CVE-2026-13316: Red Hat Satellite

Medium severity, CVSS 4.4. EPSS: 0.2% chance of exploitation in the next 30 days.

A flaw has been found in foreman when HTTP parameters are modified in http_proxies_controller and http_proxy files. Attackers can perform an SSRF attack and steal cloud metadata service on AWS/GCP/Azure environment through foreman component.

Affected products

• Red Hat Satellite: from 6.0, up to and including 6.19
• Theforeman Foreman: affected versions not specified

Published 2026-06-30. Last modified 2026-07-06.