Red Hat Satellite 6 vulnerabilities

65 CVEs affecting Red Hat Satellite 6, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-107203, published 2026-10-12.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-24293, published 2026-01-30. High severity, CVSS 8.1. EPSS: 5.5% chance of exploitation in the next 30 days. # Active Storage allowed transformation methods potentially unsafe Active Storage attempts to prevent the use of potentially unsafe image transformation methods and parameters by default. The…
CVE-2026-27830, published 2026-02-26. High severity, CVSS 8.0. EPSS: 2% chance of exploitation in the next 30 days. c3p0, a JDBC Connection pooling library, is vulnerable to attack via maliciously crafted Java-serialized objects and `javax.naming.Reference` instances. Several c3p0 `ConnectionPoolDataSource`…
CVE-2026-12405, published 2026-10-01. High severity, CVSS 8.8. EPSS: 1.5% chance of exploitation in the next 30 days. A flaw was found in rubygem-foreman_remote_execution. A command injection vulnerability exists in the Red Hat Satellite API (/api/v2/job_invocations). When a job template has the effective_user…
CVE-2026-1961, published 2026-03-26. High severity, CVSS 8.0. EPSS: 1.4% chance of exploitation in the next 30 days. A flaw was found in Foreman. A remote attacker could exploit a command injection vulnerability in Foreman's WebSocket proxy implementation. This vulnerability arises from the system's use of…
CVE-2024-11831, published 2025-02-10. Medium severity, CVSS 5.4. EPSS: 1.1% chance of exploitation in the next 30 days. A flaw was found in npm-serialize-javascript. The vulnerability occurs because the serialize-javascript module does not properly sanitize certain inputs, such as regex or other JavaScript object…
CVE-2026-28356, published 2026-03-12. High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days. multipart is a fast multipart/form-data parser for python. Prior to 1.2.2, 1.3.1 and 1.4.0-dev, the parse_options_header() function in multipart.py uses a regular expression with an ambiguous…
CVE-2026-0603, published 2026-01-23. High severity, CVSS 8.3. EPSS: 1% chance of exploitation in the next 30 days. A flaw was found in Hibernate. A remote attacker with low privileges could exploit a second-order SQL injection vulnerability by providing specially crafted, unsanitized non-alphanumeric characters…
CVE-2025-4432, published 2025-05-09. Medium severity, CVSS 5.3. EPSS: 1% chance of exploitation in the next 30 days. A flaw was found in Rust's Ring package. A panic may be triggered when overflow checking is enabled. In the QUIC protocol, this flaw allows an attacker to induce this panic by sending a specially…
CVE-2026-31072, published 2026-05-19. Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days. The JSONSerializer and CBORSerializer in APScheduler (all versions including 3.10.x and 4.0.0a5) are vulnerable to Remote Code Execution (RCE) via Insecure Deserialization. The unmarshal_object…
CVE-2026-5598, published 2026-04-15. High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days. Covert timing channel vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA core on all (core modules). This vulnerability is associated with program files FrodoEngine.Java. This issue…

Latest

CVE-2026-107203, published 2026-10-12. Medium severity, CVSS 5.4. EPSS: 0.2% chance of exploitation in the next 30 days. An **incorrect authorization** flaw has been found in **network interface handling** in the **Foreman** package. The domain and subnet interface API checks only that the caller holds a host…
CVE-2026-107193, published 2026-10-12. Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days. A flaw has been found in **permission filters** in the **foreman** package. The API loads a filter by its identifier and does not apply the search limit on the caller's permission. A low-privileged…
CVE-2026-89091, published 2026-10-08. High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days. A flaw was found in ansible-core. When installing a collection with `ansible-galaxy collection install`, the archive extractor validates member paths using lexical path normalisation…
CVE-2026-107445, published 2026-10-08. Medium severity, CVSS 5.4. EPSS: 0.2% chance of exploitation in the next 30 days. A flaw was found in Katello where the Flatpak Remote Repositories API does not properly enforce authorization when accessing a flatpak remote repository by identifier. An authenticated user with…
CVE-2026-107444, published 2026-10-08. Medium severity, CVSS 4.3. EPSS: 0.2% chance of exploitation in the next 30 days. A flaw was found in Katello where the Docker Tags repositories API does not properly enforce organization scoping when listing repositories for a Docker meta tag. An authenticated user with…
CVE-2026-107151, published 2026-10-07. Medium severity, CVSS 5.9. EPSS: 0.4% chance of exploitation in the next 30 days. Missing authentication has been found in remote-execution task updates in the smart_proxy_dynflow package. The progress and completion callbacks accept a report when the one-time token is missing. A…
CVE-2026-103870, published 2026-10-07. Medium severity, CVSS 5.0. EPSS: 0.2% chance of exploitation in the next 30 days. A flaw was found in pulp-rpm when it publishes a distribution tree. Addon and variant ids from .treeinfo are used as directory names. A user who can sync or upload that tree can make the publish task…
CVE-2026-103869, published 2026-10-07. Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days. A flaw was found in pulp-ansible's bearer-token refresh for collection remotes. The access token is kept in one module-level variable and reused for every token download in that worker. A user who…
CVE-2026-103868, published 2026-10-07. Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days. A flaw was found in pulp-container when it authenticates to an upstream registry. Basic and bearer credentials from one remote are reused for later downloads in the same worker. A user who can sync a…
CVE-2026-106471, published 2026-10-07. High severity, CVSS 8.1. EPSS: 0.3% chance of exploitation in the next 30 days. A flaw was found in Candlepin. The central authorization filter incorrectly grants access when any one of multiple @Verify-annotated parameters is accessible, instead of requiring access to every…