RHSA-2026:5971: foreman Red Hat

CVSS: 8.5v3.1HighPublished

Published 27-03-2026Last modified 17-10-2026

Open JSON

Vulnerability summary

RHSA-2026:5971 is a high (CVSS 8.5) vulnerability in foreman Red Hat.

Overall risk

34/100

0100

Medium · default modelHow is this calculated?

CVSS score

8.5/10

010

High · v3.1 (OSV · Red hat), selected by version preference

EPSS score

Not scored

0%100%

No EPSS score yet

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 11 · Downstream 0 · Related 1

CVE-2025-14550 CVE-2025-6176 CVE-2025-68121 CVE-2026-0980 CVE-2026-1207 CVE-2026-1285+5 more

Timeline

27-03-2026
PublishedVulnerability first disclosed.
17-10-2026
Last modifiedVulnerability information updated.

Description

Red Hat Security Advisory: Satellite 6.16.7 Async Update

CVSS metrics

1 score · 1 source · 1 version

v3.18.5

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Redhat25 products

foreman< 0:3.12.0.14-1.el8sat | < 0:3.12.0.14-1.el9sat
foreman-cli< 0:3.12.0.14-1.el8sat | < 0:3.12.0.14-1.el9sat
foreman-debug< 0:3.12.0.14-1.el8sat | < 0:3.12.0.14-1.el9sat
foreman-dynflow-sidekiq< 0:3.12.0.14-1.el8sat | < 0:3.12.0.14-1.el9sat
foreman-ec2< 0:3.12.0.14-1.el8sat | < 0:3.12.0.14-1.el9sat

Show all 25

1 vendor · 25 products

References

58 links

Show all 58 references

bugzilla.redhat.com/show_bug.cgi?id=2436342REPORT
bugzilla.redhat.com/show_bug.cgi?id=2437036REPORT
bugzilla.redhat.com/show_bug.cgi?id=2437111REPORT
issues.redhat.com/browse/SAT-42870ARTICLE
issues.redhat.com/browse/SAT-42880ARTICLE
issues.redhat.com/browse/SAT-42883ARTICLE
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_5971.jsonAdvisory
access.redhat.com/security/cve/CVE-2025-6176REPORT
www.cve.org/CVERecord?id=CVE-2025-6176Advisory
nvd.nist.gov/vuln/detail/CVE-2025-6176Advisory
huntr.com/bounties/2c26a886-5984-47ee-a421-0d5fe1344eb0ARTICLE
access.redhat.com/security/cve/CVE-2025-14550REPORT
www.cve.org/CVERecord?id=CVE-2025-14550Advisory
nvd.nist.gov/vuln/detail/CVE-2025-14550Advisory
docs.djangoproject.com/en/dev/releases/security/ARTICLE
groups.google.com/g/django-announceARTICLE
www.djangoproject.com/weblog/2026/feb/03/security-releases/ARTICLE
access.redhat.com/security/cve/CVE-2025-68121REPORT
www.cve.org/CVERecord?id=CVE-2025-68121Advisory
nvd.nist.gov/vuln/detail/CVE-2025-68121Advisory
go.dev/cl/737700ARTICLE
go.dev/issue/77217ARTICLE
groups.google.com/g/golang-announce/c/K09ubi9FQFkARTICLE
pkg.go.dev/vuln/GO-2026-4337Advisory
access.redhat.com/security/cve/CVE-2026-0980REPORT
www.cve.org/CVERecord?id=CVE-2026-0980Advisory
nvd.nist.gov/vuln/detail/CVE-2026-0980Advisory
access.redhat.com/security/cve/CVE-2026-1207REPORT
www.cve.org/CVERecord?id=CVE-2026-1207Advisory
nvd.nist.gov/vuln/detail/CVE-2026-1207Advisory
access.redhat.com/security/cve/CVE-2026-1285REPORT
www.cve.org/CVERecord?id=CVE-2026-1285Advisory
nvd.nist.gov/vuln/detail/CVE-2026-1285Advisory
access.redhat.com/security/cve/CVE-2026-1287REPORT
www.cve.org/CVERecord?id=CVE-2026-1287Advisory
nvd.nist.gov/vuln/detail/CVE-2026-1287Advisory
access.redhat.com/security/cve/CVE-2026-1312REPORT
www.cve.org/CVERecord?id=CVE-2026-1312Advisory
nvd.nist.gov/vuln/detail/CVE-2026-1312Advisory
access.redhat.com/security/cve/CVE-2026-1530REPORT
www.cve.org/CVERecord?id=CVE-2026-1530Advisory
nvd.nist.gov/vuln/detail/CVE-2026-1530Advisory
access.redhat.com/security/cve/CVE-2026-1531REPORT
www.cve.org/CVERecord?id=CVE-2026-1531Advisory
nvd.nist.gov/vuln/detail/CVE-2026-1531Advisory
access.redhat.com/security/cve/CVE-2026-1961REPORT
www.cve.org/CVERecord?id=CVE-2026-1961Advisory
nvd.nist.gov/vuln/detail/CVE-2026-1961Advisory