Red Hat Satellite 6.16 for RHEL 8 — Vulnerabilities & Security Advisories 8

All 8 CVE vulnerabilities found in Red Hat Satellite 6.16 for RHEL 8, with AI-generated Chinese analysis, references, and POCs.

Vendor: Red Hat

CVE ID	Title	CVSS	Severity	Published
CVE-2026-5138	Foreman: foreman: information disclosure via improper validation of nested request parameters CWE-639	4.3	Medium	2026-07-01
CVE-2026-5135	Foreman: foreman: unauthorized modification of host configurations via broken access control CWE-639	6.5	Medium	2026-07-01
CVE-2026-5142	Foreman: foreman: cross-tenant private ssh key disclosure via taxonomy scoping bypass CWE-639	6.5	Medium	2026-07-01
CVE-2026-5136	Foreman: foreman: privilege escalation to administrator-level access via usergroup role assignment manipulation CWE-266	8.8	High	2026-07-01
CVE-2026-1961	Forman: foreman: remote code execution via command injection in websocket proxy CWE-78	8.0	High	2026-03-26
CVE-2026-0980	Rubyipmi: red hat satellite: remote code execution in rubyipmi via malicious bmc username CWE-78	8.3	High	2026-02-27
CVE-2026-1531	Foreman-kubevirt: foreman_kubevirt: man-in-the-middle due to insecure default ssl verification CWE-295	8.1	High	2026-02-02
CVE-2026-1530	Fog-kubevirt: fog-kubevirt: man-in-the-middle vulnerability due to disabled certificate validation CWE-295	8.1	High	2026-02-02

All 8 known CVE vulnerabilities affecting Red Hat Satellite 6.16 for RHEL 8 with full Chinese analysis, references, and POCs where available.