Red Hat Satellite 6 — Vulnerabilities & Security Advisories 12

All 12 CVE vulnerabilities found in Red Hat Satellite 6, with AI-generated Chinese analysis, references, and POCs.

CVE ID	Title	CVSS	Severity	Published
CVE-2026-107203	Foreman: domain and subnet interface api skips host search filters CWE-863	5.4	Medium	2026-10-12
CVE-2026-107193	Foreman: api filter lookup ignores a search-limited filter permission CWE-639	6.5	Medium	2026-10-12
CVE-2026-107151	Rubygem-smart_proxy_dynflow: task update and done callbacks accept unauthenticated requests CWE-306	5.9	Medium	2026-10-07
CVE-2026-103870	Pulp-rpm: distribution tree publish creates directories from .treeinfo ids CWE-22	5.0	Medium	2026-10-07
CVE-2026-106471	Candlepin: candlepin: broken object-level authorization via verifyauthorizationfilter multi-@verify hasaccess latching CWE-863	8.1	High	2026-10-07
CVE-2026-92904	Rubygem-foreman_remote_execution: job output readable without object-level view_job_invocations check CWE-863	4.3	Medium	2026-09-17
CVE-2026-92893	Rubygem-foreman_ansible: ansible inventory api ignores view_hosts permission filters, exposes hidden parameters CWE-863	4.3	Medium	2026-09-17
CVE-2026-92894	Rubygem-foreman_ansible: unscoped lookupvalue deletion allows cross-model override value destruction CWE-863	4.3	Medium	2026-09-17
CVE-2026-81668	Rubygem-katello: cross-tenant content view filter rule access and modification via unauthorized parent filter lookup CWE-639	5.4	Medium	2026-08-27
CVE-2026-81658	Foreman: cross-tenant disclosure of template revisions via unauthorized audit lookup CWE-639	6.5	Medium	2026-08-27
CVE-2026-13316	Foreman: ssrf to cloud metada service through unvalidated test_url parameters in foreman config CWE-918	4.4	Medium	2026-06-30
CVE-2014-3590	Red Hat Satellite 跨站请求伪造漏洞	8.1	-	2020-01-02

All 12 known CVE vulnerabilities affecting Red Hat Satellite 6 with full Chinese analysis, references, and POCs where available.