Red Hat Enterprise Linux Update Infrastructure 5.1

productDE

cpe:/o:redhat:enterprise_linux:update_infrastructure_5.1

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

by severity

2critical16high4medium2low

updated 2026-10-28

vulnerabilities (44)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-42926US	—	0.35% (28th)	Exploit	no fix	2026-05-13	—
CVE-2026-35414US	high8.1	0.21% (12th)	Exploit	no fix	2026-04-02	—
CVE-2025-13836US	high7.5	1.63% (76th)	—	no fix	2025-12-01	—
CVE-2025-59375US	—	1.38% (72nd)	—	no fix	2025-09-15	—
CVE-2026-2100US	high7.5	1.31% (71st)	—	no fix	2026-03-26	—
CVE-2026-31790US	—	1.03% (64th)	—	no fix	2026-04-07	—
CVE-2026-28388US	high7.5	0.89% (59th)	—	no fix	2026-04-07	—
CVE-2025-14087US	critical9.8	0.83% (57th)	—	no fix	2025-12-10	—
CVE-2026-28390US	high7.5	0.80% (57th)	—	no fix	2026-04-07	—
CVE-2026-28389US	high7.5	0.80% (57th)	—	no fix	2026-04-07	—
CVE-2026-4224US	high7.5	0.70% (53rd)	—	no fix	2026-03-16	—
CVE-2026-28387US	high8.1	0.67% (52nd)	—	no fix	2026-04-07	—
CVE-2026-40355US	high7.5	0.65% (51st)	—	no fix	2026-04-28	—
CVE-2025-11468US	—	0.62% (49th)	—	no fix	2026-01-20	—
CVE-2026-40356US	high7.5	0.60% (49th)	—	no fix	2026-04-28	—
CVE-2026-6100US	—	0.58% (48th)	—	no fix	2026-04-13	—
CVE-2025-14512US	—	0.58% (48th)	—	no fix	2025-12-11	—
CVE-2026-1299US	—	0.57% (47th)	—	no fix	2026-01-23	—
CVE-2026-35385US	high8.1	0.56% (47th)	—	no fix	2026-04-02	—
CVE-2026-1502US	—	0.56% (47th)	—	no fix	2026-04-10	—
CVE-2026-0865US	—	0.55% (46th)	—	no fix	2026-01-20	—
CVE-2025-15282US	—	0.54% (45th)	—	no fix	2026-01-20	—
CVE-2026-28386US	high7.5	0.50% (42nd)	—	no fix	2026-04-07	—
CVE-2026-3644US	high7.5	0.50% (42nd)	—	no fix	2026-03-16	—
CVE-2026-0672US	—	0.48% (41st)	—	no fix	2026-01-20	—
CVE-2026-34982US	—	0.44% (38th)	—	no fix	2026-04-06	—
CVE-2025-15366US	—	0.43% (37th)	—	no fix	2026-01-20	—
CVE-2025-15367US	—	0.38% (32nd)	—	no fix	2026-01-20	—
CVE-2026-35386US	high8.1	0.32% (25th)	—	no fix	2026-04-02	—
CVE-2026-4519US	low3.3	0.31% (24th)	—	no fix	2026-03-20	—
CVE-2026-4786US	—	0.29% (22nd)	—	no fix	2026-04-13	—
CVE-2026-31789US	critical9.8	0.24% (16th)	—	no fix	2026-04-07	—
CVE-2026-35387US	medium6.5	0.24% (15th)	—	no fix	2026-04-02	—
CVE-2025-13837US	medium5.5	0.22% (13th)	—	no fix	2025-12-01	—
CVE-2026-2297US	—	0.21% (11th)	—	no fix	2026-03-04	—
CVE-2026-4878US	high7.0	0.20% (10th)	—	no fix	2026-04-09	—
CVE-2026-3446US	—OT elevated	0.19% (8th)	—	no fix	2026-04-10	—
CVE-2025-69277US	—	0.18% (8th)	—	no fix	2025-12-31	—
CVE-2026-35535US	high7.8	0.17% (7th)	—	no fix	2026-04-03	—
CVE-2025-6075US	medium5.5	0.15% (4th)	—	no fix	2025-10-31	—
CVE-2026-40225US	—	0.14% (4th)	—	no fix	2026-04-10	—
CVE-2026-35388US	low2.5	0.13% (3rd)	—	no fix	2026-04-02	—
CVE-2026-29111US	—	0.13% (2nd)	—	no fix	2026-03-23	—
CVE-2026-40223US	medium5.5	0.09% (0th)	—	no fix	2026-04-10	—

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-93Improper Neutralization of CRLF Sequences ('CRLF Injection')5 CVEs
CWE-476NULL Pointer Dereference4 CVEs
CWE-400Uncontrolled Resource Consumption3 CVEs
CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')3 CVEs
CWE-190Integer Overflow or Wraparound2 CVEs
CWE-20Improper Input Validation2 CVEs
CWE-269Improper Privilege Management2 CVEs
CWE-416Use After Free2 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)44 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan