Red Hat OpenShift Container Platform 4.21 vulnerabilities

Product

Red Hat OpenShift Container Platform 4.21

by Red Hat · last CVE Oct 21, 2026

On CISA KEVExploited in the wild

CVEs

On KEV

10.0

Max CVSS

New 30D

Vulnerabilities89 In the news12 Timeline

Severity mix

Critical 15High 62Medium 12Low 0

Severity

All severities89 Critical15 High62 Medium12 Low0

Exploitation

On CISA KEV2 Exploited in the wild2

Watch

Add Red Hat OpenShift Container Platform 4.21 to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-114406	6.8	0%	Oct 21	Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns Affected: All versions, or not specified
CVE-2026-27145	6.5	1%	Jun 2	Inefficient candidate hostname parsing in crypto/x509 Affected: All versions, or not specified
CVE-2026-42965	6.5	0%	May 29	Openshift/router: openshift/router: cloud metadata ssrf via fqdn-typed endpointslice bypasses destination validation Affected: All versions, or not specified
CVE-2026-1933	6.5	1%	May 27	Samba: missing access check on reparse point operations Affected: All versions, or not specified
CVE-2026-42041	6.5	1%	Apr 24	Axios: Authentication Bypass via Prototype Pollution Gadget in `validateStatus` Merge Strategy Affected: All versions, or not specified
CVE-2026-35469	6.5	1%	Apr 16	SpdyStream: DOS on CRI Affected: All versions, or not specified
CVE-2026-83589	6.1	0%	Oct 1	Oauth-proxy: open redirect via /\ and /\t bypass in post-login redirect Affected: All versions, or not specified
CVE-2026-42338	6.1	0%	May 12	ip-address: XSS in Address6 HTML-emitting methods Affected: All versions, or not specified
CVE-2026-22029	6.1	1%	Jan 10	React Router vulnerable to XSS via Open Redirects Affected: All versions, or not specified
CVE-2026-24049	5.5	0%	Jan 22	wheel Allows Arbitrary File Permission Modification via Path Traversal Affected: All versions, or not specified
CVE-2025-13465	5.3	2%	Jan 21	Prototype Pollution Vulnerability in Lodash _.unset and _.omit functions Affected: All versions, or not specified
CVE-2026-40175	4.8	2%	Apr 10	Axios has Unrestricted Cloud Metadata Exfiltration via Header Injection Chain Affected: All versions, or not specified