CVE Tools
Track your stack

Red Hat Satellite 6

77 CVEs tracked. None of them is in CISA KEV.

This hub aggregates every CVE we track for Red Hat Satellite 6, a product in the operating systems space. Use it to gauge the current risk picture and drill into individual advisories.

Red Hat Satellite 6 CVEs per month

Dec 2024 to Nov 2026. Point at a month, or focus the strip and use the arrow keys.
Red Hat Satellite 6 CVEs per month
MonthCVEs
2024-120
2025-010
2025-021
2025-031
2025-040
2025-053
2025-060
2025-070
2025-080
2025-090
2025-100
2025-112
2025-120
2026-011
2026-023
2026-032
2026-040
2026-052
2026-062
2026-075
2026-086
2026-099
2026-1019
2026-116

Severity

How the 77 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • High3242%
  • Medium4457%
  • Low11%

Latest CVEs

The 15 most recently published vulnerabilities affecting Red Hat Satellite 6.

  1. CVE-2026-123084Python-pulpcore: pulpcore: header content guard jq filter exposes the content-app environment6.5
  2. CVE-2026-84503Ansible-core: ansible-core: ansible.builtin.git invokes git without a `--` separator, allowing argument injection via a `-`-leading repository url (e.g. --upload-pack) -> rce6.7
  3. CVE-2026-123037Ansible-core: user module generate_ssh_key follows a symlinked ~/.ssh enabling local privilege escalation (incomplete fix of cve-2024-9902)6.7
  4. CVE-2026-96453Org.keycloak/keycloak-admin-cli: keycloak-admin-cli: kcadm custom truststore accepts arbitrary self-signed certificates8.0
  5. CVE-2026-93998Keycloak-core: keycloak-core: saml adapter does not bind signed assertions to the configured identity provider issuer7.4
  6. CVE-2026-120971Org.jboss.resteasy/resteasy-core: resteasy: information disclosure through default exception mapper responses5.3
  7. CVE-2026-107203Foreman: domain and subnet interface api skips host search filters5.4
  8. CVE-2026-107193Foreman: api filter lookup ignores a search-limited filter permission6.5
  9. CVE-2026-89091Ansible-core: ansible-core: ansible-galaxy collection install symlink path escape allows arbitrary file write / code execution8.8
  10. CVE-2026-107445Rubygem-katello: katello: katello: katello flatpak remote repositories api cross-organization authorization bypass5.4
  11. CVE-2026-107444Rubygem-katello: katello: katello: katello docker tags repositories api cross-organization authorization bypass4.3
  12. CVE-2026-107151Rubygem-smart_proxy_dynflow: task update and done callbacks accept unauthenticated requests5.9
  13. CVE-2026-103870Pulp-rpm: distribution tree publish creates directories from .treeinfo ids5.0
  14. CVE-2026-103869Pulp-ansible: bearer tokens are reused across remotes in a worker6.5
  15. CVE-2026-103868Pulp-container: registry credentials are reused across remotes in a worker6.5

Product grouping is registry-driven, with AI assist and human review. How it works