Topic

Red Hat: news, advisories and analysis

4 articlesUpdated 2 Oct 2026

CyberSecureToday covers Red Hat across 4 articles published between 8 Sep 2026 and 2 Oct 2026. The coverage includes 4 vulnerability advisories. 4 advisories are rated critical or high severity, and 2 involve flaws listed in CISA's Known Exploited Vulnerabilities catalog.

Stories on Red Hat most often intersect with Linux Security, LDAP and RHEL, with Technology, Cloud & SaaS the most affected sector. The most recent story, “389 Directory Server STARTTLS Buffer Injection Flaw Enables On-Path Authentication Bypass (CVE-2026-86345)”, was published 2 Oct 2026. Every article is listed below, newest first, with the affected products, severity and remediation guidance in each piece.

Latest coverage

ThreatsCloud & SaaSHigh
389 Directory Server STARTTLS Buffer Injection Flaw Enables On-Path Authentication Bypass (CVE-2026-86345)
A flaw in 389 Directory Server fails to discard buffered plaintext bytes during StartTLS negotiation, enabling on-path attackers to forge successful LDAP authentications.
Aisha Noor2 Oct 20268 min read
ThreatsCloud & SaaSHigh
Red Hat ABRT Crash Reporting Daemon Flaw CVE-2015-5287 Weaponized for Linux Root Privilege Escalation
CISA adds Red Hat ABRT vulnerability CVE-2015-5287 (CVSS 7.8) to KEV catalog following active exploitation against enterprise Linux host infrastructure.
Priya Raman17 Sep 202612 min read
ThreatsCloud & SaaSHigh
Red Hat Enterprise Linux libuser Race Condition Flaw Exploited for Local Root Escalation
CISA adds Red Hat libuser vulnerability CVE-2015-3246 (CVSS 8.8) to KEV catalog following active in-the-wild exploitation for root privilege escalation.
Tom Verhoeven17 Sep 202612 min read
ThreatsCloud & SaaSCritical
FreeIPA LDAP ACI Vulnerability Chain Grants Anonymous Clients Domain Admin Rights
Red Hat patched CVE-2026-76578 (CVSS 9.8) in FreeIPA and 389 Directory Server, where an LDAP Access Control Instruction flaw allowed unauthenticated clients to create permanent domain admins.
Tom Verhoeven8 Sep 20265 min read

Latest coverage

389 Directory Server STARTTLS Buffer Injection Flaw Enables On-Path Authentication Bypass (CVE-2026-86345)

Red Hat ABRT Crash Reporting Daemon Flaw CVE-2015-5287 Weaponized for Linux Root Privilege Escalation

Red Hat Enterprise Linux libuser Race Condition Flaw Exploited for Local Root Escalation

FreeIPA LDAP ACI Vulnerability Chain Grants Anonymous Clients Domain Admin Rights