DeutschShown in its original language — a full translation is planned for a future version.
Red Hat Satellite (foreman, python-pillow, go): Mehrere Schwachstellen
view advisory published 2026-07-01
Ein Angreifer kann mehrere Schwachstellen in Red Hat Satellite ausnutzen, um sich erweiterte Rechte, einschließlich Administratorrechte, zu verschaffen, die Authentifizierung zu umgehen, Daten zu manipulieren, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand zu verursachen.
01
describes (6)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-5142US | — | — | ||
A flaw was found in foreman. Authenticated users with 'view_keypairs' permission can bypass taxonomy scoping, allowing them to download private SSH (Secure Shell) keys from other o… | ||||
| CVE-2026-5138US | — | — | ||
A flaw was found in Foreman. An authenticated user with host-edit permissions could exploit a cross-tenant information disclosure vulnerability. This flaw occurs because the taxono… | ||||
| CVE-2026-5135US | — | — | ||
A flaw was found in Foreman. This broken access control vulnerability allows an authenticated user with host-edit permissions to retarget an existing lookup value override to a dif… | ||||
| CVE-2026-5136US | — | — | ||
A flaw was found in Foreman. The Usergroup model in Foreman does not properly validate role assignments against the calling user's permissions. This allows an authenticated user wi… | ||||
| CVE-2026-40192US | high7.5 | — | ||
Pillow is a Python imaging library. Versions 10.3.0 through 12.1.1 did not limit the amount of GZIP-compressed data read when decoding a FITS image, making them vulnerable to decom… | ||||
| CVE-2026-32282US | medium6.4 | — | ||
On Linux, if the target of Root.Chmod is replaced with a symlink while the chmod operation is in progress, Chmod can operate on the target of the symlink, even when the target lies… | ||||
02
references
External citations — patches, advisories, analysis.
- Oracle Linux Security Advisory ELSA-2026-25999 vom 2026-07-17external
- Red Hat Security Advisory RHSA-2026:34366 vom 2026-07-01external
- Red Hat Security Advisory RHSA-2026:34367 vom 2026-07-01external
- Red Hat Security Advisory RHSA-2026:34368 vom 2026-07-01external
- Red Hat Security Advisory RHSA-2026:37275 vom 2026-07-09external
- Red Hat Security Advisory RHSA-2026:40118 vom 2026-07-15external
- Red Hat Security Advisory RHSA-2026:42049 vom 2026-07-20external
- Red Hat Security Advisory RHSA-2026:47952 vom 2026-07-29external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan