Red Hat OpenShift Service Mesh 2.6

productDE

cpe:/a:redhat:openshift:service_mesh_2.6

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

by severity

4critical7high4medium0low

updated 2026-10-28

vulnerabilities (31)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-33186US	—	1.58% (75th)	Exploit	no fix	2026-03-20	—
CVE-2026-9277US	—	0.79% (56th)	Exploit	no fix	2026-05-22	—
CVE-2025-61726US	—	2.29% (83rd)	—	no fix	2026-01-28	—
CVE-2025-68121US	critical10.0	0.92% (60th)	—	no fix	2026-02-05	—
CVE-2026-42033US	—	0.87% (59th)	—	no fix	2026-04-24	—
CVE-2026-25679US	—	0.77% (56th)	—	no fix	2026-03-06	—
CVE-2026-42039US	high7.5	0.77% (55th)	—	no fix	2026-04-24	—
CVE-2025-61728US	—	0.74% (54th)	—	no fix	2026-01-28	—
CVE-2026-42043US	critical10.0	0.71% (53rd)	—	no fix	2026-04-24	—
CVE-2026-27140US	high8.8OT elevated	0.66% (51st)	—	no fix	2026-04-08	—
CVE-2026-42041US	medium6.5	0.66% (51st)	—	no fix	2026-04-24	—
CVE-2026-27137US	—	0.63% (50th)	—	no fix	2026-03-06	—
CVE-2026-32283US	high7.5	0.62% (50th)	—	no fix	2026-04-08	—
CVE-2026-32280US	—	0.61% (49th)	—	no fix	2026-04-08	—
CVE-2025-61731US	—	0.61% (49th)	—	no fix	2026-01-28	—
CVE-2026-42044US	critical9.1	0.61% (49th)	—	no fix	2026-04-24	—
CVE-2025-61732US	—	0.54% (45th)	—	no fix	2026-02-05	—
CVE-2026-27143US	critical9.8	0.54% (45th)	—	no fix	2026-04-08	—
CVE-2026-40895US	high7.5	0.49% (42nd)	—	no fix	2026-04-21	—
CVE-2026-42035US	—	0.40% (34th)	—	no fix	2026-04-24	—
CVE-2025-68119US	—	0.38% (31st)	—	no fix	2026-01-28	—
CVE-2026-27138US	—	0.36% (30th)	—	no fix	2026-03-06	—
CVE-2026-32281US	high7.5	0.36% (29th)	—	no fix	2026-04-08	—
CVE-2026-27142US	—	0.34% (27th)	—	no fix	2026-03-06	—
CVE-2026-33810US	high8.2	0.34% (27th)	—	no fix	2026-04-08	—
CVE-2025-61730US	—	0.32% (25th)	—	no fix	2026-01-28	—
CVE-2026-32282US	medium6.4	0.29% (22nd)	—	no fix	2026-04-08	—
CVE-2026-32289US	medium6.1	0.29% (21st)	—	no fix	2026-04-08	—
CVE-2026-32288US	medium5.5	0.29% (21st)	—	no fix	2026-04-08	—
CVE-2026-27144US	high7.1	0.26% (18th)	—	no fix	2026-04-08	—
CVE-2026-27139US	—	0.21% (11th)	—	no fix	2026-03-06	—

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-770Allocation of Resources Without Limits or Throttling6 CVEs
CWE-295Improper Certificate Validation5 CVEs
CWE-1321Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')4 CVEs
CWE-915Improperly Controlled Modification of Dynamically-Determined Object Attributes3 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2 CVEs
CWE-113Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting')1 CVEs
CWE-1286Improper Validation of Syntactic Correctness of Input1 CVEs
CWE-1289Improper Validation of Unsafe Equivalence in Input1 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)31 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan