Skip to contentRed Hat Satellite 6.16 For Rhel 9 vulnerabilities
- djangoproject django, red hat ansible automation platform 2, ansible automation platform 2.5 +15 more +17 morePotential SQL injection in column aliases via control charactersCVE-2026-1287Fix available5.4 Medium
- djangoproject django, red hat ansible automation platform 2, ansible automation platform 2.5 +15 more +17 morePotential SQL injection via raster lookups on PostGISCVE-2026-1207Public exploitFix availableEPSS 12.8%5.4 Medium
- red hat satellite 6, satellite 6.16 for rhel 8, satellite 6.16 for rhel 9 +1 more +3 moreFog-kubevirt: fog-kubevirt: man-in-the-middle vulnerability due to disabled certificate validationCVE-2026-1530Fix available8.1 High
- red hat satellite 6, satellite 6.16 for rhel 8, satellite 6.16 for rhel 9 +2 more +4 moreForeman-kubevirt: foreman_kubevirt: man-in-the-middle due to insecure default ssl verificationCVE-2026-1531Fix available8.1 High
- python urllib3, red hat assisted installer for red hat openshift container platform 2, cert-manager operator for red hat openshift 1.18 +105 more +107 moreurllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)CVE-2026-21441Fix available8.9 High
- redhat satellite, the foreman foreman, red hat satellite 6.15 for rhel 8 +6 more +8 moreForeman: satellite: graphql api permission bypass leads to information disclosureCVE-2025-9572Fix available5.0 Medium
- the foreman foreman, red hat satellite 6, satellite 6.15 for rhel 8 +4 more +6 moreForeman: os command injection via ct_location and fcct_location parametersCVE-2025-10622Fix available8.0 High
- red hat satellite 6.13 for rhel 8, satellite 6.14 for rhel 8, satellite 6.15 for rhel 8 +2 more +4 moreForeman: read-only access to entire db from templatesCVE-2024-8553Fix available6.3 Medium
- red hat satellite 6.16 for rhel 8, satellite 6.16 for rhel 9, satellite 6.17 for rhel 9 +2 more +4 moreRexml: rexml: denial of service via inefficient regex parsingCVE-2025-10990Fix available7.5 High
- redhat satellite, red hat satellite 6.13 for rhel 8, satellite 6.14 for rhel 8 +4 more +6 morePuppet-pulpcore: an authentication bypass vulnerability exists in pulpcoreCVE-2024-7923Fix available9.8 Critical
- redhat satellite, red hat satellite 6.13 for rhel 8, satellite 6.14 for rhel 8 +3 more +5 morePuppet-foreman: an authentication bypass vulnerability exists in foremanCVE-2024-70129.8 Critical
- golang net, golang.org/x/net golang.org/x/net/idna, go standard library net/http +147 more +149 moreInvoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idnaCVE-2026-39821Fix available9.6 Critical