# Red Hat Satellite 6. Every CVE that names Red Hat Satellite 6 among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first - [Org.keycloak/keycloak-admin-cli: keycloak-admin-cli: kcadm custom truststore accepts arbitrary self-signed certificates](https://agentprime.io/advisories/CVE-2026-96453.md) `CVE-2026-96453` · CVE record: Red Hat Red Hat AMQ Broker 7 and 4 more · CVSS 8.0 High · Not analysed yet · Published 5 Nov 2026 · Tags: Weak cryptography or TLS - [Keycloak-core: keycloak-core: saml adapter does not bind signed assertions to the configured identity provider issuer](https://agentprime.io/advisories/CVE-2026-93998.md) `CVE-2026-93998` · CVE record: Red Hat Red Hat AMQ Broker 7 and 4 more · CVSS 7.4 High · Not analysed yet · Published 5 Nov 2026 · Tags: Weak cryptography or TLS - [Org.jboss.resteasy/resteasy-core: resteasy: information disclosure through default exception mapper responses](https://agentprime.io/advisories/CVE-2026-120971.md) `CVE-2026-120971` · CVE record: Red Hat Red Hat build of Apache Camel 4 for Quarkus 3 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 3 Nov 2026 · Tags: Information disclosure - [Foreman: domain and subnet interface api skips host search filters](https://agentprime.io/advisories/CVE-2026-107203.md) `CVE-2026-107203` · CVE record: Red Hat Red Hat Satellite 6 · CVSS 5.4 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: Broken access control - [Foreman: api filter lookup ignores a search-limited filter permission](https://agentprime.io/advisories/CVE-2026-107193.md) `CVE-2026-107193` · CVE record: Red Hat Red Hat Satellite 6 · CVSS 6.5 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: Broken access control - [Ansible-core: ansible-core: ansible-galaxy collection install symlink path escape allows arbitrary file write / code execution](https://agentprime.io/advisories/CVE-2026-89091.md) `CVE-2026-89091` · CVE record: Red Hat Migration Toolkit for Applications 8 and 4 more · CVSS 8.8 High · Not analysed yet · Published 8 Oct 2026 · Tags: Path traversal - [Rubygem-katello: katello: katello: katello flatpak remote repositories api cross-organization authorization bypass](https://agentprime.io/advisories/CVE-2026-107445.md) `CVE-2026-107445` · CVE record: Red Hat Red Hat Hardened Images and 1 more · CVSS 5.4 Medium · Not analysed yet · Published 8 Oct 2026 · Tags: Broken access control - [Rubygem-katello: katello: katello: katello docker tags repositories api cross-organization authorization bypass](https://agentprime.io/advisories/CVE-2026-107444.md) `CVE-2026-107444` · CVE record: Red Hat Red Hat Hardened Images and 1 more · CVSS 4.3 Medium · Not analysed yet · Published 8 Oct 2026 · Tags: Broken access control - [Rubygem-smart_proxy_dynflow: task update and done callbacks accept unauthenticated requests](https://agentprime.io/advisories/CVE-2026-107151.md) `CVE-2026-107151` · CVE record: Red Hat Red Hat Satellite 6 · CVSS 5.9 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: Authentication bypass - [Pulp-rpm: distribution tree publish creates directories from .treeinfo ids](https://agentprime.io/advisories/CVE-2026-103870.md) `CVE-2026-103870` · CVE record: Red Hat Red Hat Satellite 6 and 2 more · CVSS 5.0 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: Path traversal - [Pulp-ansible: bearer tokens are reused across remotes in a worker](https://agentprime.io/advisories/CVE-2026-103869.md) `CVE-2026-103869` · CVE record: Red Hat Red Hat Ansible Automation Platform 2 and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: CWE-488 - [Pulp-container: registry credentials are reused across remotes in a worker](https://agentprime.io/advisories/CVE-2026-103868.md) `CVE-2026-103868` · CVE record: Red Hat Red Hat Ansible Automation Platform 2 and 3 more · CVSS 6.5 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: CWE-488 - [Candlepin: candlepin: broken object-level authorization via verifyauthorizationfilter multi-@verify hasaccess latching](https://agentprime.io/advisories/CVE-2026-106471.md) `CVE-2026-106471` · CVE record: Red Hat Red Hat Satellite 6 · CVSS 8.1 High · Not analysed yet · Published 7 Oct 2026 · Tags: Broken access control - [Rubygem-katello: improper authorization logic allows resource enumeration](https://agentprime.io/advisories/CVE-2026-56098.md) `CVE-2026-56098` · CVE record: Red Hat Red Hat Satellite 6.16 for RHEL 8 and 4 more · CVSS 4.3 Medium · Not analysed yet · Published 1 Oct 2026 · Tags: Information disclosure - [Rubygem-katello: sql injection in registry proxy via labels](https://agentprime.io/advisories/CVE-2026-56097.md) `CVE-2026-56097` · CVE record: Red Hat Red Hat Satellite 6.16 for RHEL 8 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 1 Oct 2026 · Tags: SQL injection - [Foreman: command injection in foreman-tail](https://agentprime.io/advisories/CVE-2026-12542.md) `CVE-2026-12542` · CVE record: Red Hat Red Hat Satellite 6.16 for RHEL 8 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 1 Oct 2026 · Tags: Command injection - [Rubygem-hammer_cli: command injection via insecure editor invocation](https://agentprime.io/advisories/CVE-2026-12545.md) `CVE-2026-12545` · CVE record: Red Hat Red Hat Satellite 6.16 for RHEL 8 and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 1 Oct 2026 · Tags: Command injection - [Foreman: ssti and insecure deserialization in foreman-rake configuration](https://agentprime.io/advisories/CVE-2026-12544.md) `CVE-2026-12544` · CVE record: Red Hat Red Hat Satellite 6.16 for RHEL 8 and 4 more · CVSS 7.7 High · Not analysed yet · Published 1 Oct 2026 · Tags: Insecure deserialization - [Foreman: command injection in foreman-rake database tasks](https://agentprime.io/advisories/CVE-2026-12541.md) `CVE-2026-12541` · CVE record: Red Hat Red Hat Satellite 6.16 for RHEL 8 and 4 more · CVSS 8.2 High · Not analysed yet · Published 1 Oct 2026 · Tags: Command injection - [Foreman: command injection in foreman-rake errors:fetch_log via request_id parameter](https://agentprime.io/advisories/CVE-2026-12540.md) `CVE-2026-12540` · CVE record: Red Hat Red Hat Satellite 6.16 for RHEL 8 and 4 more · CVSS 8.2 High · Not analysed yet · Published 1 Oct 2026 · Tags: Command injection - [Foreman: unauthenticated information disclosure via provisioning token validation flaw](https://agentprime.io/advisories/CVE-2026-12423.md) `CVE-2026-12423` · CVE record: Red Hat Red Hat Satellite 6.16 for RHEL 8 and 4 more · CVSS 7.5 High · Not analysed yet · Published 1 Oct 2026 · Tags: Authentication bypass - [Rubygem-foreman_remote_execution: command injection in job invocations via effective_user parameter](https://agentprime.io/advisories/CVE-2026-12405.md) `CVE-2026-12405` · CVE record: Red Hat Red Hat Satellite 6.16 for RHEL 8 and 4 more · CVSS 8.8 High · Not analysed yet · Published 1 Oct 2026 · Tags: Command injection - [Pulpcore: pulpcore: file:// scheme allowlist bypass in content upload file_url field enables arbitrary file read and pulp container registry signing key theft](https://agentprime.io/advisories/CVE-2026-90959.md) `CVE-2026-90959` · CVE record: Red Hat Red Hat Ansible Automation Platform 2.6 for RHEL 9 and 4 more · CVSS 8.1 High · Not analysed yet · Published 24 Sept 2026 · Tags: Path traversal - [Rubygem-foreman_remote_execution: job output readable without object-level view_job_invocations check](https://agentprime.io/advisories/CVE-2026-92904.md) `CVE-2026-92904` · CVE record: Red Hat Red Hat Satellite 6 · CVSS 4.3 Medium · Not analysed yet · Published 17 Sept 2026 · Tags: Broken access control - [Rubygem-foreman_ansible: ansible inventory api ignores view_hosts permission filters, exposes hidden parameters](https://agentprime.io/advisories/CVE-2026-92893.md) `CVE-2026-92893` · CVE record: Red Hat Red Hat Satellite 6 · CVSS 4.3 Medium · Not analysed yet · Published 17 Sept 2026 · Tags: Broken access control - [Rubygem-foreman_ansible: unscoped lookupvalue deletion allows cross-model override value destruction](https://agentprime.io/advisories/CVE-2026-92894.md) `CVE-2026-92894` · CVE record: Red Hat Red Hat Satellite 6 · CVSS 4.3 Medium · Not analysed yet · Published 17 Sept 2026 · Tags: Broken access control - [Sequoia-openpgp: sequoia-openpgp: cryptographic integrity compromise via key flag confusion](https://agentprime.io/advisories/CVE-2026-42784.md) `CVE-2026-42784` · CVE record: Red Hat Red Hat Ansible Automation Platform 2.6 for RHEL 9 and 4 more · CVSS 7.4 High · Not analysed yet · Published 16 Sept 2026 · Tags: Weak cryptography or TLS - [Pulpcore: python-pulpcore: stored cross-site scripting via inline rendering of uploaded html/svg content](https://agentprime.io/advisories/CVE-2026-84232.md) `CVE-2026-84232` · CVE record: Red Hat Red Hat Ansible Automation Platform 2 and 3 more · CVSS 5.4 Medium · Not analysed yet · Published 1 Sept 2026 · Tags: Cross-site scripting (XSS) - [Resteasy-core: resteasy sourceprovider remote unauthenticated file read](https://agentprime.io/advisories/CVE-2026-17615.md) `CVE-2026-17615` · CVE record: Red Hat Red Hat Build of Apache Camel 3.33.3.SP1 and 4 more · CVSS 7.5 High · Not analysed yet · Published 31 Aug 2026 · Tags: XML external entities (XXE) - [Libsolv: libsolv: out-of-bounds write in repo_write() via unvalidated directory id from vertical/paged .solv filelist data](https://agentprime.io/advisories/CVE-2026-82327.md) `CVE-2026-82327` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 28 Aug 2026 · Tags: CWE-129 - [Rubygem-katello: cross-tenant content view filter rule access and modification via unauthorized parent filter lookup](https://agentprime.io/advisories/CVE-2026-81668.md) `CVE-2026-81668` · CVE record: Red Hat Red Hat Satellite 6 · CVSS 5.4 Medium · Not analysed yet · Published 27 Aug 2026 · Tags: Broken access control - [Foreman: cross-tenant disclosure of template revisions via unauthorized audit lookup](https://agentprime.io/advisories/CVE-2026-81658.md) `CVE-2026-81658` · CVE record: Red Hat Red Hat Satellite 6 · CVSS 6.5 Medium · Not analysed yet · Published 27 Aug 2026 · Tags: Broken access control - [Ketello: katello content view history api cross-organization authorization bypass](https://agentprime.io/advisories/CVE-2026-79654.md) `CVE-2026-79654` · CVE record: Red Hat Red Hat Satellite 6.16 for RHEL 8 and 4 more · CVSS 4.3 Medium · Not analysed yet · Published 26 Aug 2026 · Tags: Broken access control - [Insights-core: insights-core: incomplete credential redaction exposes sssd bind passwords and pacemaker fence credentials in uploaded archives](https://agentprime.io/advisories/CVE-2026-19391.md) `CVE-2026-19391` · CVE record: Red Hat Pen Drive Powered by Red Hat Lightspeed and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 11 Aug 2026 · Tags: Information disclosure - [Libsolv: stack-based buffer overflow in libsolv eddsa pgp signature verification allows denial of service](https://agentprime.io/advisories/CVE-2026-48863.md) `CVE-2026-48863` · CVE record: OpenSUSE libsolv and 4 more · CVSS 7.5 High · Not analysed yet · Published 16 Jul 2026 · Tags: Memory corruption - [Foreman: foreman: information disclosure via improper validation of nested request parameters](https://agentprime.io/advisories/CVE-2026-5138.md) `CVE-2026-5138` · CVE record: Red Hat Red Hat Satellite 6.16 for RHEL 8 and 4 more · CVSS 4.3 Medium · Not analysed yet · Published 1 Jul 2026 · Tags: Broken access control - [Foreman: foreman: unauthorized modification of host configurations via broken access control](https://agentprime.io/advisories/CVE-2026-5135.md) `CVE-2026-5135` · CVE record: Red Hat Red Hat Satellite 6.16 for RHEL 8 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 1 Jul 2026 · Tags: Broken access control - [Foreman: foreman: cross-tenant private ssh key disclosure via taxonomy scoping bypass](https://agentprime.io/advisories/CVE-2026-5142.md) `CVE-2026-5142` · CVE record: Red Hat Red Hat Satellite 6.16 for RHEL 8 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 1 Jul 2026 · Tags: Broken access control - [Foreman: foreman: privilege escalation to administrator-level access via usergroup role assignment manipulation](https://agentprime.io/advisories/CVE-2026-5136.md) `CVE-2026-5136` · CVE record: Red Hat Red Hat Satellite 6.16 for RHEL 8 and 4 more · CVSS 8.8 High · Not analysed yet · Published 1 Jul 2026 · Tags: Privilege escalation - [Foreman: ssrf to cloud metada service through unvalidated test_url parameters in foreman config](https://agentprime.io/advisories/CVE-2026-13316.md) `CVE-2026-13316` · CVE record: Red Hat Red Hat Satellite 6 · CVSS 4.4 Medium · Not analysed yet · Published 30 Jun 2026 · Tags: Server-side request forgery (SSRF) - [Libsolv: heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv file](https://agentprime.io/advisories/CVE-2026-9149.md) `CVE-2026-9149` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 20 May 2026 · Tags: Memory corruption - [Libsolv: stack-based buffer overflow in libsolv's debian metadata parser when handling sha384/sha512 checksums](https://agentprime.io/advisories/CVE-2026-9150.md) `CVE-2026-9150` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 20 May 2026 · Tags: Memory corruption - [Forman: foreman: remote code execution via command injection in websocket proxy](https://agentprime.io/advisories/CVE-2026-1961.md) `CVE-2026-1961` · CVE record: Red Hat Red Hat Satellite 6.16 for RHEL 8 and 4 more · CVSS 8.0 High · Not analysed yet · Published 26 Mar 2026 · Tags: Command injection - [Foreman: os command injection via ct_location and fcct_location parameters](https://agentprime.io/advisories/CVE-2025-10622.md) `CVE-2025-10622` · CVE record: The Foreman Foreman and 4 more · CVSS 8.0 High · Not analysed yet · Published 5 Nov 2025 · Tags: Command injection - [Foreman: disclosure of executed commands and outputs in foreman / red hat satellite](https://agentprime.io/advisories/CVE-2025-2157.md) `CVE-2025-2157` · CVE record: Red Hat Satellite Server and 1 more · CVSS 3.3 Low · Not analysed yet · Published 15 Mar 2025 · Tags: Information disclosure - [Foreman: foreman: oauth secret exposure via unauthenticated access to the graphql api](https://agentprime.io/advisories/CVE-2024-6861.md) `CVE-2024-6861` · CVE record: Red Hat Red Hat Satellite 6.12 for RHEL 8 and 1 more · CVSS 7.5 High · Not analysed yet · Published 6 Nov 2024 · Tags: Information disclosure - [Foreman: command injection in "host init config" template via "install packages" field on foreman](https://agentprime.io/advisories/CVE-2024-7700.md) `CVE-2024-7700` · CVE record: Red Hat Red Hat Satellite 6 · CVSS 6.5 Medium · Not analysed yet · Published 12 Aug 2024 · Tags: Command injection - [Katello: potential cross-site scripting exploit in ui](https://agentprime.io/advisories/CVE-2024-4812.md) `CVE-2024-4812` · CVE record: Red Hat Red Hat Satellite 6 · CVSS 4.8 Medium · Not analysed yet · Published 5 Jun 2024 · Tags: Cross-site scripting (XSS) - [Foreman-installer: candlepin database password being leaked to local users via the process list](https://agentprime.io/advisories/CVE-2024-3716.md) `CVE-2024-3716` · CVE record: Red Hat Red Hat Satellite 6 · CVSS 6.2 Medium · Not analysed yet · Published 5 Jun 2024 · Tags: Information disclosure - [Improper authorization check in the server component](https://agentprime.io/advisories/CVE-2023-1832.md) `CVE-2023-1832` · CVE record: candlepin-4.3.7 and 2 more · CVSS 6.8 Medium · Not analysed yet · Published 4 Oct 2023 · Tags: Broken access control - [Arbitrary code execution through yaml global parameters](https://agentprime.io/advisories/CVE-2023-0462.md) `CVE-2023-0462` · CVE record: foreman and 1 more · CVSS 8.0 High · Not analysed yet · Published 20 Sept 2023 · Tags: Code injection - [Red Hat Satellite 6: Versions of Foreman as shipped with Red Hat Satellite 6 does not check for a correct CSRF…](https://agentprime.io/advisories/CVE-2014-3590.md) `CVE-2014-3590` · CVE record: Red Hat Satellite 6 Red Hat Satellite 6 · No CVSS score · Not analysed yet · Published 2 Jan 2020 - [Rhn-proxy: rhn-satellite: rhn-proxy: information disclosure via clear-text credential transmission when accessing rhn satellite](https://agentprime.io/advisories/CVE-2012-5562.md) `CVE-2012-5562` · CVE record: Red Hat Red Hat Satellite Proxy v 5.6 and 1 more · CVSS 8.6 High · Not analysed yet · Published 2 Dec 2019 · Tags: Weak cryptography or TLS - [Red hat network satellite: red hat network satellite: information disclosure via inter-satellite sync (iss) authentication bypass](https://agentprime.io/advisories/CVE-2013-2056.md) `CVE-2013-2056` · CVE record: Red Hat Red Hat Network Satellite Server v 5.3 and 3 more · CVSS 7.5 High · Not analysed yet · Published 31 Jul 2013 · Tags: Authentication bypass - [Satellite: xss in custom system information key handling](https://agentprime.io/advisories/CVE-2011-4346.md) `CVE-2011-4346` · CVE record: Red Hat Red Hat Network Satellite Server v 5.4 and 1 more · CVSS 4.6 Medium · Not analysed yet · Published 10 Dec 2011 · Tags: Cross-site scripting (XSS) ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .