Red Hat Red Hat Satellite 6

• CVE-2026-0603 High 8.3 Org.hibernate/hibernate-core: hibernate: information disclosure and data deletion via second-order sql injection 1.0%
• CVE-2025-12790 High 7.4 Rubygem-mqtt: rubygem-mqtt hostname validation 0.4%
• CVE-2025-10622 High 8.0 Foreman: os command injection via ct_location and fcct_location parameters 0.7%
• CVE-2025-3931 High 7.8 Yggdrasil: local privilege escalation in yggdrasil 0.2%
• CVE-2025-4574 Medium 6.5 Crossbeam-channel: crossbeam-channel vulnerable to double free on drop 0.6%
• CVE-2025-4432 Medium 5.3 Ring: some aes functions may panic when overflow checking is enabled in ring 1.0%
• CVE-2025-2157 Low 3.3 Foreman: disclosure of executed commands and outputs in foreman / red hat satellite 0.2%
• CVE-2023-1932 Medium 6.1 Hibernate-validator: rendering of invalid html with safehtml leads to html injection and xss 0.5%
• CVE-2024-6861 High 7.5 Foreman: foreman: oauth secret exposure via unauthenticated access to the graphql api 0.7%
• CVE-2024-7700 Medium 6.5 Foreman: command injection in "host init config" template via "install packages" field on foreman 0.8%
• CVE-2024-7143 Medium 6.7 Pulpcore: rbac permissions incorrectly assigned in tasks that create objects 0.6%
• CVE-2024-4812 Medium 4.8 Katello: potential cross-site scripting exploit in ui 0.3%
• CVE-2024-3716 Medium 6.2 Foreman-installer: candlepin database password being leaked to local users via the process list 0.2%
• CVE-2023-50782 High 7.5 Python-cryptography: bleichenbacher timing oracle attack against rsa decryption - incomplete fix for cve-2020-25659 1.1%
• CVE-2023-1832 Medium 6.8 Improper authorization check in the server component 0.6%
• CVE-2022-3874 High 8.0 Os command injection via ct_command and fcct_command 2.2%
• CVE-2023-0462 High 8.0 Arbitrary code execution through yaml global parameters 1.0%