Known vulnerabilities in Red Hat Satellite 6

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-89058	Resteasy-core: resteasy: corsfilter reflects arbitrary origin with credentials under wildcard config	7.4 High	Sep 18, 2026
CVE-2026-89059	Resteasy-core: resteasy: iioimageprovider unbounded image decode (decompression-bomb dos)	7.5 High	Sep 18, 2026
CVE-2026-92904	A flaw was found in the foreman_remote_execution plugin's template invocations controller	4.3 Medium	Sep 17, 2026
CVE-2026-92925	Redis: redis: out-of-bounds read via crafted cluster bus packets	7.1 High	Sep 17, 2026
CVE-2026-92893	A flaw was found in the foreman_ansible plugin's Ansible inventory API	4.3 Medium	Sep 17, 2026
CVE-2026-92894	A flaw was found in the foreman_ansible plugin's Ansible override values API	4.3 Medium	Sep 17, 2026
CVE-2026-42784	Sequoia-openpgp: sequoia-openpgp: cryptographic integrity compromise via key flag confusion	7.4 High	Sep 16, 2026
CVE-2026-84232	Pulpcore: python-pulpcore: stored cross-site scripting via inline rendering of uploaded html/svg content	5.4 Medium	Sep 1, 2026
CVE-2026-84218	A flaw was found in Jolokia's JSR-160 proxy functionality where insufficient validation of client-controlled JMX service…	8.1 High	Sep 1, 2026
CVE-2026-17615	Resteasy-core: resteasy sourceprovider remote unauthenticated file read	7.5 High	Aug 31, 2026
CVE-2026-82327	Libsolv: libsolv: out-of-bounds write in repo_write() via unvalidated directory id from vertical/paged .solv filelist data	5.5 Medium	Aug 28, 2026
CVE-2026-81668	A flaw was found in Katello where the Content View Filter Rules API does not properly enforce authorization on the…	5.4 Medium	Aug 27, 2026
CVE-2026-81658	A flaw was found in Foreman	6.5 Medium	Aug 27, 2026
CVE-2026-79654	A flaw was found in Katello where the Content View History API does not properly enforce authorization when accessing…	4.3 Medium	Aug 26, 2026
CVE-2026-19391	Insights-core: insights-core: incomplete credential redaction exposes sssd bind passwords and pacemaker fence credentials in uploaded archives	6.5 Medium	Aug 11, 2026
CVE-2026-16493	Ansible-core: argument injection in ansible-galaxy collection install via git clone (incomplete fix for cve-2026-11332)	7.8 High	Jul 21, 2026
CVE-2026-12701	A path traversal vulnerability was found in pulpcore	9.0 Critical	Jul 20, 2026
CVE-2026-48863	Libsolv: stack-based buffer overflow in libsolv eddsa pgp signature verification allows denial of service	7.5 High	Jul 16, 2026
CVE-2026-5138	A flaw was found in Foreman	4.3 Medium	Jul 1, 2026
CVE-2026-5135	A flaw was found in Foreman	6.5 Medium	Jul 1, 2026
CVE-2026-5142	A flaw was found in foreman	6.5 Medium	Jul 1, 2026
CVE-2026-5136	A flaw was found in Foreman	8.8 High	Jul 1, 2026
CVE-2026-13316	A flaw has been found in foreman when HTTP parameters are modified in http_proxies_controller and http_proxy files	4.4 Medium	Jun 30, 2026
CVE-2026-13676	fast-uri versions 2.3.1 through 3.1.2 and 4.0.0 fail to canonicalize Unicode (IDN) hostnames for HTTP-family URLs	7.5 High	Jun 29, 2026
CVE-2026-9800	A flaw was found in Keycloak Policy Enforcer	8.1 High	Jun 25, 2026

Other Red Hat products