Red hat satellite 6

This hub aggregates every CVE we track for Red hat satellite 6, a product in the operating systems space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Red hat satellite 6.

• CVE-2026-89058Resteasy-core: resteasy: corsfilter reflects arbitrary origin with credentials under wildcard config7.4Sep 18, 2026
• CVE-2026-89059Resteasy-core: resteasy: iioimageprovider unbounded image decode (decompression-bomb dos)7.5Sep 18, 2026
• CVE-2026-92904Rubygem-foreman_remote_execution: job output readable without object-level view_job_invocations check4.3Sep 17, 2026
• CVE-2026-92893Rubygem-foreman_ansible: ansible inventory api ignores view_hosts permission filters, exposes hidden parameters4.3Sep 17, 2026
• CVE-2026-92894Rubygem-foreman_ansible: unscoped lookupvalue deletion allows cross-model override value destruction4.3Sep 17, 2026
• CVE-2026-42784Sequoia-openpgp: sequoia-openpgp: cryptographic integrity compromise via key flag confusion7.4Sep 16, 2026
• CVE-2026-84232Pulpcore: python-pulpcore: stored cross-site scripting via inline rendering of uploaded html/svg content5.4Sep 1, 2026
• CVE-2026-84218Org.jolokia/jolokia-core: incomplete jndi denylist in jolokia jsr-160 proxy (bypass of cve-2018-1000130 fix)8.1Sep 1, 2026
• CVE-2026-17615Resteasy-core: resteasy sourceprovider remote unauthenticated file read7.5Aug 31, 2026
• CVE-2026-82327Libsolv: libsolv: out-of-bounds write in repo_write() via unvalidated directory id from vertical/paged .solv filelist data5.5Aug 28, 2026
• CVE-2026-81668Rubygem-katello: cross-tenant content view filter rule access and modification via unauthorized parent filter lookup5.4Aug 27, 2026
• CVE-2026-81658Foreman: cross-tenant disclosure of template revisions via unauthorized audit lookup6.5Aug 27, 2026
• CVE-2026-79654Ketello: katello content view history api cross-organization authorization bypass4.3Aug 26, 2026
• CVE-2026-19391Insights-core: insights-core: incomplete credential redaction exposes sssd bind passwords and pacemaker fence credentials in uploaded archives6.5Aug 11, 2026
• CVE-2026-48863Libsolv: stack-based buffer overflow in libsolv eddsa pgp signature verification allows denial of service7.5Jul 16, 2026