RHSA-2026:34368: foreman Red Hat
CVSS: 8.8v3.1HighPublished
Published 02-07-2026Last modified 16-10-2026
Vulnerability summary
RHSA-2026:34368 is a high (CVSS 8.8) vulnerability in foreman Red Hat.
CVSS score
8.8/10
010
High · v3.1 (OSV · Red hat), selected by version preferenceEPSS score
Not scored
0%100%
No EPSS score yetKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 6 · Downstream 0 · Related 1Timeline
- 02-07-2026PublishedVulnerability first disclosed.
- 16-10-2026Last modifiedVulnerability information updated.
Description
Red Hat Security Advisory: Satellite 6.18.7 Async Update
CVSS metrics
1 score · 1 source · 1 versionHigh 8.8Preferred score · OSV · Red hat (Ecosystem advisory) · calculated from vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HSourcesSingle source
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Redhat18 products
- foreman< 0:3.16.0.17-1.el9sat
- foreman-cli< 0:3.16.0.17-1.el9sat
- foreman-debug< 0:3.16.0.17-1.el9sat
- foreman-dynflow-sidekiq< 0:3.16.0.17-1.el9sat
- foreman-ec2< 0:3.16.0.17-1.el9sat
1 vendor · 18 products
References
36 linksShow all 36 references
- go.dev/cl/763761ARTICLE
- go.dev/issue/78293ARTICLE
- pkg.go.dev/vuln/GO-2026-4864Advisory