Red Hat Security Advisory: Red Hat Developer Hub 1.6.5 release
Affects Red HatSource GCVE Database
Not known to be exploited.
Data as of 5 Nov 2026, 20:34 UTC
Rated by Threat Radar · No CVSS score from NVD or the CNA
Exploitation evidence
Disclosed: evidence found.
CVE published 25 Sep 2025
Detectable: no evidence on record.
No public nuclei template indexed
Weaponized: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 5 Nov 2026.
Description
Red Hat Developer Hub (RHDH) is Red Hat's enterprise-grade, self-managed, customizable developer portal based on Backstage.io. RHDH is supported on OpenShift and other major Kubernetes clusters (AKS, EKS, GKE). The core features of RHDH include a single pane of glass, a centralized software catalog, self-service via golden path templates, and Tech Docs. RHDH is extensible by plugins.
References
- access.redhat.com/errata/RHSA-2025:16747 (opens in a new tab)
- access.redhat.com/security/cve/CVE-2025-58754 (opens in a new tab)
- access.redhat.com/security/updates/classification/ (opens in a new tab)
- catalog.redhat.com/search?gs&searchType=containers&q=rhdh (opens in a new tab)
- developers.redhat.com/rhdh/overview (opens in a new tab)
- docs.redhat.com/en/documentation/red_hat_developer_hub (opens in a new tab)
- issues.redhat.com/browse/RHIDP-8805 (opens in a new tab)
- issues.redhat.com/browse/RHIDP-8806 (opens in a new tab)
- issues.redhat.com/browse/RHIDP-8811 (opens in a new tab)
- security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_16747.json (opens in a new tab)