← All credits

This issue was discovered by Found by AISLE in partnership with Red Hat.

86 vulnerability records and advisories credit this contributor.

Ipa: freeipa: null pointer dereference in `ipa-enrollment` extended operation (`join_oid`) via missing request value

Ipa: freeipa: authenticated dos in `otptoken-add` via unbounded otp key decoding/re-encoding

Kbd: local privilege escalation in openvt via incorrect process owner verification allowing passwordless root login

Rpm: command injection in rpmuncompress dountar() via unescaped archive top-level directory name in popen() shell command

Gnome-remote-desktop: gnome-remote-desktop system-mode rdp server missing connection throttling allows unauthenticated denial of service

CVE-2026-114038

Device-mapper-multipath: device-mapper-multipath: information disclosure via malformed format string

CVE-2026-110133

Ghostscript: heap buffer overflow in ghostscript truetype outliner due to npointstotal integer underflow during retry rollback

CVE-2026-107466

Flatpak-builder: local file exfiltration via `file

CVE-2026-104048

Sssd: sssd: authorization bypass via cross-domain username collision in hbac evaluation

CVE-2026-104047

Sssd: sssd: information disclosure via query injection in entra id lookups