Red Hat Satellite vulnerabilities

241 CVEs affecting Red Hat Satellite, 5 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-12542, published 2026-10-01.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-44487: HTTP/2 Rapid Reset Attack Vulnerability, published 2023-10-10. High severity, CVSS 7.5. Actively exploited: in CISA KEV since 2023-10-10. EPSS: 100% chance of exploitation in the next 30 days. The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVE-2016-3427: Oracle Java SE and JRockit Unspecified Vulnerability, published 2016-04-21. Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2023-05-12. EPSS: 92.3% chance of exploitation in the next 30 days. Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality, integrity, and availability via…
CVE-2015-2590: Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability, published 2015-07-16. Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2022-03-03. EPSS: 25.5% chance of exploitation in the next 30 days. Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors…
CVE-2015-4902: Oracle Java SE Integrity Check Vulnerability, published 2015-10-22. Medium severity, CVSS 5.3. Actively exploited: in CISA KEV since 2022-03-03. EPSS: 13.6% chance of exploitation in the next 30 days. Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60 allows remote attackers to affect integrity via unknown vectors related to Deployment.
CVE-2026-48710: Kludex Starlette HTTP Request/Response Smuggling Vulnerability, published 2026-05-26. Medium severity, CVSS 6.5. Actively exploited: in CISA KEV since 2026-09-02. EPSS: 7.1% chance of exploitation in the next 30 days. Starlette is a lightweight ASGI framework/toolkit. Prior to version 1.0.1, the HTTP `Host` request header was not validated before being used to reconstruct `request.url`. Because the routing…
CVE-2015-2808, published 2015-04-01. Low severity, CVSS 3.7. EPSS: 73.9% chance of exploitation in the next 30 days. The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initialization phase, which makes it easier for remote attackers to…
CVE-2018-10931, published 2018-08-09. Critical severity, CVSS 9.8. EPSS: 68.1% chance of exploitation in the next 30 days. It was found that cobbler 2.6.x exposed all functions from its CobblerXMLRPCInterface class over XMLRPC. A remote, unauthenticated attacker could use this flaw to gain high privileges within cobbler,…
CVE-2019-2684, published 2019-04-23. Medium severity, CVSS 5.9. EPSS: 37.6% chance of exploitation in the next 30 days. Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 7u211, 8u202, 11.0.2 and 12; Java SE Embedded: 8u201.…
CVE-2017-10355, published 2017-10-19. Medium severity, CVSS 5.3. EPSS: 16.2% chance of exploitation in the next 30 days. Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE…
CVE-2018-2799, published 2018-04-19. Medium severity, CVSS 5.3. EPSS: 14.8% chance of exploitation in the next 30 days. Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 7u171, 8u162 and 10; Java SE Embedded:…

Latest

CVE-2026-12542, published 2026-10-01. High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days. A flaw was found in Foreman. The foreman-tail utility is vulnerable to OS command injection due to the unsafe use of the eval command. The script takes user-supplied arguments and incorporates them…
CVE-2026-96659, published 2026-10-01. Critical severity, CVSS 9.1. EPSS: 0.3% chance of exploitation in the next 30 days. A flaw was found in Foreman. This vulnerability allows an authenticated user with low-level Viewer permissions to cause unauthorized information disclosure by submitting requests to template preview…
CVE-2026-96658, published 2026-10-01. Critical severity, CVSS 9.9. EPSS: 0.7% chance of exploitation in the next 30 days. A flaw was found in Foreman. An authenticated attacker with low-level permissions can achieve remote code execution (RCE) by bypassing the safemode sandbox within the templating engine. Due to…
CVE-2026-12544, published 2026-10-01. High severity, CVSS 7.7. EPSS: 0.2% chance of exploitation in the next 30 days. A flaw was found in Foreman. The foreman-rake initialization logic in /usr/share/foreman/config/settings.rb contains a vulnerable code pattern where configuration data is processed through two…
CVE-2026-12541, published 2026-10-01. High severity, CVSS 8.2. EPSS: 1.2% chance of exploitation in the next 30 days. A flaw was found in Foreman. OS command injection vulnerabilities exist in the foreman-rake db:dump and db:import_dump tasks. The application fails to properly sanitize user-supplied input in the…
CVE-2026-12540, published 2026-10-01. High severity, CVSS 8.2. EPSS: 1.2% chance of exploitation in the next 30 days. A flaw was found in Foreman. A command injection vulnerability exists in the foreman-rake errors:fetch_log task. The request_id parameter is passed to an underlying system command (typically grep)…
CVE-2026-12423, published 2026-10-01. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. A flaw was found in Foreman. The Red Hat Satellite /unattended/provision API endpoint is vulnerable to an authentication bypass due to a semantic logic flaw in host_verifier.rb. The application…
CVE-2026-81658, published 2026-08-27. Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days. A flaw was found in Foreman. The template revision endpoint does not enforce object-level authorization when retrieving an audited template revision. An authenticated, low privileged user with a…
CVE-2026-5142, published 2026-07-01. Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days. A flaw was found in foreman. Authenticated users with 'view_keypairs' permission can bypass taxonomy scoping, allowing them to download private SSH (Secure Shell) keys from other organizations by…
CVE-2026-5138, published 2026-07-01. Medium severity, CVSS 4.3. EPSS: 0.4% chance of exploitation in the next 30 days. A flaw was found in Foreman. An authenticated user with host-edit permissions could exploit a cross-tenant information disclosure vulnerability. This flaw occurs because the taxonomy_scope controller…