Product by Red Hat

    Satellite

    48 known vulnerabilities in Satellite (Red Hat), 1 of them actively exploited (CISA KEV).

    Key figures

    48

    Vulnerabilities

    1

    Actively exploited (KEV)

    0

    Used by ransomware

    8

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Satellite (Red Hat)
    CriticalCVE-2023-44487

    HTTP/2 Rapid Reset Attack Vulnerability

    In CISA KEValso in 161 other products

    		7.5
    CriticalCVE-2026-29063

    Immutable-js: Prototype Pollution

    also in 26 other products

    		9.8
    HighCVE-2026-12540

    Foreman: command injection in foreman-rake errors:fetch_log via request_id parameter

    also in 8 other products

    		8.2
    HighCVE-2026-12541

    Foreman: command injection in foreman-rake database tasks

    also in 8 other products

    		8.2
    HighCVE-2026-1961

    Forman: foreman: remote code execution via command injection in websocket proxy

    also in 8 other products

    		8.0
    HighCVE-2024-24680

    Django: Denial of Service

    also in 3 other products

    		7.5
    CriticalCVE-2022-3874

    Os command injection via ct_command and fcct_command

    also in 3 other products

    		8.0
    HighCVE-2026-96658

    Foreman: foreman: arbitrary code execution via safemode sandbox bypass

    also in 7 other products

    		8.8
    HighCVE-2013-2056

    Red Hat: Missing Authentication for Critical Function

    also in 3 other products

    		7.5
    CriticalCVE-2023-0118

    Foreman: arbitrary code execution through templates

    also in 4 other products

    		9.1
    HighCVE-2026-0980

    Rubyipmi: red hat satellite: remote code execution in rubyipmi via malicious bmc username

    also in 7 other products

    		8.3
    HighCVE-2026-40192

    Pillow is vulnerable to a FITS GZIP decompression bomb

    also in 4 other products

    		7.5
    CriticalCVE-2024-7923

    Puppet-pulpcore: an authentication bypass vulnerability exists in pulpcore

    also in 7 other products

    		9.8
    CriticalCVE-2026-96659

    Foreman: excessive permissions for viewer role on preview

    also in 7 other products

    		9.1
    HighCVE-2026-5136

    Red Hat Satellite: Incorrect Privilege Assignment

    also in 8 other products

    		8.8
    CriticalCVE-2024-7012

    Puppet-foreman: an authentication bypass vulnerability exists in foreman

    also in 6 other products

    		9.8
    HighCVE-2012-5562

    Red Hat Satellite Proxy v 5.6: Cleartext Transmission of Sensitive Information

    also in 2 other products

    		8.6
    HighCVE-2026-12423

    Foreman: unauthenticated information disclosure via provisioning token validation flaw

    also in 8 other products

    		7.5
    CriticalCVE-2023-0462

    Arbitrary code execution through yaml global parameters

    also in 3 other products

    		8.0
    HighCVE-2026-12542

    Foreman: command injection in foreman-tail

    also in 8 other products

    		5.3
    MediumCVE-2012-0059

    Red Hat: Generation of Error Message Containing Sensitive Information

    also in 4 other products

    		4.9
    HighCVE-2026-12544

    Foreman: ssti and insecure deserialization in foreman-rake configuration

    also in 8 other products

    		7.7
    MediumCVE-2023-5189

    Hub: insecure galaxy-importer tarfile extraction

    also in 6 other products

    		6.3
    MediumCVE-2026-5142

    Foreman: foreman: cross-tenant private ssh key disclosure via taxonomy scoping bypass

    also in 8 other products

    		6.5
    MediumCVE-2026-5135

    Foreman: foreman: unauthorized modification of host configurations via broken access control

    also in 8 other products

    		6.5

    All vulnerabilities in search

    All products by Red Hat