Skip to content

Vulnerabilities of Red Hat Red Hat Satellite 6.16 for RHEL 8

Is your version affected?

CVE Summary Score Published
CVE-2026-56098 A flaw was found in rubygem-katello 4.3 Medium Oct 1, 2026
CVE-2026-56097 A flaw was found in rubygem-katello 6.5 Medium Oct 1, 2026
CVE-2026-12542 A flaw was found in Foreman 5.3 Medium Oct 1, 2026
CVE-2026-12545 A flaw was found in rubygem-hammer_cli 6.7 Medium Oct 1, 2026
CVE-2026-96658 A flaw was found in Foreman 8.8 High Oct 1, 2026
CVE-2026-96659 A flaw was found in Foreman 9.1 Critical Oct 1, 2026
CVE-2026-12544 A flaw was found in Foreman 7.7 High Oct 1, 2026
CVE-2026-12541 A flaw was found in Foreman 8.2 High Oct 1, 2026
CVE-2026-12540 A flaw was found in Foreman 8.2 High Oct 1, 2026
CVE-2026-12423 A flaw was found in Foreman 7.5 High Oct 1, 2026
CVE-2026-12405 A flaw was found in rubygem-foreman_remote_execution 8.8 High Oct 1, 2026
CVE-2026-79654 A flaw was found in Katello where the Content View History API does not properly enforce authorization when accessing… 4.3 Medium Aug 26, 2026
CVE-2026-12701 A path traversal vulnerability was found in pulpcore 9.0 Critical Jul 20, 2026
CVE-2026-5138 A flaw was found in Foreman 4.3 Medium Jul 1, 2026
CVE-2026-5135 A flaw was found in Foreman 6.5 Medium Jul 1, 2026
CVE-2026-5142 A flaw was found in foreman 6.5 Medium Jul 1, 2026
CVE-2026-5136 A flaw was found in Foreman 8.8 High Jul 1, 2026
CVE-2026-54297 Faraday is an HTTP client library abstraction layer that provides a common interface over many adapters 7.5 High Jun 24, 2026
CVE-2026-12515 A flaw was found in Katello's of Red Hat Satellite 4.3 Medium Jun 17, 2026
CVE-2026-27145 (*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name… 6.5 Medium Jun 2, 2026
CVE-2026-34993 AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python 6.4 Medium Jun 2, 2026
CVE-2026-48526 PyJWT is a JSON Web Token implementation in Python 7.4 High May 28, 2026
CVE-2026-48864 Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data 7.8 High May 26, 2026
CVE-2026-39821 The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label 9.6 Critical May 22, 2026
CVE-2026-33811 When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a… 7.5 High May 7, 2026

Other Red Hat products