RHSA-2026:70614: cri-o Red Hat

Published

Published 02-10-2026Last modified 20-10-2026

Vulnerability summary

RHSA-2026:70614 is a high (CVSS 8.2) vulnerability in cri-o Red Hat.

Priority

Routine

Not severe (CVSS 8.2, network access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?

CVSS score

8.2/10

010

High · v3.1 (OSV · Red hat), selected by version preference

EPSS scoreNot scoredRisk metrics not yet published.

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Advisory lineage

Upstream 7 · Downstream 0 · Related 7

CVE-2026-33818 CVE-2026-39821 CVE-2026-42504 CVE-2026-56858 CVE-2026-56859 CVE-2026-56860+1 more

Timeline

02-10-2026
PublishedVulnerability first disclosed.
20-10-2026
Last modifiedVulnerability information updated.

Description

Red Hat Security Advisory: OpenShift Container Platform 4.18.56 packages and security update

CVSS metrics

1 score · 1 source · 1 version

v3.18.2

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Version check

Known conditions: network-reachable, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.

Redhat17 products

cri-o< 0:1.31.13-16.rhaos4.18.gitfccfa27.el8 | < 0:1.31.13-16.rhaos4.18.gitfccfa27.el9
cri-o-debuginfo< 0:1.31.13-16.rhaos4.18.gitfccfa27.el8 | < 0:1.31.13-16.rhaos4.18.gitfccfa27.el9
cri-o-debugsource< 0:1.31.13-16.rhaos4.18.gitfccfa27.el8 | < 0:1.31.13-16.rhaos4.18.gitfccfa27.el9
cri-tools< 0:1.31.1-8.el8 | < 0:1.31.1-8.el9
cri-tools-debuginfo< 0:1.31.1-8.el8 | < 0:1.31.1-8.el9

Show all 17

1 vendor · 17 products

References

55 links

Show all 55 references

access.redhat.com/security/cve/CVE-2026-33818REPORT
www.cve.org/CVERecord?id=CVE-2026-33818Advisory
nvd.nist.gov/vuln/detail/CVE-2026-33818Advisory
go.dev/cl/814980ARTICLE
go.dev/issue/80405ARTICLE
groups.google.com/g/golang-announce/c/94pEornpRlIARTICLE
pkg.go.dev/vuln/GO-2026-5972Advisory
access.redhat.com/security/cve/CVE-2026-39821REPORT
www.cve.org/CVERecord?id=CVE-2026-39821Advisory
nvd.nist.gov/vuln/detail/CVE-2026-39821Advisory
go.dev/cl/767220ARTICLE
go.dev/issue/78760ARTICLE
groups.google.com/g/golang-announce/c/iI-mYSI0lu8ARTICLE
pkg.go.dev/vuln/GO-2026-5026Advisory
access.redhat.com/security/cve/CVE-2026-42504REPORT
www.cve.org/CVERecord?id=CVE-2026-42504Advisory
nvd.nist.gov/vuln/detail/CVE-2026-42504Advisory
go.dev/cl/774481ARTICLE
go.dev/issue/79217ARTICLE
groups.google.com/g/golang-announce/c/tKs3rmcBcKwARTICLE
pkg.go.dev/vuln/GO-2026-5038Advisory
access.redhat.com/security/cve/CVE-2026-56858REPORT
www.cve.org/CVERecord?id=CVE-2026-56858Advisory
nvd.nist.gov/vuln/detail/CVE-2026-56858Advisory
go.dev/cl/807100ARTICLE
go.dev/issue/80435ARTICLE
pkg.go.dev/vuln/GO-2026-6091Advisory
access.redhat.com/security/cve/CVE-2026-56859REPORT
www.cve.org/CVERecord?id=CVE-2026-56859Advisory
nvd.nist.gov/vuln/detail/CVE-2026-56859Advisory
go.dev/cl/803320ARTICLE
go.dev/issue/80481ARTICLE
pkg.go.dev/vuln/GO-2026-6088Advisory
access.redhat.com/security/cve/CVE-2026-56860REPORT
www.cve.org/CVERecord?id=CVE-2026-56860Advisory
nvd.nist.gov/vuln/detail/CVE-2026-56860Advisory
go.dev/cl/803681ARTICLE
go.dev/issue/80494ARTICLE
pkg.go.dev/vuln/GO-2026-6218Advisory
access.redhat.com/security/cve/CVE-2026-56862REPORT
www.cve.org/CVERecord?id=CVE-2026-56862Advisory
nvd.nist.gov/vuln/detail/CVE-2026-56862Advisory
go.dev/cl/804261ARTICLE
go.dev/issue/80528ARTICLE
pkg.go.dev/vuln/GO-2026-6090Advisory