View Ridge Security
Back to Cyber Hose

Red Hat OpenShift CVSS 9.3 unauthenticated SSRF flaw CVE-2026-75885

A CVSS 9.3 unauthenticated SSRF in Red Hat OpenShift leads this run, alongside a LightLLM auth bypass and multiple Suricata DoS flaws.

📋 ADVISORIES

  • 📄 Source for Microsoft Edge use-after-free flaw CVE-2026-88097 enables local privilege escalation — msrc.microsoft.com

🔓 CVEs & KEV

  • CVE-2026-75885 — Red Hat OpenShift Container Platform 4 — CVSS 9.3 — Openshift/console: openshift/console: unauthenticated ssrf and resource exhau...

  • CVE-2026-93839 — ModelTC LightLLM — CVSS 9.3 — LightLLM WebSocket Auth Bypass (CVE-2026-93839)

  • CVE-2026-71418 — OISF suricata — CVSS 7.5 — Suricata doh2: crafted HTTP/2 DATA frames can cause quadratic CPU consumption...

  • CVE-2026-63446 — OISF suricata — CVSS 7.5 — Suricata app-layer: passed flows can retain transactions, causing resource ex...

  • CVE-2026-63447 — OISF suricata — CVSS 7.5 — Suricata ftp: crafted FTP traffic can cause quadratic CPU consumptionSuricata...

  • CVE-2026-63452 — OISF suricata — CVSS 7.5 — Suricata http1: repeated brotli compression bombs can cause excessive CPU con...

  • CVE-2026-57223 — OISF suricata — CVSS 7.0 — Suricata windows: unquoted LocalSystem service ImagePath can allow local priv...

Need help assessing your exposure?

Start with the free Posture Self-Check to see where you stand against the current threat landscape.

Free Posture Self-Check