Vulnerabilities of Red Hat Red Hat Satellite 6.18 for RHEL 9

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-56098	A flaw was found in rubygem-katello	4.3 Medium	Oct 1, 2026
CVE-2026-56097	A flaw was found in rubygem-katello	6.5 Medium	Oct 1, 2026
CVE-2026-12542	A flaw was found in Foreman	5.3 Medium	Oct 1, 2026
CVE-2026-12545	A flaw was found in rubygem-hammer_cli	6.7 Medium	Oct 1, 2026
CVE-2026-96658	A flaw was found in Foreman	8.8 High	Oct 1, 2026
CVE-2026-96659	A flaw was found in Foreman	9.1 Critical	Oct 1, 2026
CVE-2026-12544	A flaw was found in Foreman	7.7 High	Oct 1, 2026
CVE-2026-12541	A flaw was found in Foreman	8.2 High	Oct 1, 2026
CVE-2026-12540	A flaw was found in Foreman	8.2 High	Oct 1, 2026
CVE-2026-12423	A flaw was found in Foreman	7.5 High	Oct 1, 2026
CVE-2026-12405	A flaw was found in rubygem-foreman_remote_execution	8.8 High	Oct 1, 2026
CVE-2026-79654	A flaw was found in Katello where the Content View History API does not properly enforce authorization when accessing…	4.3 Medium	Aug 26, 2026
CVE-2026-16493	Ansible-core: argument injection in ansible-galaxy collection install via git clone (incomplete fix for cve-2026-11332)	7.8 High	Jul 21, 2026
CVE-2026-12701	A path traversal vulnerability was found in pulpcore	9.0 Critical	Jul 20, 2026
CVE-2026-5138	A flaw was found in Foreman	4.3 Medium	Jul 1, 2026
CVE-2026-5135	A flaw was found in Foreman	6.5 Medium	Jul 1, 2026
CVE-2026-5142	A flaw was found in foreman	6.5 Medium	Jul 1, 2026
CVE-2026-5136	A flaw was found in Foreman	8.8 High	Jul 1, 2026
CVE-2026-54297	Faraday is an HTTP client library abstraction layer that provides a common interface over many adapters	7.5 High	Jun 24, 2026
CVE-2026-12515	A flaw was found in Katello's of Red Hat Satellite	4.3 Medium	Jun 17, 2026
CVE-2026-11332	Ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution	7.8 High	Jun 5, 2026
CVE-2026-27145	(*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name…	6.5 Medium	Jun 2, 2026
CVE-2026-34993	AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python	6.4 Medium	Jun 2, 2026
CVE-2026-48526	PyJWT is a JSON Web Token implementation in Python	7.4 High	May 28, 2026
CVE-2026-39821	The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label	9.6 Critical	May 22, 2026

Other Red Hat products