CVE-2026-5138: redhat satellite
Vulnerability summary
CVE-2026-5138 is a medium (CVSS 4.3) vulnerability in redhat satellite. EPSS estimates a 0.38% chance of exploitation in the next 30 days, higher than 30.4% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 4Timeline
- 01-07-2026PublishedVulnerability first disclosed.
- 01-07-2026Last modifiedVulnerability information updated.
Description
A flaw was found in Foreman. An authenticated user with host-edit permissions could exploit a cross-tenant information disclosure vulnerability. This flaw occurs because the taxonomy_scope controller method does not properly validate organization and location IDs from nested request parameters, bypassing existing authorization checks. This allows the user to leak sensitive infrastructure metadata, including subnet topology, IP ranges, gateways, DNS servers, and VLAN IDs, from organizations and locations they are not authorized to access.
CVSS metrics
2 scores · 2 sources · 1 version- NVDNIST4.3MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
EPSS trend
Probability
0.38%
Chance of exploitation in the next 30 days
Percentile
30%
Versus all other CVEs
30-day change
0.00 pp
From 0.38% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Redhat1 product
- satellite≥ 6.16, < 6.16.10 | ≥ 6.17, < 6.17.9 | ≥ 6.18, < 6.18.7 | ≥ 6.19, < 6.19.2
Theforeman1 product
- foreman< 3.18.2 | ≥ 3.19.0, < 3.19.1
2 vendors · 2 products