Vendor
Katello
107 known vulnerabilities in products by Katello, 0 of them actively exploited (CISA KEV).
Key figures
107
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
6
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2018-14643 | Theforeman Foreman: DEPRECATED: Authentication Bypass Issues | 9.8 | |
| Critical | CVE-2012-3503 | Foreman Katello: security vulnerability | 9.8 | |
| High | CVE-2026-12541 | Foreman: command injection in foreman-rake database tasks | 8.2 | |
| High | CVE-2026-12540 | Foreman: command injection in foreman-rake errors:fetch_log via request_id parameter | 8.2 | |
| High | CVE-2026-1961 | Forman: foreman: remote code execution via command injection in websocket proxy | 8.0 | |
| High | CVE-2016-3728 | Theforeman Foreman: Code Execution | 8.8 | |
| High | CVE-2016-4475 | Theforeman Foreman: security vulnerability | 8.8 | |
| High | CVE-2021-3584 | Foreman: OS Command Injection | 7.2 | |
| Critical | CVE-2022-3874 | Os command injection via ct_command and fcct_command | 8.0 | |
| High | CVE-2026-96658 | Foreman: foreman: arbitrary code execution via safemode sandbox bypass | 8.8 | |
| High | CVE-2018-1097 | Foreman: Exposure of Sensitive Information to an Unauthorized Actor | 8.8 | |
| Critical | CVE-2023-0118 | Foreman: arbitrary code execution through templates | 9.1 | |
| High | CVE-2017-7505 | Foreman: Incorrect Authorization | 8.8 | |
| Medium | CVE-2016-8613 | The Foreman Project Foreman: Cross-site Scripting | 6.4 | |
| High | CVE-2015-5152 | Theforeman Foreman: security vulnerability | 8.1 | |
| High | CVE-2015-5246 | Theforeman Foreman: security vulnerability | 8.1 | |
| Medium | CVE-2016-6319 | Theforeman Foreman: Cross-Site Scripting (XSS) | 6.1 | |
| Critical | CVE-2026-96659 | Foreman: excessive permissions for viewer role on preview | 9.1 | |
| High | CVE-2026-5136 | Red Hat Satellite: Incorrect Privilege Assignment | 8.8 | |
| Medium | CVE-2019-10198 | The Foreman Project Foreman-tasks: DEPRECATED: Authentication Bypass Issues | 6.5 | |
| Not rated | CVE-2013-2143 | Foreman Katello: Privilege Escalation | — | |
| High | CVE-2013-4120 | Katello: Denial of Service | 7.5 | |
| Not rated | CVE-2013-2121 | Theforeman Foreman: Code Execution | — | |
| Not rated | CVE-2013-2113 | Theforeman Foreman: Privilege Escalation | — | |
| High | CVE-2026-12423 | Foreman: unauthenticated information disclosure via provisioning token validation flaw | 7.5 |