Red Hat Red Hat Satellite 6

• CVE-2026-96453 High 8.0 Org.keycloak/keycloak-admin-cli: keycloak-admin-cli: kcadm custom truststore accepts arbitrary self-signed certificates 0.2%
• CVE-2026-93998 High 7.4 Keycloak-core: keycloak-core: saml adapter does not bind signed assertions to the configured identity provider issuer 0.2%
• CVE-2026-120971 Medium 5.3 Org.jboss.resteasy/resteasy-core: resteasy: information disclosure through default exception mapper responses 0.3%
• CVE-2026-107203 Medium 5.4 Foreman: domain and subnet interface api skips host search filters 0.2%
• CVE-2026-107193 Medium 6.5 Foreman: api filter lookup ignores a search-limited filter permission 0.2%
• CVE-2026-107445 Medium 5.4 Rubygem-katello: katello: katello: katello flatpak remote repositories api cross-organization authorization bypass 0.2%
• CVE-2026-107444 Medium 4.3 Rubygem-katello: katello: katello: katello docker tags repositories api cross-organization authorization bypass 0.2%
• CVE-2026-107151 Medium 5.9 Rubygem-smart_proxy_dynflow: task update and done callbacks accept unauthenticated requests 0.4%
• CVE-2026-103870 Medium 5.0 Pulp-rpm: distribution tree publish creates directories from .treeinfo ids 0.2%
• CVE-2026-103869 Medium 6.5 Pulp-ansible: bearer tokens are reused across remotes in a worker 0.2%
• CVE-2026-103868 Medium 6.5 Pulp-container: registry credentials are reused across remotes in a worker 0.2%
• CVE-2026-106471 High 8.1 Candlepin: candlepin: broken object-level authorization via verifyauthorizationfilter multi-@verify hasaccess latching 0.3%
• CVE-2026-56098 Medium 4.3 Rubygem-katello: improper authorization logic allows resource enumeration 0.3%
• CVE-2026-56097 Medium 6.5 Rubygem-katello: sql injection in registry proxy via labels 0.3%
• CVE-2026-12542 Medium 5.3 Foreman: command injection in foreman-tail 0.6%
• CVE-2026-12545 Medium 6.7 Rubygem-hammer_cli: command injection via insecure editor invocation 0.5%
• CVE-2026-12544 High 7.7 Foreman: ssti and insecure deserialization in foreman-rake configuration 0.2%
• CVE-2026-12541 High 8.2 Foreman: command injection in foreman-rake database tasks 1.2%
• CVE-2026-12540 High 8.2 Foreman: command injection in foreman-rake errors:fetch_log via request_id parameter 1.2%
• CVE-2026-12423 High 7.5 Foreman: unauthenticated information disclosure via provisioning token validation flaw 0.4%
• CVE-2026-12405 High 8.8 Rubygem-foreman_remote_execution: command injection in job invocations via effective_user parameter 1.6%
• CVE-2026-90959 High 8.1 Pulpcore: pulpcore: file:// scheme allowlist bypass in content upload file_url field enables arbitrary file read and pulp container registry signing key theft 0.4%
• CVE-2026-89058 High 7.4 Resteasy-core: resteasy: corsfilter reflects arbitrary origin with credentials under wildcard config 0.5%
• CVE-2026-89059 High 7.5 Resteasy-core: resteasy: iioimageprovider unbounded image decode (decompression-bomb dos) 1.5%
• CVE-2026-92904 Medium 4.3 Rubygem-foreman_remote_execution: job output readable without object-level view_job_invocations check 0.3%
• CVE-2026-92893 Medium 4.3 Rubygem-foreman_ansible: ansible inventory api ignores view_hosts permission filters, exposes hidden parameters 0.3%
• CVE-2026-92894 Medium 4.3 Rubygem-foreman_ansible: unscoped lookupvalue deletion allows cross-model override value destruction 0.3%
• CVE-2026-42784 High 7.4 Sequoia-openpgp: sequoia-openpgp: cryptographic integrity compromise via key flag confusion 0.3%
• CVE-2026-84232 Medium 5.4 Pulpcore: python-pulpcore: stored cross-site scripting via inline rendering of uploaded html/svg content 0.2%
• CVE-2026-84218 High 8.1 Org.jolokia/jolokia-core: incomplete jndi denylist in jolokia jsr-160 proxy (bypass of cve-2018-1000130 fix) 0.9%
• CVE-2026-17615 High 7.5 Resteasy-core: resteasy sourceprovider remote unauthenticated file read 0.8%
• CVE-2026-82327 Medium 5.5 Libsolv: libsolv: out-of-bounds write in repo_write() via unvalidated directory id from vertical/paged .solv filelist data 0.2%
• CVE-2026-81668 Medium 5.4 Rubygem-katello: cross-tenant content view filter rule access and modification via unauthorized parent filter lookup 0.2%
• CVE-2026-81658 Medium 6.5 Foreman: cross-tenant disclosure of template revisions via unauthorized audit lookup 0.3%
• CVE-2026-79654 Medium 4.3 Ketello: katello content view history api cross-organization authorization bypass 0.4%
• CVE-2026-19391 Medium 6.5 Insights-core: insights-core: incomplete credential redaction exposes sssd bind passwords and pacemaker fence credentials in uploaded archives 0.2%
• CVE-2026-48863 High 7.5 Libsolv: stack-based buffer overflow in libsolv eddsa pgp signature verification allows denial of service 0.8%
• CVE-2026-5138 Medium 4.3 Foreman: foreman: information disclosure via improper validation of nested request parameters 0.4%
• CVE-2026-5135 Medium 6.5 Foreman: foreman: unauthorized modification of host configurations via broken access control 0.4%
• CVE-2026-5142 Medium 6.5 Foreman: foreman: cross-tenant private ssh key disclosure via taxonomy scoping bypass 0.4%
• CVE-2026-5136 High 8.8 Foreman: foreman: privilege escalation to administrator-level access via usergroup role assignment manipulation 0.6%
• CVE-2026-13316 Medium 4.4 Foreman: ssrf to cloud metada service through unvalidated test_url parameters in foreman config 0.1%
• CVE-2026-12515 Medium 4.3 Katello: missing repository authorization in content_uploads exposes cross-product content existence 0.2%
• CVE-2026-9149 Medium 6.5 Libsolv: heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv file 0.3%
• CVE-2026-9150 Medium 6.5 Libsolv: stack-based buffer overflow in libsolv's debian metadata parser when handling sha384/sha512 checksums 0.4%
• CVE-2026-1961 High 8.0 Forman: foreman: remote code execution via command injection in websocket proxy 1.9%
• CVE-2026-4324 Medium 5.4 Rubygem-katello: katello: denial of service and potential information disclosure via sql injection 0.3%
• CVE-2026-0980 High 8.3 Rubyipmi: red hat satellite: remote code execution in rubyipmi via malicious bmc username 0.9%
• CVE-2026-1530 High 8.1 Fog-kubevirt: fog-kubevirt: man-in-the-middle vulnerability due to disabled certificate validation 0.3%
• CVE-2026-1531 High 8.1 Foreman-kubevirt: foreman_kubevirt: man-in-the-middle due to insecure default ssl verification 0.3%