Red Hat, Inc. Cryostat

Name: Red Hat, Inc. Cryostat
Brand: Red Hat, Inc.

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

2critical4high2medium0low

updated 2026-10-27

vulnerabilities (30)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-44487US	high7.5OT critical	100.0% (100th)	KEV	no fix	2023-10-10	≤ 2
CVE-2025-48734US	—	2.02% (81st)	Exploit	no fix	2025-05-28	≤ 4 on RHEL 9
CVE-2026-46595US	—OT elevated	0.56% (46th)	Exploit	no fix	2026-05-22	≤ 4
CVE-2026-45674US	critical10.0OT high	0.29% (22nd)	Exploit	no fix	2026-06-12	≤ 4 on RHEL 9
CVE-2021-44716US	high7.5	4.25% (91st)	—	no fix	2022-01-01	≤ 2 on RHEL 8
CVE-2023-34462US	medium6.5	2.46% (84th)	—	no fix	2023-06-22	≤ 2
CVE-2025-48431US	—	1.04% (64th)	—	no fix	2026-04-28	≤ 4 on RHEL 9
CVE-2026-44249US	—	0.99% (62nd)	—	no fix	2026-06-11	≤ 4 on RHEL 9
CVE-2026-45416US	—	0.92% (60th)	—	no fix	2026-06-12	≤ 4 on RHEL 9
CVE-2024-12397US	—	0.84% (58th)	—	no fix	2024-12-12	2 versions
CVE-2026-48043US	high7.5	0.75% (55th)	—	no fix	2026-06-12	≤ 4 on RHEL 9
CVE-2026-43869US	—	0.63% (50th)	—	no fix	2026-05-05	≤ 4 on RHEL 9
CVE-2026-48059US	high7.5	0.63% (50th)	—	no fix	2026-06-12	≤ 4 on RHEL 9
CVE-2026-44893US	—	0.62% (49th)	—	no fix	2026-06-12	≤ 4 on RHEL 9
CVE-2026-46604US	—	0.61% (49th)	—	no fix	2026-06-26	≤ 4
CVE-2026-39835US	—	0.50% (43rd)	—	no fix	2026-05-22	≤ 4 on RHEL 9
CVE-2026-9697US	—	0.46% (40th)	—	no fix	2026-06-17	2 versions
CVE-2026-50560US	medium5.3	0.40% (34th)	—	no fix	2026-06-12	≤ 4
CVE-2026-47244US	—	0.38% (32nd)	—	no fix	2026-06-12	≤ 4
CVE-2026-42505US	—	0.38% (32nd)	—	no fix	2026-07-08	≤ 4
CVE-2026-47691US	critical10.0OT elevated	0.37% (31st)	—	no fix	2026-06-12	≤ 4 on RHEL 9
CVE-2026-39828US	—	0.37% (31st)	—	no fix	2026-05-22	≤ 4 on RHEL 9
CVE-2026-46599US	—	0.35% (29th)	—	no fix	2026-05-29	≤ 4 on RHEL 9
CVE-2026-25680US	—	0.33% (26th)	—	no fix	2026-05-22	≤ 4
CVE-2026-45673US	—OT elevated	0.32% (25th)	—	no fix	2026-06-12	≤ 4
CVE-2025-49574US	—	0.28% (21st)	—	no fix	2025-06-23	≤ 4
CVE-2026-42506US	—	0.24% (14th)	—	no fix	2026-05-22	≤ 4
CVE-2026-27136US	—	0.22% (13th)	—	no fix	2026-05-22	2 versions
CVE-2026-25681US	—	0.22% (13th)	—	no fix	2026-05-22	2 versions
CVE-2026-45536US	—	0.14% (3rd)	—	no fix	2026-06-12	≤ 4

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-400Uncontrolled Resource Consumption6 CVEs
CWE-295Improper Certificate Validation4 CVEs
CWE-770Allocation of Resources Without Limits or Throttling4 CVEs
CWE-1021Improper Restriction of Rendered UI Layers or Frames2 CVEs
CWE-284Improper Access Control2 CVEs
CWE-345Insufficient Verification of Data Authenticity2 CVEs
CWE-346Origin Validation Error2 CVEs
CWE-401Missing Release of Memory after Effective Lifetime2 CVEs

sources (1)

Which sources assert this record, and when.

RUBDU (FSTEC Data Security Threats Database)30 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan