# Red Hat Satellite 6.16 for RHEL 9. Every CVE that names Red Hat Satellite 6.16 for RHEL 9 among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first - [Rubygem-katello: improper authorization logic allows resource enumeration](https://agentprime.io/advisories/CVE-2026-56098.md) `CVE-2026-56098` · CVE record: Red Hat Red Hat Satellite 6.16 for RHEL 8 and 4 more · CVSS 4.3 Medium · Not analysed yet · Published 1 Oct 2026 · Tags: Information disclosure - [Rubygem-katello: sql injection in registry proxy via labels](https://agentprime.io/advisories/CVE-2026-56097.md) `CVE-2026-56097` · CVE record: Red Hat Red Hat Satellite 6.16 for RHEL 8 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 1 Oct 2026 · Tags: SQL injection - [Foreman: command injection in foreman-tail](https://agentprime.io/advisories/CVE-2026-12542.md) `CVE-2026-12542` · CVE record: Red Hat Red Hat Satellite 6.16 for RHEL 8 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 1 Oct 2026 · Tags: Command injection - [Rubygem-hammer_cli: command injection via insecure editor invocation](https://agentprime.io/advisories/CVE-2026-12545.md) `CVE-2026-12545` · CVE record: Red Hat Red Hat Satellite 6.16 for RHEL 8 and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 1 Oct 2026 · Tags: Command injection - [Foreman: foreman: arbitrary code execution via safemode sandbox bypass](https://agentprime.io/advisories/CVE-2026-96658.md) `CVE-2026-96658` · CVE record: Red Hat Red Hat Satellite 6.16 for RHEL 8 and 4 more · CVSS 8.8 High · Not analysed yet · Published 1 Oct 2026 · Tags: Code injection - [Foreman: excessive permissions for viewer role on preview](https://agentprime.io/advisories/CVE-2026-96659.md) `CVE-2026-96659` · CVE record: Red Hat Red Hat Satellite 6.16 for RHEL 8 and 4 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Oct 2026 · Tags: Privilege escalation - [Foreman: ssti and insecure deserialization in foreman-rake configuration](https://agentprime.io/advisories/CVE-2026-12544.md) `CVE-2026-12544` · CVE record: Red Hat Red Hat Satellite 6.16 for RHEL 8 and 4 more · CVSS 7.7 High · Not analysed yet · Published 1 Oct 2026 · Tags: Insecure deserialization - [Foreman: command injection in foreman-rake database tasks](https://agentprime.io/advisories/CVE-2026-12541.md) `CVE-2026-12541` · CVE record: Red Hat Red Hat Satellite 6.16 for RHEL 8 and 4 more · CVSS 8.2 High · Not analysed yet · Published 1 Oct 2026 · Tags: Command injection - [Foreman: command injection in foreman-rake errors:fetch_log via request_id parameter](https://agentprime.io/advisories/CVE-2026-12540.md) `CVE-2026-12540` · CVE record: Red Hat Red Hat Satellite 6.16 for RHEL 8 and 4 more · CVSS 8.2 High · Not analysed yet · Published 1 Oct 2026 · Tags: Command injection - [Foreman: unauthenticated information disclosure via provisioning token validation flaw](https://agentprime.io/advisories/CVE-2026-12423.md) `CVE-2026-12423` · CVE record: Red Hat Red Hat Satellite 6.16 for RHEL 8 and 4 more · CVSS 7.5 High · Not analysed yet · Published 1 Oct 2026 · Tags: Authentication bypass - [Rubygem-foreman_remote_execution: command injection in job invocations via effective_user parameter](https://agentprime.io/advisories/CVE-2026-12405.md) `CVE-2026-12405` · CVE record: Red Hat Red Hat Satellite 6.16 for RHEL 8 and 4 more · CVSS 8.8 High · Not analysed yet · Published 1 Oct 2026 · Tags: Command injection - [Ketello: katello content view history api cross-organization authorization bypass](https://agentprime.io/advisories/CVE-2026-79654.md) `CVE-2026-79654` · CVE record: Red Hat Red Hat Satellite 6.16 for RHEL 8 and 4 more · CVSS 4.3 Medium · Not analysed yet · Published 26 Aug 2026 · Tags: Broken access control - [Pulpcore: pulpcore: relative_path_validator bypass via directory traversal in filesystemexport](https://agentprime.io/advisories/CVE-2026-12701.md) `CVE-2026-12701` · CVE record: Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8 and 4 more · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Jul 2026 · Tags: Path traversal - [Foreman: foreman: information disclosure via improper validation of nested request parameters](https://agentprime.io/advisories/CVE-2026-5138.md) `CVE-2026-5138` · CVE record: Red Hat Red Hat Satellite 6.16 for RHEL 8 and 4 more · CVSS 4.3 Medium · Not analysed yet · Published 1 Jul 2026 · Tags: Broken access control - [Foreman: foreman: unauthorized modification of host configurations via broken access control](https://agentprime.io/advisories/CVE-2026-5135.md) `CVE-2026-5135` · CVE record: Red Hat Red Hat Satellite 6.16 for RHEL 8 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 1 Jul 2026 · Tags: Broken access control - [Foreman: foreman: cross-tenant private ssh key disclosure via taxonomy scoping bypass](https://agentprime.io/advisories/CVE-2026-5142.md) `CVE-2026-5142` · CVE record: Red Hat Red Hat Satellite 6.16 for RHEL 8 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 1 Jul 2026 · Tags: Broken access control - [Foreman: foreman: privilege escalation to administrator-level access via usergroup role assignment manipulation](https://agentprime.io/advisories/CVE-2026-5136.md) `CVE-2026-5136` · CVE record: Red Hat Red Hat Satellite 6.16 for RHEL 8 and 4 more · CVSS 8.8 High · Not analysed yet · Published 1 Jul 2026 · Tags: Privilege escalation - [Forman: foreman: remote code execution via command injection in websocket proxy](https://agentprime.io/advisories/CVE-2026-1961.md) `CVE-2026-1961` · CVE record: Red Hat Red Hat Satellite 6.16 for RHEL 8 and 4 more · CVSS 8.0 High · Not analysed yet · Published 26 Mar 2026 · Tags: Command injection - [Foreman: satellite: graphql api permission bypass leads to information disclosure](https://agentprime.io/advisories/CVE-2025-9572.md) `CVE-2025-9572` · CVE record: The Foreman Foreman and 4 more · CVSS 5.0 Medium · Not analysed yet · Published 27 Feb 2026 · Tags: Broken access control - [Foreman: os command injection via ct_location and fcct_location parameters](https://agentprime.io/advisories/CVE-2025-10622.md) `CVE-2025-10622` · CVE record: The Foreman Foreman and 4 more · CVSS 8.0 High · Not analysed yet · Published 5 Nov 2025 · Tags: Command injection - [Foreman: read-only access to entire db from templates](https://agentprime.io/advisories/CVE-2024-8553.md) `CVE-2024-8553` · CVE record: Red Hat Red Hat Satellite 6.13 for RHEL 8 and 4 more · CVSS 6.3 Medium · Not analysed yet · Published 31 Oct 2024 · Tags: Information disclosure - [Puppet-pulpcore: an authentication bypass vulnerability exists in pulpcore](https://agentprime.io/advisories/CVE-2024-7923.md) `CVE-2024-7923` · CVE record: Red Hat Red Hat Satellite 6.13 for RHEL 8 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Sept 2024 · Tags: Authentication bypass - [Puppet-foreman: an authentication bypass vulnerability exists in foreman](https://agentprime.io/advisories/CVE-2024-7012.md) `CVE-2024-7012` · CVE record: Red Hat Red Hat Satellite 6.13 for RHEL 8 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Sept 2024 · Tags: Authentication bypass ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .