Monitor vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.5

Red Hat Satellite 6.18.3 Async Update Allows Unauthorized Access

RHSA-2026:2760
Summary

A vulnerability in Red Hat Satellite 6.18.3 allows an attacker to access unauthorized information. This affects systems using Satellite 6.18.3 for configuration management and software updates. To protect your systems, update to a fixed version of Red Hat Satellite as soon as possible.

What to do
  • Update redhat python3.12-aiohttp to version 0:3.13.3-1.el9pc.
  • Update redhat python3.12-aiohttp-debuginfo to version 0:3.13.3-1.el9pc.
  • Update redhat python3.12-aiohttp-debugsource to version 0:3.13.3-1.el9pc.
  • Update redhat python3.12-urllib3 to version 0:2.6.3-1.el9pc.
Affected software
VendorProductAffected versionsFix available
redhat python3.12-aiohttp <= 0:3.13.3-1.el9pc 0:3.13.3-1.el9pc
redhat python3.12-aiohttp-debuginfo <= 0:3.13.3-1.el9pc 0:3.13.3-1.el9pc
redhat python3.12-aiohttp-debugsource <= 0:3.13.3-1.el9pc 0:3.13.3-1.el9pc
redhat python3.12-aiohttp <= 0:3.13.3-1.el9pc 0:3.13.3-1.el9pc
redhat python3.12-aiohttp-debuginfo <= 0:3.13.3-1.el9pc 0:3.13.3-1.el9pc
redhat python3.12-aiohttp-debugsource <= 0:3.13.3-1.el9pc 0:3.13.3-1.el9pc
redhat python3.12-urllib3 <= 0:2.6.3-1.el9pc 0:2.6.3-1.el9pc
redhat python3.12-urllib3 <= 0:2.6.3-1.el9pc 0:2.6.3-1.el9pc
Original title
Red Hat Security Advisory: Satellite 6.18.3 Async Update
osv CVSS3.1 7.5
Published: 17 Feb 2026 · Updated: 7 Mar 2026 · First seen: 6 Mar 2026