Red Hat OpenShift Data Foundation

productDE

cpe:/a:redhat:openshift:data_foundation

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

by severity

1critical1high0medium0low

updated 2026-10-27

vulnerabilities (37)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-33186US	—	1.58% (75th)	Exploit	no fix	2026-03-20	—
CVE-2024-3651US	high7.5	1.39% (72nd)	Exploit	no fix	2024-07-07	—
CVE-2026-46595US	—OT elevated	0.56% (46th)	Exploit	no fix	2026-05-22	—
CVE-2026-42508US	—	6.91% (94th)	—	no fix	2026-05-22	—
CVE-2025-61726US	—	2.29% (83rd)	—	no fix	2026-01-28	—
CVE-2026-39821US	—	1.83% (79th)	—	no fix	2026-05-22	—
CVE-2025-68121US	critical10.0	0.92% (60th)	—	no fix	2026-02-05	—
CVE-2025-61728US	—	0.74% (54th)	—	no fix	2026-01-28	—
CVE-2026-13676US	—	0.69% (53rd)	—	no fix	2026-06-29	—
CVE-2026-39832US	—	0.68% (52nd)	—	no fix	2026-05-22	—
CVE-2026-39830US	—	0.68% (52nd)	—	no fix	2026-05-22	—
CVE-2026-35469US	—	0.66% (51st)	—	no fix	2026-04-16	—
CVE-2026-34986US	—	0.65% (51st)	—	no fix	2026-04-06	—
CVE-2026-6321US	—	0.63% (50th)	—	no fix	2026-05-04	—
CVE-2025-61731US	—	0.61% (49th)	—	no fix	2026-01-28	—
CVE-2026-39834US	—	0.60% (48th)	—	no fix	2026-05-22	—
CVE-2026-39835US	—	0.50% (43rd)	—	no fix	2026-05-22	—
CVE-2026-39831US	—OT elevated	0.48% (41st)	—	no fix	2026-05-22	—
CVE-2026-46597US	—	0.47% (41st)	—	no fix	2026-05-22	—
CVE-2026-39833US	—OT elevated	0.47% (40th)	—	no fix	2026-05-22	—
CVE-2026-39829US	—	0.47% (40th)	—	no fix	2026-05-22	—
CVE-2025-61729US	—	0.46% (39th)	—	no fix	2025-12-02	—
CVE-2026-46598US	—	0.41% (35th)	—	no fix	2026-05-22	—
CVE-2026-44740US	—	0.39% (33rd)	—	no fix	2026-06-01	—
CVE-2026-42500US	—	0.38% (32nd)	—	no fix	2026-05-29	—
CVE-2025-68119US	—	0.38% (31st)	—	no fix	2026-01-28	—
CVE-2026-39828US	—	0.37% (31st)	—	no fix	2026-05-22	—
CVE-2026-33809US	—	0.33% (27th)	—	no fix	2026-03-25	—
CVE-2026-25680US	—	0.33% (26th)	—	no fix	2026-05-22	—
CVE-2025-61730US	—	0.32% (25th)	—	no fix	2026-01-28	—
CVE-2025-61727US	—	0.28% (21st)	—	no fix	2025-12-03	—
CVE-2026-39827US	—	0.28% (20th)	—	no fix	2026-05-22	—
CVE-2026-42506US	—	0.24% (14th)	—	no fix	2026-05-22	—
CVE-2026-42502US	—	0.22% (13th)	—	no fix	2026-05-22	—
CVE-2026-27136US	—	0.22% (13th)	—	no fix	2026-05-22	—
CVE-2026-25681US	—	0.22% (13th)	—	no fix	2026-05-22	—
CVE-2026-39882US	—	0.19% (9th)	—	no fix	2026-04-08	—

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-295Improper Certificate Validation6 CVEs
CWE-400Uncontrolled Resource Consumption4 CVEs
CWE-770Allocation of Resources Without Limits or Throttling4 CVEs
CWE-1021Improper Restriction of Rendered UI Layers or Frames3 CVEs
CWE-281Improper Preservation of Permissions2 CVEs
CWE-551Incorrect Behavior Order: Authorization Before Parsing and Canonicalization2 CVEs
CWE-664Improper Control of a Resource Through its Lifetime2 CVEs
CWE-862Missing Authorization2 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)37 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan