Vulnerabilities of Red Hat Red Hat Satellite 6.16 for RHEL 9

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-56098	A flaw was found in rubygem-katello	4.3 Medium	Oct 1, 2026
CVE-2026-56097	A flaw was found in rubygem-katello	6.5 Medium	Oct 1, 2026
CVE-2026-12542	A flaw was found in Foreman	5.3 Medium	Oct 1, 2026
CVE-2026-12545	A flaw was found in rubygem-hammer_cli	6.7 Medium	Oct 1, 2026
CVE-2026-96658	A flaw was found in Foreman	8.8 High	Oct 1, 2026
CVE-2026-96659	A flaw was found in Foreman	9.1 Critical	Oct 1, 2026
CVE-2026-12544	A flaw was found in Foreman	7.7 High	Oct 1, 2026
CVE-2026-12541	A flaw was found in Foreman	8.2 High	Oct 1, 2026
CVE-2026-12540	A flaw was found in Foreman	8.2 High	Oct 1, 2026
CVE-2026-12423	A flaw was found in Foreman	7.5 High	Oct 1, 2026
CVE-2026-12405	A flaw was found in rubygem-foreman_remote_execution	8.8 High	Oct 1, 2026
CVE-2026-79654	A flaw was found in Katello where the Content View History API does not properly enforce authorization when accessing…	4.3 Medium	Aug 26, 2026
CVE-2026-12701	A path traversal vulnerability was found in pulpcore	9.0 Critical	Jul 20, 2026
CVE-2026-5138	A flaw was found in Foreman	4.3 Medium	Jul 1, 2026
CVE-2026-5135	A flaw was found in Foreman	6.5 Medium	Jul 1, 2026
CVE-2026-5142	A flaw was found in foreman	6.5 Medium	Jul 1, 2026
CVE-2026-5136	A flaw was found in Foreman	8.8 High	Jul 1, 2026
CVE-2026-54297	Faraday is an HTTP client library abstraction layer that provides a common interface over many adapters	7.5 High	Jun 24, 2026
CVE-2026-12515	A flaw was found in Katello's of Red Hat Satellite	4.3 Medium	Jun 17, 2026
CVE-2026-27145	(*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name…	6.5 Medium	Jun 2, 2026
CVE-2026-34993	AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python	6.4 Medium	Jun 2, 2026
CVE-2026-48526	PyJWT is a JSON Web Token implementation in Python	7.4 High	May 28, 2026
CVE-2026-39821	The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label	9.6 Critical	May 22, 2026
CVE-2026-33811	When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a…	7.5 High	May 7, 2026
CVE-2026-40192	Pillow is a Python imaging library	8.7 High	Apr 15, 2026

Other Red Hat products