Red Hat Satellite 6.19 for RHEL 9 — Vulnerabilities & Security Advisories 12

All 12 CVE vulnerabilities found in Red Hat Satellite 6.19 for RHEL 9, with AI-generated Chinese analysis, references, and POCs.

Vendor: Red Hat

CVE ID	Title	CVSS	Severity	Published
CVE-2026-56098	Rubygem-katello: improper authorization logic allows resource enumeration CWE-203	4.3	Medium	2026-10-01
CVE-2026-12545	Rubygem-hammer_cli: command injection via insecure editor invocation CWE-78	6.7	Medium	2026-10-01
CVE-2026-12542	Foreman: command injection in foreman-tail CWE-78	5.3	Medium	2026-10-01
CVE-2026-56097	Rubygem-katello: sql injection in registry proxy via labels CWE-89	6.5	Medium	2026-10-01
CVE-2026-96659	Foreman: excessive permissions for viewer role on preview CWE-267	9.1	Critical	2026-10-01
CVE-2026-96658	Foreman: safemode bypass leading to rce	9.9	Critical	2026-10-01
CVE-2026-12544	Foreman: ssti and insecure deserialization in foreman-rake configuration CWE-502	7.7	High	2026-10-01
CVE-2026-12541	Foreman: command injection in foreman-rake database tasks CWE-78	8.2	High	2026-10-01
CVE-2026-12540	Foreman: command injection in foreman-rake errors:fetch_log via request_id parameter CWE-78	8.2	High	2026-10-01
CVE-2026-12423	Foreman: unauthenticated information disclosure via provisioning token validation flaw CWE-306	7.5	High	2026-10-01
CVE-2026-12405	Rubygem-foreman_remote_execution: command injection in job invocations via effective_user parameter CWE-78	8.8	High	2026-10-01
CVE-2026-79654	Ketello: katello content view history api cross-organization authorization bypass CWE-639	4.3	Medium	2026-08-26

All 12 known CVE vulnerabilities affecting Red Hat Satellite 6.19 for RHEL 9 with full Chinese analysis, references, and POCs where available.