Product

Satellite

1 brief RSS

Command Injection in Red Hat Satellite (CVE-2026-12405)

A command injection vulnerability in the rubygem-foreman_remote_execution component allows authenticated attackers to execute arbitrary shell commands via the Satellite API.

Satellite +1 vulnerability command-injection server-side web-application-vulnerability authentication-bypass cve-2026-12423

2r 3t 1c 1w ago