RHSA-2026:70585: cri-o Red Hat

Published

Published 02-10-2026Last modified 20-10-2026

Vulnerability summary

RHSA-2026:70585 is a high (CVSS 8.2) vulnerability in cri-o Red Hat.

Overall risk

33/100

0100

Medium · default modelHow is this calculated?

CVSS score

8.2/10

010

High · v3.1 (OSV · Red hat), selected by version preference

EPSS scoreNot scoredRisk metrics not yet published.

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Advisory lineage

Upstream 8 · Downstream 0 · Related 6

CVE-2026-15809 CVE-2026-33818 CVE-2026-34986 CVE-2026-39821 CVE-2026-56858 CVE-2026-56859+2 more

Timeline

02-10-2026
PublishedVulnerability first disclosed.
20-10-2026
Last modifiedVulnerability information updated.

Description

Red Hat Security Advisory: OpenShift Container Platform 4.17.58 packages and security update

CVSS metrics

1 score · 1 source · 1 version

v3.18.2

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Redhat17 products

cri-o< 0:1.30.14-13.rhaos4.17.git3a25d98.el8 | < 0:1.30.14-13.rhaos4.17.git3a25d98.el9
cri-o-debuginfo< 0:1.30.14-13.rhaos4.17.git3a25d98.el8 | < 0:1.30.14-13.rhaos4.17.git3a25d98.el9
cri-o-debugsource< 0:1.30.14-13.rhaos4.17.git3a25d98.el8 | < 0:1.30.14-13.rhaos4.17.git3a25d98.el9
cri-tools< 0:1.30.0-10.el8 | < 0:1.30.0-10.el9
cri-tools-debuginfo< 0:1.30.0-10.el8 | < 0:1.30.0-10.el9

Show all 17

1 vendor · 17 products

References

59 links

Show all 59 references

security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_70585.jsonAdvisory
access.redhat.com/security/cve/CVE-2026-15809REPORT
www.cve.org/CVERecord?id=CVE-2026-15809Advisory
nvd.nist.gov/vuln/detail/CVE-2026-15809Advisory
github.com/cri-o/cri-o/pull/6450ARTICLE
github.com/cri-o/cri-o/pull/6524ARTICLE
access.redhat.com/security/cve/CVE-2026-33818REPORT
www.cve.org/CVERecord?id=CVE-2026-33818Advisory
nvd.nist.gov/vuln/detail/CVE-2026-33818Advisory
go.dev/cl/814980ARTICLE
go.dev/issue/80405ARTICLE
groups.google.com/g/golang-announce/c/94pEornpRlIARTICLE
pkg.go.dev/vuln/GO-2026-5972Advisory
access.redhat.com/security/cve/CVE-2026-34986REPORT
www.cve.org/CVERecord?id=CVE-2026-34986Advisory
nvd.nist.gov/vuln/detail/CVE-2026-34986Advisory
github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8ARTICLE
pkg.go.dev/github.com/go-jose/go-jose/v4ARTICLE
access.redhat.com/security/cve/CVE-2026-39821REPORT
www.cve.org/CVERecord?id=CVE-2026-39821Advisory
nvd.nist.gov/vuln/detail/CVE-2026-39821Advisory
go.dev/cl/767220ARTICLE
go.dev/issue/78760ARTICLE
groups.google.com/g/golang-announce/c/iI-mYSI0lu8ARTICLE
pkg.go.dev/vuln/GO-2026-5026Advisory
access.redhat.com/security/cve/CVE-2026-56858REPORT
www.cve.org/CVERecord?id=CVE-2026-56858Advisory
nvd.nist.gov/vuln/detail/CVE-2026-56858Advisory
go.dev/cl/807100ARTICLE
go.dev/issue/80435ARTICLE
pkg.go.dev/vuln/GO-2026-6091Advisory
access.redhat.com/security/cve/CVE-2026-56859REPORT
www.cve.org/CVERecord?id=CVE-2026-56859Advisory
nvd.nist.gov/vuln/detail/CVE-2026-56859Advisory
go.dev/cl/803320ARTICLE
go.dev/issue/80481ARTICLE
pkg.go.dev/vuln/GO-2026-6088Advisory
access.redhat.com/security/cve/CVE-2026-56860REPORT
www.cve.org/CVERecord?id=CVE-2026-56860Advisory
nvd.nist.gov/vuln/detail/CVE-2026-56860Advisory
go.dev/cl/803681ARTICLE
go.dev/issue/80494ARTICLE
pkg.go.dev/vuln/GO-2026-6218Advisory
access.redhat.com/security/cve/CVE-2026-56862REPORT
www.cve.org/CVERecord?id=CVE-2026-56862Advisory
nvd.nist.gov/vuln/detail/CVE-2026-56862Advisory
go.dev/cl/804261ARTICLE
go.dev/issue/80528ARTICLE
pkg.go.dev/vuln/GO-2026-6090Advisory