Red Hat Enterprise Linux CoreOS (RHCOS) is an operating system based on Red Hat Enterprise Linux (RHEL) that is optimized for running containerized workloads in a clustered environment. It is designed to be used as the foundation for building and managing large-scale, container-based applications and services, such as those used in cloud-native and Kubernetes deployments. RHCOS includes built-in support for automatic updates, self-healing, and other features that are necessary for running distributed systems at scale.

Red Hat Enterprise Linux CoreOS (RHCOS)

OpenShift Node is a component of Red Hat OpenShift, a Kubernetes-based container platform. It refers to the worker machines in an OpenShift cluster that run containerized applications. OpenShift Nodes are responsible for executing and managing the containers, providing the compute resources necessary for running applications and services within the OpenShift environment.

OpenShift Node

A flaw was found in OpenShift's Telemeter. If certain conditions are in place, an attacker can use a forged token to bypass the issue ("iss") check during JSON web token (JWT) authentication.

CVE ID	Severity	Score	Technologies	Component name	CISA KEV exploit	Has fix	Published date
CVE-2026-60002	CRITICAL	9.4	Rocky Linux	openssh-server	No	Yes	Jul 08, 2026
CVE-2026-59858	HIGH	8.4	Vim	rhcos-ppc64le	No	Yes	Jul 09, 2026
CVE-2026-59856	HIGH	8.4	Vim	rhcos-s390x	No	Yes	Jul 09, 2026
CVE-2026-14476	HIGH	8	Rocky Linux	sssd-ipa-debuginfo	No	Yes	Jul 07, 2026
CVE-2026-16313	HIGH	7.6	Rocky Linux	sg3-utils	No	Yes	Jul 28, 2026

CVE-2024-5037:
Red Hat Enterprise Linux CoreOS (RHCOS) vulnerability analysis and mitigation

7.5

Related Red Hat Enterprise Linux CoreOS (RHCOS) vulnerabilities:

Benchmark your Cloud Security Posture

Additional Wiz resources

Cloud Vulnerability DB

Cloud Threat Landscape

PEACH

Ready to see Wiz in action?

CVE-2024-5037: Red Hat Enterprise Linux CoreOS (RHCOS) vulnerability analysis and mitigation