Red Hat Satellite 6
50 CVEs tracked. None of them is in CISA KEV.
This hub aggregates every CVE we track for Red Hat Satellite 6, a product in the operating systems space. Use it to gauge the current risk picture and drill into individual advisories.
Red Hat Satellite 6 CVEs per month
| Month | CVEs |
|---|---|
| 2024-10 | 1 |
| 2024-11 | 2 |
| 2024-12 | 0 |
| 2025-01 | 0 |
| 2025-02 | 1 |
| 2025-03 | 1 |
| 2025-04 | 0 |
| 2025-05 | 3 |
| 2025-06 | 0 |
| 2025-07 | 0 |
| 2025-08 | 0 |
| 2025-09 | 0 |
| 2025-10 | 0 |
| 2025-11 | 2 |
| 2025-12 | 0 |
| 2026-01 | 1 |
| 2026-02 | 3 |
| 2026-03 | 2 |
| 2026-04 | 0 |
| 2026-05 | 2 |
| 2026-06 | 2 |
| 2026-07 | 5 |
| 2026-08 | 6 |
| 2026-09 | 9 |
Severity
How the 50 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.
- High21
- Medium28
- Low1
Latest CVEs
The 15 most recently published vulnerabilities affecting Red Hat Satellite 6.
- CVE-2026-90959Pulpcore: pulpcore: file:// scheme allowlist bypass in content upload file_url field enables arbitrary file read and pulp container registry signing key theft8.1
- CVE-2026-89058Resteasy-core: resteasy: corsfilter reflects arbitrary origin with credentials under wildcard config7.4
- CVE-2026-89059Resteasy-core: resteasy: iioimageprovider unbounded image decode (decompression-bomb dos)7.5
- CVE-2026-92904Rubygem-foreman_remote_execution: job output readable without object-level view_job_invocations check4.3
- CVE-2026-92893Rubygem-foreman_ansible: ansible inventory api ignores view_hosts permission filters, exposes hidden parameters4.3
- CVE-2026-92894Rubygem-foreman_ansible: unscoped lookupvalue deletion allows cross-model override value destruction4.3
- CVE-2026-42784Sequoia-openpgp: sequoia-openpgp: cryptographic integrity compromise via key flag confusion7.4
- CVE-2026-84232Pulpcore: python-pulpcore: stored cross-site scripting via inline rendering of uploaded html/svg content5.4
- CVE-2026-84218Org.jolokia/jolokia-core: incomplete jndi denylist in jolokia jsr-160 proxy (bypass of cve-2018-1000130 fix)8.1
- CVE-2026-17615Resteasy-core: resteasy sourceprovider remote unauthenticated file read7.5
- CVE-2026-82327Libsolv: libsolv: out-of-bounds write in repo_write() via unvalidated directory id from vertical/paged .solv filelist data5.5
- CVE-2026-81668Rubygem-katello: cross-tenant content view filter rule access and modification via unauthorized parent filter lookup5.4
- CVE-2026-81658Foreman: cross-tenant disclosure of template revisions via unauthorized audit lookup6.5
- CVE-2026-79654Ketello: katello content view history api cross-organization authorization bypass4.3
- CVE-2026-19391Insights-core: insights-core: incomplete credential redaction exposes sssd bind passwords and pacemaker fence credentials in uploaded archives6.5
Product grouping is registry-driven, with AI assist and human review. How it works