Skip to contentRed Hat Satellite 6 vulnerabilities
- red hat satellite 6.16 for rhel 8, satellite 6.16 for rhel 9, satellite 6.17 for rhel 9 +2 more +4 moreForeman: authorization flaw in the foreman::controller::useraware handling used by api::v2::sshkeyscontrollerCVE-2026-863244.3 Medium
- red hat satellite 6.16 for rhel 8, satellite 6.16 for rhel 9, satellite 6.17 for rhel 9 +2 more +4 moreForeman: authorization flaw in the mail-notification endpoints implemented by api::v2::mailnotificationscontrollerCVE-2026-863234.3 Medium
- red hat satellite 6.16 for rhel 8, satellite 6.16 for rhel 9, satellite 6.17 for rhel 9 +2 more +4 moreForeman: authorization flaw in the foreman::controller::useraware#find_user handling used by api::v2::personalaccesstokenscontrollerCVE-2026-863228.8 High
- red hat satellite 6.16 for rhel 8, satellite 6.16 for rhel 9, satellite 6.17 for rhel 9 +2 more +4 moreCandlepin: consumer certificate can register systems in another organizationCVE-2026-1114567.1 High
- red hat satellite 6.16 for rhel 8, satellite 6.16 for rhel 9, satellite 6.17 for rhel 9 +2 more +4 moreForeman: foreman: api host template render discloses secrets to view_hosts users (incomplete cve-2026-96659 fix)CVE-2026-1074437.7 High
- red hat satellite 6.16 for rhel 8, satellite 6.16 for rhel 9, satellite 6.17 for rhel 9 +2 more +4 moreRubygem-safemode: safemode: jail allow-list bypass via op-assign expressionsCVE-2026-107360Public exploit9.6 Critical
- red hat satellite 6.16 for rhel 8, satellite 6.16 for rhel 9, satellite 6.17 for rhel 9 +2 more +4 moreRubygem-smart_proxy_dynflow: dynflow console authorizes any client certificate the capsule ca signedCVE-2026-1071527.1 High
- red hat ansible automation platform 2, satellite 6, update infrastructure 4 for cloud providers +1 more +3 morePython-pulpcore: pulpcore: header content guard jq filter exposes the content-app environmentCVE-2026-1230846.5 Medium
- red hat migration toolkit for applications 8, migration toolkit for virtualization, openshift service mesh 3 +17 more +19 moreAnsible-core: ansible-core: ansible.builtin.git invokes git without a `--` separator, allowing argument injection via a `-`-leading repository url (e.g. --upload-pack) -> rceCVE-2026-84503Fix available6.7 Medium
- red hat migration toolkit for applications 8, migration toolkit for virtualization, openshift service mesh 3 +12 more +14 moreAnsible-core: user module generate_ssh_key follows a symlinked ~/.ssh enabling local privilege escalation (incomplete fix of cve-2024-9902)CVE-2026-1230376.7 Medium
- red hat amq broker 7, build of keycloak 26.4, build of keycloak 26.4.17 +8 more +10 moreOrg.keycloak/keycloak-admin-cli: keycloak-admin-cli: kcadm custom truststore accepts arbitrary self-signed certificatesCVE-2026-964538.0 High
- red hat amq broker 7, build of keycloak 26.4, build of keycloak 26.4.17 +8 more +10 moreKeycloak-core: keycloak-core: saml adapter does not bind signed assertions to the configured identity provider issuerCVE-2026-939987.4 High
- red hat build of apache camel 4 for quarkus 3, build of apicurio registry 3, build of debezium 3 +6 more +8 moreOrg.jboss.resteasy/resteasy-core: resteasy: information disclosure through default exception mapper responsesCVE-2026-1209715.3 Medium
- red hat satellite 6Foreman: domain and subnet interface api skips host search filtersCVE-2026-1072035.4 Medium
- red hat satellite 6.16 for rhel 8, satellite 6.16 for rhel 9, satellite 6.17 for rhel 9 +1 more +3 moreForeman: api filter lookup ignores a search-limited filter permissionCVE-2026-1071936.5 Medium
- red hat migration toolkit for applications 8, migration toolkit for virtualization, openshift service mesh 3 +15 more +17 moreAnsible-core: ansible-core: ansible-galaxy collection install symlink path escape allows arbitrary file write / code executionCVE-2026-89091Fix available8.8 High
- red hat hardened images, satellite 6 +1 moreRubygem-katello: katello: katello: katello flatpak remote repositories api cross-organization authorization bypassCVE-2026-1074455.4 Medium
- red hat hardened images, satellite 6 +1 moreRubygem-katello: katello: katello: katello docker tags repositories api cross-organization authorization bypassCVE-2026-1074444.3 Medium
- red hat satellite 6Rubygem-smart_proxy_dynflow: task update and done callbacks accept unauthenticated requestsCVE-2026-1071515.9 Medium
- red hat satellite 6.16 for rhel 8, satellite 6.16 for rhel 9, satellite 6.17 for rhel 9 +4 more +6 morePulp-rpm: distribution tree publish creates directories from .treeinfo idsCVE-2026-1038705.0 Medium
- red hat ansible automation platform 2, satellite 6 +1 morePulp-ansible: bearer tokens are reused across remotes in a workerCVE-2026-1038696.5 Medium
- red hat ansible automation platform 2, satellite 6, update infrastructure 4 for cloud providers +1 more +3 morePulp-container: registry credentials are reused across remotes in a workerCVE-2026-1038686.5 Medium
- red hat satellite 6.16 for rhel 8, satellite 6.16 for rhel 9, satellite 6.17 for rhel 9 +2 more +4 moreCandlepin: candlepin: broken object-level authorization via verifyauthorizationfilter multi-@verify hasaccess latchingCVE-2026-1064718.1 High
- red hat satellite 6, satellite 6.16 for rhel 8, satellite 6.16 for rhel 9 +3 more +5 moreRubygem-katello: improper authorization logic allows resource enumerationCVE-2026-560984.3 Medium
- red hat satellite 6, satellite 6.16 for rhel 8, satellite 6.16 for rhel 9 +3 more +5 moreRubygem-katello: sql injection in registry proxy via labelsCVE-2026-560976.5 Medium
- red hat satellite 6, satellite 6.16 for rhel 8, satellite 6.16 for rhel 9 +3 more +5 moreRubygem-hammer_cli: command injection via insecure editor invocationCVE-2026-125456.7 Medium
- theforeman foreman, red hat satellite 6, satellite 6.16 for rhel 8 +5 more +7 moreForeman: command injection in foreman-tailCVE-2026-125425.3 Medium
- theforeman foreman, red hat satellite 6.16 for rhel 8, satellite 6.16 for rhel 9 +4 more +6 moreForeman: excessive permissions for viewer role on previewCVE-2026-966599.1 Critical
- theforeman foreman, red hat satellite 6.16 for rhel 8, satellite 6.16 for rhel 9 +4 more +6 moreForeman: foreman: arbitrary code execution via safemode sandbox bypassCVE-2026-966588.8 High
- theforeman foreman, red hat satellite 6, satellite 6.16 for rhel 8 +5 more +7 moreForeman: ssti and insecure deserialization in foreman-rake configurationCVE-2026-125447.7 High
- theforeman foreman, red hat satellite 6, satellite 6.16 for rhel 8 +5 more +7 moreForeman: command injection in foreman-rake database tasksCVE-2026-125418.2 High
- theforeman foreman, red hat satellite 6, satellite 6.16 for rhel 8 +5 more +7 moreForeman: command injection in foreman-rake errors:fetch_log via request_id parameterCVE-2026-125408.2 High
- redhat satellite, theforeman foreman, red hat satellite 6 +5 more +7 moreForeman: unauthenticated information disclosure via provisioning token validation flawCVE-2026-124237.5 High
- red hat satellite 6, satellite 6.16 for rhel 8, satellite 6.16 for rhel 9 +3 more +5 moreRubygem-foreman_remote_execution: command injection in job invocations via effective_user parameterCVE-2026-124058.8 High
- red hat ansible automation platform 2, ansible automation platform 2.6, ansible automation platform 2.6 for rhel 9 +9 more +11 morePulpcore: pulpcore: file:// scheme allowlist bypass in content upload file_url field enables arbitrary file read and pulp container registry signing key theftCVE-2026-909598.1 High
- red hat build of apache camel 3.33.4.redhat, build of apache camel 4 for quarkus 3, build of apicurio registry 3 +19 more +21 moreResteasy-core: resteasy: corsfilter reflects arbitrary origin with credentials under wildcard configCVE-2026-89058Fix available7.4 High
- red hat build of apache camel 3.33.4.redhat, build of apache camel 4 for quarkus 3, build of apicurio registry 3 +19 more +21 moreResteasy-core: resteasy: iioimageprovider unbounded image decode (decompression-bomb dos)CVE-2026-890597.5 High
- red hat satellite 6Rubygem-foreman_remote_execution: job output readable without object-level view_job_invocations checkCVE-2026-929044.3 Medium
- red hat satellite 6Rubygem-foreman_ansible: ansible inventory api ignores view_hosts permission filters, exposes hidden parametersCVE-2026-928934.3 Medium
- red hat satellite 6Rubygem-foreman_ansible: unscoped lookupvalue deletion allows cross-model override value destructionCVE-2026-928944.3 Medium
- red hat ansible automation platform 2, satellite 6, update infrastructure 4 for cloud providers +1 more +3 morePulpcore: python-pulpcore: stored cross-site scripting via inline rendering of uploaded html/svg contentCVE-2026-842325.4 Medium
- red hat amq broker 7, build of apache camel 4 for quarkus 3, build of apache camel for spring boot 4 +2 more +4 moreOrg.jolokia/jolokia-core: incomplete jndi denylist in jolokia jsr-160 proxy (bypass of cve-2018-1000130 fix)CVE-2026-84218Fix available8.1 High
- red hat build of apache camel 3.33.3.sp1, build of apache camel 4 for quarkus 3, build of apicurio registry 3 +14 more +16 moreResteasy-core: resteasy sourceprovider remote unauthenticated file readCVE-2026-17615Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +7 more +9 moreLibsolv: libsolv: out-of-bounds write in repo_write() via unvalidated directory id from vertical/paged .solv filelist dataCVE-2026-82327Fix available5.5 Medium
- red hat satellite 6, satellite 6.16 for rhel 8, satellite 6.16 for rhel 9 +3 more +5 moreRubygem-katello: cross-tenant content view filter rule access and modification via unauthorized parent filter lookupCVE-2026-816685.4 Medium
- theforeman foreman, red hat satellite 6.16 for rhel 8, satellite 6.16 for rhel 9 +3 more +5 moreForeman: cross-tenant disclosure of template revisions via unauthorized audit lookupCVE-2026-816586.5 Medium
- red hat satellite 6, satellite 6.16 for rhel 8, satellite 6.16 for rhel 9 +3 more +5 moreKetello: katello content view history api cross-organization authorization bypassCVE-2026-796544.3 Medium
- red hat pen drive powered by red hat lightspeed, certification program for red hat enterprise linux 9, enterprise linux 10 +2 more +4 moreInsights-core: insights-core: incomplete credential redaction exposes sssd bind passwords and pacemaker fence credentials in uploaded archivesCVE-2026-193916.5 Medium
- red hat ansible automation platform 2, enterprise linux 10, enterprise linux 8 +4 more +6 moreAnsible-core: argument injection in ansible-galaxy collection install via git clone (incomplete fix for cve-2026-11332)CVE-2026-16493Fix available7.8 High
- red hat ansible automation platform 2, ansible automation platform 2.5 for rhel 8, ansible automation platform 2.5 for rhel 9 +10 more +12 morePulpcore: pulpcore: relative_path_validator bypass via directory traversal in filesystemexportCVE-2026-127019.0 Critical
- Show moreLoading…