Red Hat Red Hat Satellite 6
66 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-107203 | | Foreman: domain and subnet interface api skips host search filters | MEDIUM 5.4 | 0.2 % | ||
| CVE-2026-107193 | | Foreman: api filter lookup ignores a search-limited filter permission | MEDIUM 6.5 | 0.2 % | ||
| CVE-2026-107445 | | Rubygem-katello: katello: katello: katello flatpak remote repositories api cross-organization authorization bypass | MEDIUM 5.4 | 0.2 % | ||
| CVE-2026-107444 | | Rubygem-katello: katello: katello: katello docker tags repositories api cross-organization authorization bypass | MEDIUM 4.3 | 0.2 % | ||
| CVE-2026-107151 | | Rubygem-smart_proxy_dynflow: task update and done callbacks accept unauthenticated requests | MEDIUM 5.9 | 0.4 % | ||
| CVE-2026-103870 | | Pulp-rpm: distribution tree publish creates directories from .treeinfo ids | MEDIUM 5.0 | 0.2 % | ||
| CVE-2026-103869 | | Pulp-ansible: bearer tokens are reused across remotes in a worker | MEDIUM 6.5 | 0.2 % | ||
| CVE-2026-103868 | | Pulp-container: registry credentials are reused across remotes in a worker | MEDIUM 6.5 | 0.2 % | ||
| CVE-2026-106471 | | Candlepin: candlepin: broken object-level authorization via verifyauthorizationfilter multi-@verify hasaccess latching | HIGH 8.1 | 0.3 % | ||
| CVE-2026-56098 | | Rubygem-katello: improper authorization logic allows resource enumeration | MEDIUM 4.3 | 0.3 % | ||
| CVE-2026-56097 | | Rubygem-katello: sql injection in registry proxy via labels | MEDIUM 6.5 | 0.3 % | ||
| CVE-2026-12545 | | Rubygem-hammer_cli: command injection via insecure editor invocation | MEDIUM 6.7 | 0.5 % | ||
| CVE-2026-12542 | | Foreman: command injection in foreman-tail | HIGH 7.8 | 0.6 % | ||
| CVE-2026-12544 | | Foreman: ssti and insecure deserialization in foreman-rake configuration | HIGH 7.7 | 0.2 % | ||
| CVE-2026-12541 | | Foreman: command injection in foreman-rake database tasks | HIGH 8.2 | 1.2 % | ||
| CVE-2026-12540 | | Foreman: command injection in foreman-rake errors:fetch_log via request_id parameter | HIGH 8.2 | 1.2 % | ||
| CVE-2026-12423 | | Foreman: unauthenticated information disclosure via provisioning token validation flaw | HIGH 7.5 | 0.4 % | ||
| CVE-2026-12405 | | Rubygem-foreman_remote_execution: command injection in job invocations via effective_user parameter | HIGH 8.8 | 1.6 % | ||
| CVE-2026-90959 | | Pulpcore: pulpcore: file:// scheme allowlist bypass in content upload file_url field enables arbitrary file read and pulp container regis… | HIGH 8.1 | 0.4 % | ||
| CVE-2026-89058 | | Resteasy-core: resteasy: corsfilter reflects arbitrary origin with credentials under wildcard config | HIGH 7.4 | 0.3 % | ||
| CVE-2026-89059 | | Resteasy-core: resteasy: iioimageprovider unbounded image decode (decompression-bomb dos) | HIGH 7.5 | 0.9 % | ||
| CVE-2026-92904 | | Rubygem-foreman_remote_execution: job output readable without object-level view_job_invocations check | MEDIUM 4.3 | 0.3 % | ||
| CVE-2026-92893 | | Rubygem-foreman_ansible: ansible inventory api ignores view_hosts permission filters, exposes hidden parameters | MEDIUM 4.3 | 0.3 % | ||
| CVE-2026-92894 | | Rubygem-foreman_ansible: unscoped lookupvalue deletion allows cross-model override value destruction | MEDIUM 4.3 | 0.3 % | ||
| CVE-2026-42784 | | Sequoia-openpgp: sequoia-openpgp: cryptographic integrity compromise via key flag confusion | HIGH 7.4 | 0.3 % | ||
| CVE-2026-84232 | | Pulpcore: python-pulpcore: stored cross-site scripting via inline rendering of uploaded html/svg content | MEDIUM 5.4 | 0.2 % | ||
| CVE-2026-84218 | | Org.jolokia/jolokia-core: incomplete jndi denylist in jolokia jsr-160 proxy (bypass of cve-2018-1000130 fix) | HIGH 8.1 | 0.9 % | ||
| CVE-2026-17615 | | Resteasy-core: resteasy sourceprovider remote unauthenticated file read | HIGH 7.5 | 0.8 % | ||
| CVE-2026-82327 | | Libsolv: libsolv: out-of-bounds write in repo_write() via unvalidated directory id from vertical/paged .solv filelist data | MEDIUM 5.5 | 0.2 % | ||
| CVE-2026-81668 | | Rubygem-katello: cross-tenant content view filter rule access and modification via unauthorized parent filter lookup | MEDIUM 5.4 | 0.2 % | ||
| CVE-2026-81658 | | Foreman: cross-tenant disclosure of template revisions via unauthorized audit lookup | MEDIUM 6.5 | 0.3 % | ||
| CVE-2026-79654 | | Ketello: katello content view history api cross-organization authorization bypass | MEDIUM 4.3 | 0.4 % | ||
| CVE-2026-19391 | | Insights-core: insights-core: incomplete credential redaction exposes sssd bind passwords and pacemaker fence credentials in uploaded arc… | MEDIUM 6.5 | 0.2 % | ||
| CVE-2026-48863 | | Libsolv: stack-based buffer overflow in libsolv eddsa pgp signature verification allows denial of service | HIGH 7.5 | 0.8 % | ||
| CVE-2026-5138 | | Foreman: foreman: information disclosure via improper validation of nested request parameters | MEDIUM 4.3 | 0.4 % | ||
| CVE-2026-5135 | | Foreman: foreman: unauthorized modification of host configurations via broken access control | MEDIUM 6.5 | 0.4 % | ||
| CVE-2026-5142 | | Foreman: foreman: cross-tenant private ssh key disclosure via taxonomy scoping bypass | MEDIUM 6.5 | 0.4 % | ||
| CVE-2026-5136 | | Foreman: foreman: privilege escalation to administrator-level access via usergroup role assignment manipulation | HIGH 8.8 | 0.6 % | ||
| CVE-2026-13316 | | Foreman: ssrf to cloud metada service through unvalidated test_url parameters in foreman config | MEDIUM 4.4 | 0.1 % | ||
| CVE-2026-12515 | | Katello: missing repository authorization in content_uploads exposes cross-product content existence | MEDIUM 4.3 | 0.2 % | ||
| CVE-2026-9149 | | Libsolv: heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv file | MEDIUM 6.5 | 0.3 % | ||
| CVE-2026-9150 | | Libsolv: stack-based buffer overflow in libsolv's debian metadata parser when handling sha384/sha512 checksums | MEDIUM 6.5 | 0.4 % | ||
| CVE-2026-1961 | | Forman: foreman: remote code execution via command injection in websocket proxy | HIGH 8.8 | 1.9 % | ||
| CVE-2026-4324 | | Rubygem-katello: katello: denial of service and potential information disclosure via sql injection | MEDIUM 5.4 | 0.3 % | ||
| CVE-2026-0980 | | Rubyipmi: red hat satellite: remote code execution in rubyipmi via malicious bmc username | HIGH 8.8 | 0.9 % | ||
| CVE-2026-1530 | | Fog-kubevirt: fog-kubevirt: man-in-the-middle vulnerability due to disabled certificate validation | HIGH 8.1 | 0.3 % | ||
| CVE-2026-1531 | | Foreman-kubevirt: foreman_kubevirt: man-in-the-middle due to insecure default ssl verification | HIGH 8.1 | 0.3 % | ||
| CVE-2026-0603 | | Org.hibernate/hibernate-core: hibernate: information disclosure and data deletion via second-order sql injection | HIGH 8.3 | 1.0 % | ||
| CVE-2025-12790 | | Rubygem-mqtt: rubygem-mqtt hostname validation | HIGH 7.4 | 0.4 % | ||
| CVE-2025-10622 | | Foreman: os command injection via ct_location and fcct_location parameters | HIGH 8.0 | 0.7 % | ||
| CVE-2025-3931 | | Yggdrasil: local privilege escalation in yggdrasil | HIGH 7.8 | 0.2 % | ||
| CVE-2025-4574 | | Crossbeam-channel: crossbeam-channel vulnerable to double free on drop | MEDIUM 6.5 | 0.6 % | ||
| CVE-2025-4432 | | Ring: some aes functions may panic when overflow checking is enabled in ring | MEDIUM 5.3 | 1.0 % | ||
| CVE-2025-2157 | | Foreman: disclosure of executed commands and outputs in foreman / red hat satellite | LOW 3.3 | 0.2 % | ||
| CVE-2023-1932 | | Hibernate-validator: rendering of invalid html with safehtml leads to html injection and xss | MEDIUM 6.1 | 0.5 % | ||
| CVE-2024-6861 | | Foreman: foreman: oauth secret exposure via unauthenticated access to the graphql api | HIGH 7.5 | 0.7 % | ||
| CVE-2024-7700 | | Foreman: command injection in "host init config" template via "install packages" field on foreman | MEDIUM 6.5 | 0.8 % | ||
| CVE-2024-7143 | | Pulpcore: rbac permissions incorrectly assigned in tasks that create objects | HIGH 8.3 | 0.6 % | ||
| CVE-2024-4812 | | Katello: potential cross-site scripting exploit in ui | MEDIUM 4.8 | 0.3 % | ||
| CVE-2024-3716 | | Foreman-installer: candlepin database password being leaked to local users via the process list | MEDIUM 6.2 | 0.2 % | ||
| CVE-2023-50782 | | Python-cryptography: bleichenbacher timing oracle attack against rsa decryption - incomplete fix for cve-2020-25659 | HIGH 7.5 | 1.1 % | ||
| CVE-2023-1832 | | Improper authorization check in the server component | HIGH 8.1 | 0.6 % | ||
| CVE-2022-3874 | | Os command injection via ct_command and fcct_command | CRITICAL 9.1 | 2.2 % | ||
| CVE-2023-0462 | | Arbitrary code execution through yaml global parameters | CRITICAL 9.1 | 1.0 % | ||
| CVE-2013-2056 | | Red hat network satellite: red hat network satellite: information disclosure via inter-satellite sync (iss) authentication bypass | HIGH 7.5 | 2.6 % | ||
| CVE-2011-4346 | | Satellite: xss in custom system information key handling | MEDIUM 4.6 | 1.2 % |