IP-DB.com
Türkçe English Deutsch Español
Anmelden API-Schlüssel holen

satellite Schwachstellen (CVE)

Für satellite veröffentlichte CVE-Einträge, neueste zuerst. Folgen Sie, um bei neuen Einträgen eine E-Mail zu erhalten.

6.18 796.19 486.16 466.17 456.15 2
91 Ergebnisse
4.3Mittel
CVE-2026-56098

Rubygem-katello: improper authorization logic allows resource enumeration

Red Hat Red Hat Satellite 6.16 for RHEL 8; Red Hat Red Hat Satellite 6.16 for RHEL 9; Red Hat Red Hat Satellite 6.17 for RHEL 9; Red Hat Red Hat Satellite 6.18 for RHEL 9

A flaw was found in rubygem-katello. The RegistryProxiesController in Katello contains an authorization bypass vulnerability due to an execution fall-through in the registry_authorize filter. While the application identifies unauthorized requests and triggers…

6.5Mittel
CVE-2026-56097

Rubygem-katello: sql injection in registry proxy via labels

Red Hat Red Hat Satellite 6.16 for RHEL 8; Red Hat Red Hat Satellite 6.16 for RHEL 9; Red Hat Red Hat Satellite 6.17 for RHEL 9; Red Hat Red Hat Satellite 6.18 for RHEL 9

A flaw was found in rubygem-katello. An SQL injection vulnerability exists in the Red Hat Satellite Katello Registry Proxy. The application fails to sanitize input parameters used in database queries within the RegistryProxiesController. The methods check_blo…

6.7Mittel
CVE-2026-12545

Rubygem-hammer_cli: command injection via insecure editor invocation

Red Hat Red Hat Satellite 6.16 for RHEL 8; Red Hat Red Hat Satellite 6.16 for RHEL 9; Red Hat Red Hat Satellite 6.17 for RHEL 9; Red Hat Red Hat Satellite 6.18 for RHEL 9

A flaw was found in rubygem-hammer_cli. A command injection vulnerability exists in Hammer CLI and the Railties (Ruby on Rails) component distributed with Satellite due to the insecure interpolation of the $EDITOR environment variable into the Ruby system() m…

5.3Mittel
CVE-2026-12542

Foreman: command injection in foreman-tail

Red Hat Red Hat Satellite 6.16 for RHEL 8; Red Hat Red Hat Satellite 6.16 for RHEL 9; Red Hat Red Hat Satellite 6.17 for RHEL 9; Red Hat Red Hat Satellite 6.18 for RHEL 9

A flaw was found in Foreman. The foreman-tail utility is vulnerable to OS command injection due to the unsafe use of the eval command. The script takes user-supplied arguments and incorporates them directly into a string that is then executed by eval to expan…

9.1Kritisch
CVE-2026-96659

Foreman: excessive permissions for viewer role on preview

Red Hat Red Hat Satellite 6.16 for RHEL 8; Red Hat Red Hat Satellite 6.16 for RHEL 9; Red Hat Red Hat Satellite 6.17 for RHEL 9; Red Hat Red Hat Satellite 6.18 for RHEL 9

A flaw was found in Foreman. This vulnerability allows an authenticated user with low-level Viewer permissions to cause unauthorized information disclosure by submitting requests to template preview endpoints. By exploiting this issue, the user can access sen…

8.8Hoch
CVE-2026-96658

Foreman: foreman: arbitrary code execution via safemode sandbox bypass

Red Hat Red Hat Satellite 6.16 for RHEL 8; Red Hat Red Hat Satellite 6.16 for RHEL 9; Red Hat Red Hat Satellite 6.17 for RHEL 9; Red Hat Red Hat Satellite 6.18 for RHEL 9

A flaw was found in Foreman. This vulnerability allows an authenticated remote attacker with low-level read permissions to achieve arbitrary code execution on the underlying server. By manipulating the permitted methods list within the template rendering engi…

7.7Hoch
CVE-2026-12544

Foreman: ssti and insecure deserialization in foreman-rake configuration

Red Hat Red Hat Satellite 6.16 for RHEL 8; Red Hat Red Hat Satellite 6.16 for RHEL 9; Red Hat Red Hat Satellite 6.17 for RHEL 9; Red Hat Red Hat Satellite 6.18 for RHEL 9

A flaw was found in Foreman. The foreman-rake initialization logic in /usr/share/foreman/config/settings.rb contains a vulnerable code pattern where configuration data is processed through two distinct executable layers. This creates a multi-stage execution c…

8.2Hoch
CVE-2026-12541

Foreman: command injection in foreman-rake database tasks

Red Hat Red Hat Satellite 6.16 for RHEL 8; Red Hat Red Hat Satellite 6.16 for RHEL 9; Red Hat Red Hat Satellite 6.17 for RHEL 9; Red Hat Red Hat Satellite 6.18 for RHEL 9

A flaw was found in Foreman. OS command injection vulnerabilities exist in the foreman-rake db:dump and db:import_dump tasks. The application fails to properly sanitize user-supplied input in the destination parameter (during backups) and the file parameter (…

1.2%EPSS
8.2Hoch
CVE-2026-12540

Foreman: command injection in foreman-rake errors:fetch_log via request_id parameter

Red Hat Red Hat Satellite 6.16 for RHEL 8; Red Hat Red Hat Satellite 6.16 for RHEL 9; Red Hat Red Hat Satellite 6.17 for RHEL 9; Red Hat Red Hat Satellite 6.18 for RHEL 9

A flaw was found in Foreman. A command injection vulnerability exists in the foreman-rake errors:fetch_log task. The request_id parameter is passed to an underlying system command (typically grep) without adequate shell neutralization. While the task is inten…

1.2%EPSS
7.5Hoch
CVE-2026-12423

Foreman: unauthenticated information disclosure via provisioning token validation flaw

Red Hat Red Hat Satellite 6.16 for RHEL 8; Red Hat Red Hat Satellite 6.16 for RHEL 9; Red Hat Red Hat Satellite 6.17 for RHEL 9; Red Hat Red Hat Satellite 6.18 for RHEL 9

A flaw was found in Foreman. The Red Hat Satellite /unattended/provision API endpoint is vulnerable to an authentication bypass due to a semantic logic flaw in host_verifier.rb. The application verifies the database state of a provisioning token rather than i…

8.8Hoch
CVE-2026-12405

Rubygem-foreman_remote_execution: command injection in job invocations via effective_user parameter

Red Hat Red Hat Satellite 6.16 for RHEL 8; Red Hat Red Hat Satellite 6.16 for RHEL 9; Red Hat Red Hat Satellite 6.17 for RHEL 9; Red Hat Red Hat Satellite 6.18 for RHEL 9

A flaw was found in rubygem-foreman_remote_execution. A command injection vulnerability exists in the Red Hat Satellite API (/api/v2/job_invocations). When a job template has the effective_user property marked as overridable: true, the application fails to pr…

1.6%EPSS
4.3Mittel
CVE-2026-79654

Ketello: katello content view history api cross-organization authorization bypass

Red Hat Red Hat Satellite 6.16 for RHEL 8; Red Hat Red Hat Satellite 6.16 for RHEL 9; Red Hat Red Hat Satellite 6.17 for RHEL 9; Red Hat Red Hat Satellite 6.18 for RHEL 9

A flaw was found in Katello where the Content View History API does not properly enforce authorization when accessing a Content View specified by the user. An authenticated user with permission to view Content Views in one organization may be able to access t…

7.8Hoch
CVE-2026-16493

Ansible-core: argument injection in ansible-galaxy collection install via git clone (incomplete fix for cve-2026-11332)

Red Hat Red Hat Satellite 6.17 for RHEL 9; Red Hat Red Hat Satellite 6.18 for RHEL 9; Red Hat Red Hat Satellite 6.19 for RHEL 9; Red Hat Red Hat Ansible Automation Platform 2

A flaw was found in ansible-core. The _extract_collection_from_git() function in ansible-core's concrete_artifact_manager.py constructs git clone commands without a '--' (end-of-options) separator before user-supplied URLs when installing collections from git…

9.0Kritisch
CVE-2026-12701

Pulpcore: pulpcore: relative_path_validator bypass via directory traversal in filesystemexport

Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8; Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 9; Red Hat Red Hat Ansible Automation Platform 2.6 for RHEL 9; Red Hat Red Hat Satellite 6.16 for RHEL 8

A path traversal vulnerability was found in pulpcore. The relative_path_validator function only verifies that content paths do not begin with "/" but fails to block directory traversal sequences such as "../" anywhere in the path. An authenticated administrat…

1.2%EPSS
4.3Mittel
CVE-2026-5138

Foreman: foreman: information disclosure via improper validation of nested request parameters

Red Hat Red Hat Satellite 6.16 for RHEL 8; Red Hat Red Hat Satellite 6.16 for RHEL 9; Red Hat Red Hat Satellite 6.17 for RHEL 9; Red Hat Red Hat Satellite 6.18 for RHEL 9

A flaw was found in Foreman. An authenticated user with host-edit permissions could exploit a cross-tenant information disclosure vulnerability. This flaw occurs because the taxonomy_scope controller method does not properly validate organization and location…

6.5Mittel
CVE-2026-5135

Foreman: foreman: unauthorized modification of host configurations via broken access control

Red Hat Red Hat Satellite 6.16 for RHEL 8; Red Hat Red Hat Satellite 6.16 for RHEL 9; Red Hat Red Hat Satellite 6.17 for RHEL 9; Red Hat Red Hat Satellite 6.18 for RHEL 9

A flaw was found in Foreman. This broken access control vulnerability allows an authenticated user with host-edit permissions to retarget an existing lookup value override to a different host. This is achieved by modifying the match field through nested host …

6.5Mittel
CVE-2026-5142

Foreman: foreman: cross-tenant private ssh key disclosure via taxonomy scoping bypass

Red Hat Red Hat Satellite 6.16 for RHEL 8; Red Hat Red Hat Satellite 6.16 for RHEL 9; Red Hat Red Hat Satellite 6.17 for RHEL 9; Red Hat Red Hat Satellite 6.18 for RHEL 9

A flaw was found in foreman. Authenticated users with 'view_keypairs' permission can bypass taxonomy scoping, allowing them to download private SSH (Secure Shell) keys from other organizations by directly querying key pair IDs. This vulnerability leads to cro…

8.8Hoch
CVE-2026-5136

Foreman: foreman: privilege escalation to administrator-level access via usergroup role assignment manipulation

Red Hat Red Hat Satellite 6.16 for RHEL 8; Red Hat Red Hat Satellite 6.16 for RHEL 9; Red Hat Red Hat Satellite 6.17 for RHEL 9; Red Hat Red Hat Satellite 6.18 for RHEL 9

A flaw was found in Foreman. The Usergroup model in Foreman does not properly validate role assignments against the calling user's permissions. This allows an authenticated user with usergroup management permissions to attach arbitrary roles, including admini…

7.5Hoch
CVE-2026-13676

fast-uri vulnerable to host confusion via failed IDN canonicalization

fast-uri fast-uri; Red Hat Red Hat AMQ Broker 7.13.6; Red Hat Red Hat AMQ Broker 7.14.1; Red Hat Red Hat Enterprise Linux 10

fast-uri versions 2.3.1 through 3.1.2 and 4.0.0 fail to canonicalize Unicode (IDN) hostnames for HTTP-family URLs. The IDN conversion path calls a helper that does not exist on the global URL constructor, silently leaving the host in its original Unicode form…

7.5Hoch
CVE-2026-54297

Faraday: Uncontrolled recursion in NestedParamsEncoder allows stack exhaustion DoS via deeply nested query parameters

lostisland faraday; Red Hat Red Hat Satellite 6.16 for RHEL 8; Red Hat Red Hat Satellite 6.16 for RHEL 9; Red Hat Red Hat Satellite 6.17 for RHEL 9

Faraday is an HTTP client library abstraction layer that provides a common interface over many adapters. From 1.0.0 until 1.10.6 and 2.14.3, Faraday::NestedParamsEncoder, the default nested query parameter encoder/decoder in Faraday, decodes nested query stri…

6.2Mittel
CVE-2026-9073

Foreman-mcp-server: mcp server: insecure sensitive http header sanitization

Red Hat Red Hat Satellite 6.18; Red Hat Red Hat Satellite 6.19

A flaw was found in foreman-mcp-server. This component utilizes two distinct logging mechanisms that can expose sensitive session and authentication data. One mechanism logs session identifiers, which are treated as authentication credentials, at an informati…

4.3Mittel
CVE-2026-12515

Katello: missing repository authorization in content_uploads exposes cross-product content existence

Red Hat Red Hat Satellite 6.16 for RHEL 8; Red Hat Red Hat Satellite 6.16 for RHEL 9; Red Hat Red Hat Satellite 6.17 for RHEL 9; Red Hat Red Hat Satellite 6.18 for RHEL 9

A flaw was found in Katello's of Red Hat Satellite. A content upload functionality where insufficient authorization checks in the ContentUploadsController allowed users with the edit_products permission to query content information for repositories outside th…

9.3Kritisch
CVE-2026-44990

Apostrophe has default XSS via `xmp` raw-text passthrough in `sanitize-html`

apostrophecms sanitize-html; Red Hat multicluster engine for Kubernetes 2.1; Red Hat multicluster engine for Kubernetes 2.11; Red Hat multicluster engine for Kubernetes 2.17

ApostropheCMS is an open-source Node.js content management system, and sanitize-html provides a simple HTML sanitizer with a clear API. Under the default configuration, versions of `sanitize-html` prior to 2.17.4 can turn attacker-controlled content inside a …

7.5Hoch
CVE-2026-12143

form-data does not escape CR/LF/quote in multipart field names and filenames (CRLF injection)

form-data form-data; Red Hat Cryostat 4 on RHEL 9; Red Hat Red Hat AMQ Broker 7.13.6; Red Hat Red Hat AMQ Broker 7.14.1

form-data is a library for creating readable multipart/form-data streams. In versions through 4.0.5, the `field` argument to `FormData#append` and the `filename` option are concatenated verbatim into the `Content-Disposition` header without escaping carriage …