CVE-2023-0462: Red Hat Satellite

Critical severity, CVSS 9.1. EPSS: 1% chance of exploitation in the next 30 days.

An arbitrary code execution flaw was found in Foreman. This issue may allow an admin user to execute arbitrary code on the underlying operating system by setting global parameters with a YAML payload.

Affected products

• Red Hat Satellite: from 6.0
• Theforeman Foreman: before 3.8.0 (fixed in 3.8.0)

Published 2023-09-20. Last modified 2026-06-17.