<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: red-hat-satellite-6-18-for-rhel-9</title><description>Every new CVE for red-hat-satellite-6-18-for-rhel-9.</description><link>https://agentprime.io/</link><item><title>CVE-2026-56098: Rubygem-katello: improper authorization logic allows resource enumeration</title><link>https://agentprime.io/advisories/CVE-2026-56098/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-56098/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 01 Oct 2026 17:14:56 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-56097: Rubygem-katello: sql injection in registry proxy via labels</title><link>https://agentprime.io/advisories/CVE-2026-56097/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-56097/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 01 Oct 2026 17:14:50 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-12542: Foreman: command injection in foreman-tail</title><link>https://agentprime.io/advisories/CVE-2026-12542/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-12542/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 01 Oct 2026 17:14:49 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-12545: Rubygem-hammer_cli: command injection via insecure editor invocation</title><link>https://agentprime.io/advisories/CVE-2026-12545/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-12545/</guid><description>CVSS 6.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 01 Oct 2026 17:14:49 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-96658: Foreman: foreman: arbitrary code execution via safemode sandbox bypass</title><link>https://agentprime.io/advisories/CVE-2026-96658/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-96658/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 01 Oct 2026 16:23:23 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-96659: Foreman: excessive permissions for viewer role on preview</title><link>https://agentprime.io/advisories/CVE-2026-96659/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-96659/</guid><description>CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 01 Oct 2026 16:23:23 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-12544: Foreman: ssti and insecure deserialization in foreman-rake configuration</title><link>https://agentprime.io/advisories/CVE-2026-12544/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-12544/</guid><description>CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 01 Oct 2026 16:22:15 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-12541: Foreman: command injection in foreman-rake database tasks</title><link>https://agentprime.io/advisories/CVE-2026-12541/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-12541/</guid><description>CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 01 Oct 2026 16:22:09 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-12540: Foreman: command injection in foreman-rake errors:fetch_log via request_id parameter</title><link>https://agentprime.io/advisories/CVE-2026-12540/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-12540/</guid><description>CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 01 Oct 2026 16:22:02 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-12423: Foreman: unauthenticated information disclosure via provisioning token validation flaw</title><link>https://agentprime.io/advisories/CVE-2026-12423/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-12423/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 01 Oct 2026 16:21:52 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-12405: Rubygem-foreman_remote_execution: command injection in job invocations via effective_user parameter</title><link>https://agentprime.io/advisories/CVE-2026-12405/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-12405/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 01 Oct 2026 16:21:44 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-79654: Ketello: katello content view history api cross-organization authorization bypass</title><link>https://agentprime.io/advisories/CVE-2026-79654/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-79654/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 26 Aug 2026 05:37:38 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-16493: Ansible-core: argument injection in ansible-galaxy collection install via git clone (incomplete fix for cve-2026-11332)</title><link>https://agentprime.io/advisories/CVE-2026-16493/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-16493/</guid><description>CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 21 Jul 2026 17:26:14 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-12701: Pulpcore: pulpcore: relative_path_validator bypass via directory traversal in filesystemexport</title><link>https://agentprime.io/advisories/CVE-2026-12701/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-12701/</guid><description>CVSS 9.0 (Critical). Critical: CVSS score 9.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 20 Jul 2026 14:18:18 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-5138: Foreman: foreman: information disclosure via improper validation of nested request parameters</title><link>https://agentprime.io/advisories/CVE-2026-5138/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-5138/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 01 Jul 2026 14:08:43 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-5135: Foreman: foreman: unauthorized modification of host configurations via broken access control</title><link>https://agentprime.io/advisories/CVE-2026-5135/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-5135/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 01 Jul 2026 14:08:39 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-5142: Foreman: foreman: cross-tenant private ssh key disclosure via taxonomy scoping bypass</title><link>https://agentprime.io/advisories/CVE-2026-5142/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-5142/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 01 Jul 2026 14:07:55 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-5136: Foreman: foreman: privilege escalation to administrator-level access via usergroup role assignment manipulation</title><link>https://agentprime.io/advisories/CVE-2026-5136/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-5136/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 01 Jul 2026 13:28:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-1961: Forman: foreman: remote code execution via command injection in websocket proxy</title><link>https://agentprime.io/advisories/CVE-2026-1961/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-1961/</guid><description>CVSS 8.0 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 26 Mar 2026 12:53:09 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-9572: Foreman: satellite: graphql api permission bypass leads to information disclosure</title><link>https://agentprime.io/advisories/CVE-2025-9572/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-9572/</guid><description>CVSS 5.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 27 Feb 2026 07:28:44 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-10622: Foreman: os command injection via ct_location and fcct_location parameters</title><link>https://agentprime.io/advisories/CVE-2025-10622/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-10622/</guid><description>CVSS 8.0 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 05 Nov 2025 07:32:14 GMT</pubDate><category>CVE</category></item></channel></rss>