Red hat satellite 6

This hub aggregates every CVE we track for Red hat satellite 6, a product in the operating systems space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Red hat satellite 6.

• CVE-2026-16493Ansible-core: argument injection in ansible-galaxy collection install via git clone (incomplete fix for cve-2026-11332)7.8Jul 21, 2026
• CVE-2026-48863Libsolv: stack-based buffer overflow in libsolv eddsa pgp signature verification allows denial of service7.5Jul 16, 2026
• CVE-2026-5138Foreman: foreman: information disclosure via improper validation of nested request parameters4.3Jul 1, 2026
• CVE-2026-5135Foreman: foreman: unauthorized modification of host configurations via broken access control6.5Jul 1, 2026
• CVE-2026-5142Foreman: foreman: cross-tenant private ssh key disclosure via taxonomy scoping bypass6.5Jul 1, 2026
• CVE-2026-5136Foreman: foreman: privilege escalation to administrator-level access via usergroup role assignment manipulation8.8Jul 1, 2026
• CVE-2026-13316Foreman: ssrf to cloud metada service through unvalidated test_url parameters in foreman config4.4Jun 30, 2026
• CVE-2026-12515Katello: missing repository authorization in content_uploads exposes cross-product content existence4.3Jun 17, 2026
• CVE-2026-11332Ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution7.8Jun 5, 2026
• CVE-2026-44604Rpm: command injection in rpmuncompress dountar() via unescaped archive top-level directory name in popen() shell command7.0May 28, 2026
• CVE-2026-9149Libsolv: heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv file6.5May 20, 2026
• CVE-2026-9150Libsolv: stack-based buffer overflow in libsolv's debian metadata parser when handling sha384/sha512 checksums6.5May 20, 2026
• CVE-2026-1961Forman: foreman: remote code execution via command injection in websocket proxy8.0Mar 26, 2026
• CVE-2026-4324Rubygem-katello: katello: denial of service and potential information disclosure via sql injection5.4Mar 17, 2026
• CVE-2026-0980Rubyipmi: red hat satellite: remote code execution in rubyipmi via malicious bmc username8.3Feb 27, 2026