RHSA-2026:74505: foreman Red Hat

CVSS: 9.1v3.1CriticalPublished

Published 03-10-2026Last modified 19-10-2026

Open JSON

Vulnerability summary

RHSA-2026:74505 is a critical (CVSS 9.1) vulnerability in foreman Red Hat.

Overall risk

70/100

0100

High · default modelHow is this calculated?

CVSS score

9.1/10

010

Critical · v3.1 (OSV · Red hat), selected by version preference

EPSS score

Not scored

0%100%

No EPSS score yet

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Timeline

03-10-2026
PublishedVulnerability first disclosed.
19-10-2026
Last modifiedVulnerability information updated.

Description

Red Hat Security Advisory: Satellite 6.17.12 Async Update

CVSS metrics

1 score · 1 source · 1 version

v3.19.1

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Redhat36 products

foreman< 0:3.14.0.22-1.el9sat
foreman-cli< 0:3.14.0.22-1.el9sat
foreman-debug< 0:3.14.0.22-1.el9sat
foreman-dynflow-sidekiq< 0:3.14.0.22-1.el9sat
foreman-ec2< 0:3.14.0.22-1.el9sat

Show all 36

1 vendor · 36 products

References

187 links

Show all 100 references

bugzilla.redhat.com/show_bug.cgi?id=2489971REPORT
bugzilla.redhat.com/show_bug.cgi?id=2489992REPORT
bugzilla.redhat.com/show_bug.cgi?id=2489993REPORT
bugzilla.redhat.com/show_bug.cgi?id=2490542REPORT
bugzilla.redhat.com/show_bug.cgi?id=2490543REPORT
bugzilla.redhat.com/show_bug.cgi?id=2515243REPORT
bugzilla.redhat.com/show_bug.cgi?id=2515261REPORT
bugzilla.redhat.com/show_bug.cgi?id=2515269REPORT
bugzilla.redhat.com/show_bug.cgi?id=2515272REPORT
bugzilla.redhat.com/show_bug.cgi?id=2515275REPORT
bugzilla.redhat.com/show_bug.cgi?id=2515815REPORT
bugzilla.redhat.com/show_bug.cgi?id=2515820REPORT
bugzilla.redhat.com/show_bug.cgi?id=2515827REPORT
bugzilla.redhat.com/show_bug.cgi?id=2515838REPORT
bugzilla.redhat.com/show_bug.cgi?id=2515839REPORT
bugzilla.redhat.com/show_bug.cgi?id=2517518REPORT
bugzilla.redhat.com/show_bug.cgi?id=2517523REPORT
bugzilla.redhat.com/show_bug.cgi?id=2517527REPORT
bugzilla.redhat.com/show_bug.cgi?id=2520368REPORT
bugzilla.redhat.com/show_bug.cgi?id=2523205REPORT
bugzilla.redhat.com/show_bug.cgi?id=2523348REPORT
bugzilla.redhat.com/show_bug.cgi?id=2530744REPORT
bugzilla.redhat.com/show_bug.cgi?id=2534185REPORT
bugzilla.redhat.com/show_bug.cgi?id=2536844REPORT
issues.redhat.com/browse/SAT-50544ARTICLE
issues.redhat.com/browse/SAT-50545ARTICLE
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_74505.jsonAdvisory
access.redhat.com/security/cve/CVE-2026-12405REPORT
www.cve.org/CVERecord?id=CVE-2026-12405Advisory
nvd.nist.gov/vuln/detail/CVE-2026-12405Advisory
access.redhat.com/security/cve/CVE-2026-12423REPORT
www.cve.org/CVERecord?id=CVE-2026-12423Advisory
nvd.nist.gov/vuln/detail/CVE-2026-12423Advisory
access.redhat.com/security/cve/CVE-2026-12540REPORT
www.cve.org/CVERecord?id=CVE-2026-12540Advisory
nvd.nist.gov/vuln/detail/CVE-2026-12540Advisory
access.redhat.com/security/cve/CVE-2026-12541REPORT
www.cve.org/CVERecord?id=CVE-2026-12541Advisory
nvd.nist.gov/vuln/detail/CVE-2026-12541Advisory
access.redhat.com/security/cve/CVE-2026-12542REPORT
www.cve.org/CVERecord?id=CVE-2026-12542Advisory
nvd.nist.gov/vuln/detail/CVE-2026-12542Advisory
access.redhat.com/security/cve/CVE-2026-12544REPORT
www.cve.org/CVERecord?id=CVE-2026-12544Advisory
nvd.nist.gov/vuln/detail/CVE-2026-12544Advisory
access.redhat.com/security/cve/CVE-2026-12545REPORT
www.cve.org/CVERecord?id=CVE-2026-12545Advisory
nvd.nist.gov/vuln/detail/CVE-2026-12545Advisory
access.redhat.com/security/cve/CVE-2026-33154REPORT
www.cve.org/CVERecord?id=CVE-2026-33154Advisory
nvd.nist.gov/vuln/detail/CVE-2026-33154Advisory
github.com/dynaconf/dynaconf/commit/2fbb45ee36b8c0caa5b924fe19f3c1a5e8603fa7ARTICLE
github.com/dynaconf/dynaconf/releases/tag/3.2.13ARTICLE
github.com/dynaconf/dynaconf/security/advisories/GHSA-pxrr-hq57-q35pARTICLE
access.redhat.com/security/cve/CVE-2026-33818REPORT
www.cve.org/CVERecord?id=CVE-2026-33818Advisory
nvd.nist.gov/vuln/detail/CVE-2026-33818Advisory
go.dev/cl/814980ARTICLE
go.dev/issue/80405ARTICLE
groups.google.com/g/golang-announce/c/94pEornpRlIARTICLE
pkg.go.dev/vuln/GO-2026-5972Advisory
access.redhat.com/security/cve/CVE-2026-42215REPORT
www.cve.org/CVERecord?id=CVE-2026-42215Advisory
nvd.nist.gov/vuln/detail/CVE-2026-42215Advisory
github.com/gitpython-developers/GitPython/releases/tag/3.1.47ARTICLE
github.com/gitpython-developers/GitPython/security/advisories/GHSA-rpm5-65cw-6hj4ARTICLE
access.redhat.com/security/cve/CVE-2026-42284REPORT
www.cve.org/CVERecord?id=CVE-2026-42284Advisory
nvd.nist.gov/vuln/detail/CVE-2026-42284Advisory
github.com/gitpython-developers/GitPython/security/advisories/GHSA-x2qx-6953-8485ARTICLE
access.redhat.com/security/cve/CVE-2026-42504REPORT
www.cve.org/CVERecord?id=CVE-2026-42504Advisory
nvd.nist.gov/vuln/detail/CVE-2026-42504Advisory
go.dev/cl/774481ARTICLE
go.dev/issue/79217ARTICLE
groups.google.com/g/golang-announce/c/tKs3rmcBcKwARTICLE
pkg.go.dev/vuln/GO-2026-5038Advisory
access.redhat.com/security/cve/CVE-2026-49825REPORT
www.cve.org/CVERecord?id=CVE-2026-49825Advisory
nvd.nist.gov/vuln/detail/CVE-2026-49825Advisory
github.com/fedora-python/lxml_html_clean/commit/322357ac61c6cf80fcbaba53b4e92e31f3ded9f2ARTICLE
github.com/fedora-python/lxml_html_clean/releases/tag/0.4.5ARTICLE
github.com/fedora-python/lxml_html_clean/security/advisories/GHSA-4jhm-jv67-739fARTICLE
github.com/lxml/lxml/commit/5927a6d5e851845140975d99b65461e255caaab0ARTICLE
github.com/lxml/lxml/releases/tag/lxml-6.1.1ARTICLE
access.redhat.com/security/cve/CVE-2026-54284REPORT
www.cve.org/CVERecord?id=CVE-2026-54284Advisory
nvd.nist.gov/vuln/detail/CVE-2026-54284Advisory
github.com/andialbrecht/sqlparse/commit/939b129e24c0ad5d51368b1aa72fffcaca76f06fARTICLE
github.com/andialbrecht/sqlparse/security/advisories/GHSA-pwgv-4x5q-6m9fARTICLE

Showing 100 of 187. Use Open JSON for the complete list.