › Brands

Brand

Red Hat: actively exploited vulnerabilities

9 vulnerabilities in Red Hat products (JBoss Application Server / EAP, Polkit, ABRT (Automatic Bug Reporting Tool)…) are in CISA’s catalog of exploited vulnerabilities, 2 of them added in the last 90 days. Last added: August 26, 2026.

Red Hat security advisories

The brand’s general security advisories page, not the advisory for a specific vulnerability (address checked September 28, 2026).

By category

Add just one Red Hat category to your radar, or open its page.

A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.

Affected products

Follow a single Red Hat product (JBoss Application Server / EAP, Polkit…) rather than the whole brand.

  • JBoss Application Server / EAP3 vulnerabilities, Web servers
  • Polkit2 vulnerabilities, Operating systems
  • ABRT (Automatic Bug Reporting Tool)1 vulnerability, Operating systems
  • JBoss RichFaces1 vulnerability, Frameworks
  • JBoss Seam1 vulnerability, Frameworks
  • libuser1 vulnerability, Operating systems

Name used by CISA: Red Hat. Product families: indicative classification by this site.

Patch first

In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this Red Hat list.

  1. Rank 1

    Red Hat ABRT (Automatic Bug Reporting Tool)CVE-2015-5287

    Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability

    CVE from 2015, added in 2026

    CVSS severity 7.8high

    Added Aug 26, 2026

  2. Rank 2

    Red Hat libuserCVE-2015-3246

    Red Hat Libuser Race Condition Vulnerability

    CVE from 2015, added in 2026

    CVSS severity 7.4high

    Added Aug 26, 2026

  3. Rank 3

    Red Hat JBoss RichFacesCVE-2018-14667

    Red Hat JBoss RichFaces Framework Expression Language Injection Vulnerability

    CVE from 2018, added in 2023

    CVSS severity 9.8critical

    Added Sep 28, 2023

  4. Rank 4

    Red Hat JBoss Application Server / EAPCVE-2017-12149

    Red Hat JBoss Application Server Remote Code Execution Vulnerability

    RansomwareCVE from 2017, added in 2021

    CVSS severity 9.8critical

    Added Dec 10, 2021

  5. Rank 5

    Red Hat JBoss SeamCVE-2010-1871

    Red Hat Linux JBoss Seam 2 Remote Code Execution Vulnerability

    CVE from 2010, added in 2021

    CVSS severity 8.8high

    Added Dec 10, 2021

  6. Rank 6

    Red Hat PolkitCVE-2021-3560

    Red Hat Polkit Incorrect Authorization Vulnerability

    CVE from 2021, added in 2023

    CVSS severity 7.8high

    Added May 12, 2023

  7. Rank 7

    Red Hat PolkitCVE-2021-4034

    Red Hat Polkit Out-of-Bounds Read and Write Vulnerability

    Ransomware

    CVSS severity 7.8high

    Added Jun 27, 2022

  8. Rank 8

    Red Hat JBoss Application Server / EAPCVE-2010-1428

    Red Hat JBoss Information Disclosure Vulnerability

    RansomwareCVE from 2010, added in 2022

    CVSS severity 7.5high

    Added May 25, 2022

  9. Rank 9

    Red Hat JBoss Application Server / EAPCVE-2010-0738

    Red Hat JBoss Authentication Bypass Vulnerability

    RansomwareCVE from 2010, added in 2022

    CVSS severity 5.3medium

    Added May 25, 2022

Follow and verify

Get new Red Hat vulnerabilities: RSS feed (add it to Outlook, Teams, Slack or your feed reader).

Indicative classification, based on the vendor and product names given by CISA. How products are classified.