Live monitoring Updated 72-hour alert levelMajor alert Editor: Frédéric LENQUETTE
CYBERIACKCybersecurity & AI intelligence · by Frédéric LENQUETTE

Vendor

Red Hat: actively exploited vulnerabilities

9 vulnerabilities in Red Hat products are listed in CISA’s catalog of actively exploited vulnerabilities, 4 of them used by ransomware. Latest addition on August 26, 2026: CVE-2015-5287 (Automatic Bug Reporting Tool).

Affected products

  • JBoss2
  • Polkit2
  • Automatic Bug Reporting Tool1
  • JBoss Application Server1
  • JBoss RichFaces Framework1
  • JBoss Seam 21
  • Libuser1

CERT-FR alerts and notices

Recent CERT-FR publications naming this vendor (alerts: immediate threat; notices: patches released). In French.

  1. CERTFR-2026-AVI-1287

    Multiples vulnérabilités dans le noyau Linux de Red Hat (09 octobre 2026)

  2. CERTFR-2026-AVI-1254

    Multiples vulnérabilités dans le noyau Linux de Red Hat (02 octobre 2026)

All exploited vulnerabilities

CISA KEV catalog, newest first: each entry corresponds to observed exploitation.

2026 2 vulnerabilities

  1. CVE-2015-5287

    Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability

    NVD entryCISA catalog

  2. CVE-2015-3246

    Red Hat Libuser Race Condition Vulnerability

    NVD entryCISA catalog

2023 2 vulnerabilities

  1. CVE-2018-14667

    Red Hat JBoss RichFaces Framework Expression Language Injection Vulnerability

    NVD entryCISA catalog

  2. CVE-2021-3560

    Red Hat Polkit Incorrect Authorization Vulnerability

    NVD entryCISA catalog

2022 3 vulnerabilities

  1. CVE-2021-4034Used by ransomware

    Red Hat Polkit Out-of-Bounds Read and Write Vulnerability

    NVD entryCISA catalog

  2. CVE-2010-1428Used by ransomware

    Red Hat JBoss Information Disclosure Vulnerability

    NVD entryCISA catalog

  3. CVE-2010-0738Used by ransomware

    Red Hat JBoss Authentication Bypass Vulnerability

    NVD entryCISA catalog

2021 2 vulnerabilities

  1. CVE-2017-12149Used by ransomware

    Red Hat JBoss Application Server Remote Code Execution Vulnerability

    NVD entryCISA catalog

  2. CVE-2010-1871

    Red Hat Linux JBoss Seam 2 Remote Code Execution Vulnerability

    NVD entryCISA catalog

What to do

If your estate includes any of these products, make sure the vendor’s patches are applied, starting with the most recent vulnerabilities and those used by ransomware, then look for signs of compromise: an exploited vulnerability has often been used before it was fixed.

Additions from all vendors are tracked on the Actively exploited vulnerabilities page, updated several times a day. Sources: CISA KEV catalog (US public domain) and CERT-FR.