Red Hat Red Hat Satellite 6.16 for RHEL 8 vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Red Hat Red Hat Satellite 6.16 for RHEL 8: 26 record(s), with affected versions and fixes.

CVE-2025-10622 High · 8.0 CWE-78 Nov 5, 2025

Foreman: os command injection via ct_location and fcct_location parameters

A flaw was found in Red Hat Satellite (Foreman component). This vulnerability allows an authenticated user with edit_settings permissions to achieve arbitrary command execution on the underlying operating system via insufficient server-side validation of command whitelisting.