RH
Product
Red Hat OpenShift Container Platform 4.22
72
CVEs
0
On KEV
9.8
Max CVSS
7
New 30D
Severity mix
Critical 10High 53Medium 9Low 0
Watch
Add Red Hat OpenShift Container Platform 4.22 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-114406 | 6.8 | Oct 21 | Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns Affected: All versions, or not specified |
| CVE-2026-107176 | 6.8 | Oct 7 | Cluster-samples-operator: role reads all secrets in openshift-config, not just pull-secret Affected: All versions, or not specified |
| CVE-2026-42965 | 6.5 | May 29 | Openshift/router: openshift/router: cloud metadata ssrf via fqdn-typed endpointslice bypasses destination validation Affected: All versions, or not specified |
| CVE-2026-1933 | 6.5 | May 27 | Samba: missing access check on reparse point operations Affected: All versions, or not specified |
| CVE-2026-35469 | 6.5 | Apr 16 | SpdyStream: DOS on CRI Affected: All versions, or not specified |
| CVE-2026-39828 | 6.3 | May 22 | Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh Affected: All versions, or not specified |
| CVE-2026-83589 | 6.1 | Oct 1 | Oauth-proxy: open redirect via /\ and /\t bypass in post-login redirect Affected: All versions, or not specified |
| CVE-2026-42338 | 6.1 | May 12 | ip-address: XSS in Address6 HTML-emitting methods Affected: All versions, or not specified |
| CVE-2026-39835 | 5.3 | May 22 | Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh Affected: All versions, or not specified |
Showing 9