Red Hat Satellite 6.17 for RHEL 9.

Rubygem-katello: improper authorization logic allows resource enumeration

• Red Hat Satellite 6.16 for RHEL 8
• Red Hat Satellite 6.16 for RHEL 9
• Information disclosure

Rubygem-katello: sql injection in registry proxy via labels

• Red Hat Satellite 6.16 for RHEL 8
• Red Hat Satellite 6.16 for RHEL 9
• SQL injection

Foreman: command injection in foreman-tail

• Red Hat Satellite 6.16 for RHEL 8
• Red Hat Satellite 6.16 for RHEL 9
• Command injection

Rubygem-hammer_cli: command injection via insecure editor invocation

• Red Hat Satellite 6.16 for RHEL 8
• Red Hat Satellite 6.16 for RHEL 9
• Command injection

Foreman: foreman: arbitrary code execution via safemode sandbox bypass

• Red Hat Satellite 6.16 for RHEL 8
• Red Hat Satellite 6.16 for RHEL 9
• Code injection

Foreman: excessive permissions for viewer role on preview

• Red Hat Satellite 6.16 for RHEL 8
• Red Hat Satellite 6.16 for RHEL 9
• Privilege escalation

Foreman: ssti and insecure deserialization in foreman-rake configuration

• Red Hat Satellite 6.16 for RHEL 8
• Red Hat Satellite 6.16 for RHEL 9
• Insecure deserialization

Foreman: command injection in foreman-rake database tasks

• Red Hat Satellite 6.16 for RHEL 8
• Red Hat Satellite 6.16 for RHEL 9
• Command injection

Foreman: command injection in foreman-rake errors:fetch_log via request_id parameter

• Red Hat Satellite 6.16 for RHEL 8
• Red Hat Satellite 6.16 for RHEL 9
• Command injection

Foreman: unauthenticated information disclosure via provisioning token validation flaw

• Red Hat Satellite 6.16 for RHEL 8
• Red Hat Satellite 6.16 for RHEL 9
• Authentication bypass

Rubygem-foreman_remote_execution: command injection in job invocations via effective_user parameter

• Red Hat Satellite 6.16 for RHEL 8
• Red Hat Satellite 6.16 for RHEL 9
• Command injection

Ketello: katello content view history api cross-organization authorization bypass

• Red Hat Satellite 6.16 for RHEL 8
• Red Hat Satellite 6.16 for RHEL 9
• Broken access control

Ansible-core: argument injection in ansible-galaxy collection install via git clone (incomplete fix for cve-2026-11332)

• Red Hat Satellite 6.17 for RHEL 9
• Red Hat Satellite 6.18 for RHEL 9
• Command injection

Pulpcore: pulpcore: relative_path_validator bypass via directory traversal in filesystemexport

• Red Hat Ansible Automation Platform 2.5 for RHEL 8
• Red Hat Ansible Automation Platform 2.5 for RHEL 9
• Path traversal

Foreman: foreman: information disclosure via improper validation of nested request parameters

• Red Hat Satellite 6.16 for RHEL 8
• Red Hat Satellite 6.16 for RHEL 9
• Broken access control

Foreman: foreman: unauthorized modification of host configurations via broken access control

• Red Hat Satellite 6.16 for RHEL 8
• Red Hat Satellite 6.16 for RHEL 9
• Broken access control

Foreman: foreman: cross-tenant private ssh key disclosure via taxonomy scoping bypass

• Red Hat Satellite 6.16 for RHEL 8
• Red Hat Satellite 6.16 for RHEL 9
• Broken access control

Foreman: foreman: privilege escalation to administrator-level access via usergroup role assignment manipulation

• Red Hat Satellite 6.16 for RHEL 8
• Red Hat Satellite 6.16 for RHEL 9
• Privilege escalation

Forman: foreman: remote code execution via command injection in websocket proxy

• Red Hat Satellite 6.16 for RHEL 8
• Red Hat Satellite 6.16 for RHEL 9
• Command injection

Foreman: satellite: graphql api permission bypass leads to information disclosure

• Foreman
• Red Hat Satellite 6.15 for RHEL 8
• Broken access control

Foreman: os command injection via ct_location and fcct_location parameters

• Foreman
• Red Hat Satellite 6.15 for RHEL 8
• Command injection