Red Hat

USA Commercial www.redhat.com ↗ ⚠ 5 CISA KEV
B
MODERATE
1,099
Total CVEs
604
Crit / High
434
Medium
15%
Unpatched
66%
Patched
6.8
Avg CVSS
5
CISA KEV
// Data sourced from NVD · CISA KEV · RHSA · GHSA · Debian · OSV · EPSS · Exploit-DB How we collect data →
// INTEL UPGRADE
Full Company Dossier — Coming Soon
Executive profiles, financial exposure, M&A risk, breach history & supply-chain threat mapping — all in one place.
OSINT FINANCIALS EXEC PROFILES BREACH DB
▸ CVE Trend by Year
▸ Patch Coverage
Patched
66%
Unpatched
15%
Under Review
18%
Pending
0%
No Status
1%
✓ 728 patched ✗ 169 unpatched ~ 195 under review ⏳ 3 pending score
▸ Intelligence by Audience
PoC Available
4 / 20 shown
CISA KEV (Exploited)
5
Shodan Dorks
ssl:"red hat" port:443
org:"Red Hat" http.status:200
Top EPSS (Exploitation Probability)
CVE-2026-12405 1.54% exploitation probability
CVE-2026-84474 0.80% exploitation probability
CVE-2026-75885 0.63% exploitation probability
CVE-2026-84502 0.62% exploitation probability
CVE-2026-84486 0.52% exploitation probability
Quick Facts for Reporting
Total CVEs tracked
1,099
Critical severity
58
Actively exploited (CISA)
5
Unpatched ratio
15%
Avg CVSS score
6.8
Security grade
B (MODERATE)
NVD Data Attribution
Source: NIST National Vulnerability Database (NVD) + GitHub Advisory Database.
Data aggregated by Valters IT Hub · valtersit.com
Last updated: 2026-10-12
Security Risk Score (for investors)
HIGH
Vuln Volume
GOOD
Patch Responsiveness
LOW
CISA Exposure
⚠ Not financial advice. Past security incidents do not guarantee future stock performance.
▸ Security News Google News
Lightwell: How IBM & Red Hat Fixed 400+ Java Vulnerabilities - Cyber Magazine
Cyber Magazine 2026-10-06
Critical Red Hat Satellite Flaw Could Enable Root Password Theft and Code Execution Attacks - CyberSecurityNews
CyberSecurityNews 2026-10-02
What ASOS, AI Agents and 400+ Vulnerabilities Reveal About CX Risk - CX Today
CX Today 3d ago
CISA Flags Three Linux Kernel Vulnerabilities Exploited in the Wild - The Hacker News
The Hacker News 2026-09-19
IBM and Red Hat Expand Lightwell with New Offerings to Build the Trust Infrastructure for AI-Era Open Source - IBM Newsroom
IBM Newsroom 2026-07-08
Red Hat OpenShift Flaw Lets Attackers Bypass PGP Checks and Push Malicious Releases - CyberSecurityNews
CyberSecurityNews 2026-09-22
▸ Recent CVEs showing 20 of 1,101
CVE IDSeverityPatchEPSSDate
CVE-2026-109194 6.4 MEDIUM UNKNOWN / UNPATCHED — 2026-10-12
CVE-2026-75888 7.7 HIGH UNKNOWN / UNPATCHED — 2026-10-12
CVE-2026-12405 8.8 HIGH PATCHED / FIX AVAILABLE 1.54% 2026-10-01
CVE-2026-12544 PoC 7.7 HIGH PATCHED / FIX AVAILABLE 0.21% 2026-10-01
CVE-2026-94416 6.8 MEDIUM UNKNOWN / UNPATCHED — 2026-09-24
CVE-2026-75886 7.2 HIGH PATCHED / FIX AVAILABLE 0.32% 2026-09-23
CVE-2026-84683 8.7 HIGH PATCHED / FIX AVAILABLE 0.26% 2026-09-23
CVE-2026-84486 8.2 HIGH PATCHED / FIX AVAILABLE 0.52% 2026-09-23
CVE-2026-84474 9.9 CRITICAL PATCHED / FIX AVAILABLE 0.80% 2026-09-23
CVE-2026-84499 7.7 HIGH PATCHED / FIX AVAILABLE 0.38% 2026-09-23
CVE-2026-75887 PoC 7.5 HIGH PATCHED / FIX AVAILABLE 0.39% 2026-09-23
CVE-2026-71460 4.3 MEDIUM PATCHED / FIX AVAILABLE 0.22% 2026-09-23
CVE-2026-84691 8.7 HIGH PATCHED / FIX AVAILABLE 0.20% 2026-09-23
CVE-2026-84502 9.9 CRITICAL PATCHED / FIX AVAILABLE 0.62% 2026-09-23
CVE-2026-75939 7.4 HIGH UNKNOWN / UNPATCHED — 2026-09-21
CVE-2026-75885 9.3 CRITICAL PATCHED / FIX AVAILABLE 0.63% 2026-09-18
CVE-2026-85511 4.2 MEDIUM PATCHED / FIX AVAILABLE 0.17% 2026-09-18
CVE-2026-75092 7.3 HIGH PATCHED / FIX AVAILABLE 0.13% 2026-09-15
CVE-2026-71224 PoC 4.7 MEDIUM UNKNOWN / UNPATCHED 0.12% 2026-09-03
CVE-2026-71219 PoC 4.7 MEDIUM UNKNOWN / UNPATCHED 0.12% 2026-09-03
View all 1,101 CVEs for Red Hat →
▸Intel
HQRaleigh, United States
Founded1993
Employees19,000
CEOMatt Hicks
CTOChris Wright
CountryUSA
LicenseCommercial
Trust ScoreB — MODERATE
Max CVSS10.0
Last Updated2026-10-12
▸Top Weaknesses
CWE-787
Out-of-Bounds Write
25 occurrences in Red Hat CVEs (2% of total)
CWE-787 ⓘ
25
CWE-22
Unknown Weakness Type
25 occurrences in Red Hat CVEs (2% of total)
CWE-22 ⓘ
25
CWE-125
Out-of-Bounds Read
25 occurrences in Red Hat CVEs (2% of total)
CWE-125 ⓘ
25
CWE-20
Unknown Weakness Type
21 occurrences in Red Hat CVEs (2% of total)
CWE-20 ⓘ
21
CWE-190
Integer Overflow
20 occurrences in Red Hat CVEs (2% of total)
CWE-190 ⓘ
20
CWE-200
Sensitive Information Exposure
19 occurrences in Red Hat CVEs (2% of total)
CWE-200 ⓘ
19
CWE-918
Server-Side Request Forgery (SSRF)
19 occurrences in Red Hat CVEs (2% of total)
CWE-918 ⓘ
19
CWE-287
Improper Authentication
18 occurrences in Red Hat CVEs (2% of total)
CWE-287 ⓘ
18
▸Company Profile

Red Hat is a leading enterprise open-source software company, best known for Red Hat Enterprise Linux (RHEL), OpenShift, and Ansible. Its products form the foundation of many enterprise IT infrastructures, making its security practices and vulnerability management critical to global cybersecurity.

▸Response Metrics
Est. MTTR ⓘ ~75 days (Average)
Mean Time To Remediate. Estimates days from CVE disclosure to patch.
Industry avg: ~60d (good) · 100-300d (poor) · 300d+ (critical)
CVE Trend ⓘ ↗ +161% worse
CVE count 2026 vs 2025:  153 → 399 CVEs
Patch Speed ⓘ Excellent (<20% open)
15% of CVEs still unpatched.  Excellent: <20% · Good: 20-40% · Avg: 40-65% · Poor: >65%
▸ Financial Risk Estimate
Est. GDPR Low
€876K
Est. GDPR High
€8.8M

Based on 58 critical CVEs, 5 CISA KEV, 16% unpatched. Model: GDPR Art.83 · not legal advice.

▸Actions
⚖ Compare with another vendor
▸Embed Badge
Red Hat B valtersit.com