Known vulnerabilities in Red Hat Satellite 6.16 for RHEL 8

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-40192	Pillow is a Python imaging library	8.7 High	Apr 15, 2026
CVE-2026-2332	In Eclipse Jetty, the HTTP/1.1 parser is vulnerable to request smuggling when chunk extensions are used, similar to…	7.4 High	Apr 14, 2026
CVE-2026-32280	During chain building, the amount of work that is done is not correctly limited when a large number of intermediate…	7.5 High	Apr 8, 2026
CVE-2026-32283	If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection…	7.5 High	Apr 8, 2026
CVE-2026-1961	A flaw was found in Foreman	8.0 High	Mar 26, 2026
CVE-2026-33186	gRPC-Go is the Go language implementation of gRPC	9.1 Critical	Mar 20, 2026
CVE-2026-27459	pyOpenSSL is a Python wrapper around the OpenSSL library	7.2 High	Mar 17, 2026
CVE-2026-25679	url.Parse insufficiently validated the host/authority component and accepted some invalid URLs	7.5 High	Mar 6, 2026
CVE-2025-69534	Python-Markdown version 3.8 contain a vulnerability where malformed HTML-like sequences can cause html.parser.HTMLParser…	7.5 High	Mar 5, 2026
CVE-2025-10990	A flaw was found in REXML	7.5 High	Feb 27, 2026
CVE-2026-0980	A flaw was found in rubyipmi, a gem used in the Baseboard Management Controller (BMC) component of Red Hat Satellite	8.3 High	Feb 27, 2026
CVE-2025-9572	n authorization flaw in Foreman's GraphQL API allows low-privileged users to access metadata beyond their assigned…	5.0 Medium	Feb 27, 2026
CVE-2026-27727	mchange-commons-java, a library that provides Java utilities, includes code that mirrors early implementations of JNDI…	8.9 High	Feb 25, 2026
CVE-2026-25990	Pillow is a Python imaging library	8.6 High	Feb 11, 2026
CVE-2026-1312	An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28	Not rated	Feb 3, 2026
CVE-2026-1287	An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28	Not rated	Feb 3, 2026
CVE-2026-1207	An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28	Not rated	Feb 3, 2026
CVE-2026-1530	A flaw was found in fog-kubevirt	8.1 High	Feb 2, 2026
CVE-2026-1531	A flaw was found in foreman_kubevirt	8.1 High	Feb 2, 2026
CVE-2026-21441	urllib3 is an HTTP client library for Python	8.9 High	Jan 7, 2026
CVE-2025-10622	A flaw was found in Red Hat Satellite (Foreman component)	8.0 High	Nov 5, 2025
CVE-2024-8553	A vulnerability was found in Foreman's loader macros introduced with report templates	6.3 Medium	Oct 31, 2024
CVE-2024-7923	An authentication bypass vulnerability has been identified in Pulpcore when deployed with Gunicorn versions prior to…	9.8 Critical	Sep 4, 2024
CVE-2024-7012	An authentication bypass vulnerability has been identified in Foreman when deployed with External Authentication, due to…	9.8 Critical	Sep 4, 2024

Other Red Hat products