Red Hat
9 Red Hat flaws are on CISA's list of vulnerabilities attackers have used, 2 of them added in 2026. CISA says 4 are known to be used by ransomware. The latest was added Aug 26, 2026.
9on CISA's list, all time
2added in 2026
2in the last 90 days
4used by ransomware
0zero-days, all time
Exploited flaws added each year
Most-hit products
| Product | Exploited flaws | Most recent |
|---|---|---|
| Polkit | 2 | May 12, 2023 |
| JBoss | 2 | May 25, 2022 |
| Libuser | 1 | Aug 26, 2026 |
| Automatic Bug Reporting Tool | 1 | Aug 26, 2026 |
| JBoss RichFaces Framework | 1 | Sep 28, 2023 |
| JBoss Seam 2 | 1 | Dec 10, 2021 |
| JBoss Application Server | 1 | Dec 10, 2021 |
Latest Red Hat flaws
- LibuserRed Hat Libuser Race Condition Vulnerability
- Automatic Bug Reporting ToolRed Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability
- JBoss RichFaces FrameworkRed Hat JBoss RichFaces Framework Expression Language Injection Vulnerability
- PolkitRed Hat Polkit Incorrect Authorization Vulnerability
- PolkitRed Hat Polkit Out-of-Bounds Read and Write Vulnerability
- JBossRed Hat JBoss Authentication Bypass Vulnerability
- JBossRed Hat JBoss Information Disclosure Vulnerability
- JBoss Seam 2Red Hat Linux JBoss Seam 2 Remote Code Execution Vulnerability
- JBoss Application ServerRed Hat JBoss Application Server Remote Code Execution Vulnerability
Counts come from CISA's Known Exploited Vulnerabilities catalog, which lists flaws with reliable evidence of real attacks. A higher count often reflects how widely a vendor's products are used and targeted, not only how secure they are.