Login Request a demo
CM
Product
Cost Management 4
by Red Hat · last CVE Jul 30, 2026
9
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities9In the news1Timeline
Severity mix
Critical 0High 5Medium 4Low 0
Severity
All severities9Critical0High5Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Cost Management 4 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-18382
6.8
1%
Jul 30
Project-koku/koku-metrics-operator: koku-metrics-operator: service-account client credentials sent to user-controlled token_url
Affected: All versions, or not specified
CVE-2026-18378
6.8
0%
Jul 30
Project-koku/koku-metrics-operator: koku-metrics-operator: cluster pull-secret token exfiltration via user-controlled api_url (ssrf / confused deputy)
Affected: All versions, or not specified
CVE-2026-13757
6.2
0%
Jun 29
P11-kit: stack exhaustion via unbounded recursion in rpc attribute parsing
Affected: All versions, or not specified
CVE-2025-5278
4.4
0%
May 27
Coreutils: heap buffer under-read in gnu coreutils sort via key specification
Affected: All versions, or not specified
Showing 4