Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.9
Foreman and related tools could let attackers run code remotely
published 16 days ago
Summary
The Foreman management system and its remote execution plugins for Red Hat Satellite can be tricked into executing unauthorized commands. This could let an attacker take control of the server or access sensitive data. Apply the latest updates from Red Hat as soon as possible to close the gap.
What to do
- Update redhat rubygem-foreman_remote_execution to version 0:15.0.2-2.el9sat.
- Update redhat rubygem-foreman_remote_execution-cockpit to version 0:15.0.2-2.el9sat.
- Update redhat foreman to version 0:3.14.0.22-1.el9sat.
- Update redhat foreman-debug to version 0:3.14.0.22-1.el9sat.
- Update redhat foreman-pcp to version 0:3.14.0.22-1.el9sat.
- Update redhat foreman-cli to version 0:3.14.0.22-1.el9sat.
- Update redhat foreman-dynflow-sidekiq to version 0:3.14.0.22-1.el9sat.
- Update redhat foreman-ec2 to version 0:3.14.0.22-1.el9sat.
- Update redhat foreman-journald to version 0:3.14.0.22-1.el9sat.
- Update redhat foreman-libvirt to version 0:3.14.0.22-1.el9sat.
- Update redhat foreman-openstack to version 0:3.14.0.22-1.el9sat.
- Update redhat foreman-ovirt to version 0:3.14.0.22-1.el9sat.
- Update redhat foreman-postgresql to version 0:3.14.0.22-1.el9sat.
- Update redhat foreman-redis to version 0:3.14.0.22-1.el9sat.
- Update redhat foreman-service to version 0:3.14.0.22-1.el9sat.
- Update redhat foreman-telemetry to version 0:3.14.0.22-1.el9sat.
- Update redhat foreman-vmware to version 0:3.14.0.22-1.el9sat.
- Update redhat rubygem-hammer_cli to version 0:3.14.0-2.el9sat.
- Update redhat python-dynaconf to version 0:3.2.13-1.el9pc.
- Update redhat python3.11-dynaconf to version 0:3.2.13-1.el9pc.
- Update redhat yggdrasil-worker-forwarder to version 0:0.1.0-2.1.el9sat.
- Update redhat python-lxml to version 0:5.3.1-2.el9pc.
- Update redhat python-lxml-debugsource to version 0:5.3.1-2.el9pc.
- Update redhat python3.11-lxml to version 0:5.3.1-2.el9pc.
- Update redhat python3.11-lxml-debuginfo to version 0:5.3.1-2.el9pc.
- Update redhat python-sqlparse to version 0:0.6.0-1.el9pc.
- Update redhat python3.11-sqlparse to version 0:0.6.0-1.el9pc.
- Update redhat rubygem-katello to version 0:4.16.0.20-1.el9sat.
- Update redhat python-gitpython to version 0:3.1.62-1.el9pc.
- Update redhat python3.11-gitpython to version 0:3.1.62-1.el9pc.
- Update redhat satellite to version 0:6.17.12-1.el9sat.
- Update redhat satellite-capsule to version 0:6.17.12-1.el9sat.
- Update redhat satellite-common to version 0:6.17.12-1.el9sat.
- Update redhat satellite-obsolete-packages to version 0:6.17.12-1.el9sat.
- Update redhat satellite-cli to version 0:6.17.12-1.el9sat.
- Update redhat rubygem-safemode to version 0:1.5.0-2.el9sat.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Red Hat:satellite:6.17::el9 | redhat | rubygem-foreman_remote_execution |
< 0:15.0.2-2.el9sat Fix: upgrade to 0:15.0.2-2.el9sat
|
| Red Hat:satellite:6.17::el9 | redhat | rubygem-foreman_remote_execution-cockpit |
< 0:15.0.2-2.el9sat Fix: upgrade to 0:15.0.2-2.el9sat
|
| Red Hat:satellite_capsule:6.17::el9 | redhat | foreman |
< 0:3.14.0.22-1.el9sat Fix: upgrade to 0:3.14.0.22-1.el9sat
|
| Red Hat:satellite_capsule:6.17::el9 | redhat | foreman-debug |
< 0:3.14.0.22-1.el9sat Fix: upgrade to 0:3.14.0.22-1.el9sat
|
| Red Hat:satellite_capsule:6.17::el9 | redhat | foreman-pcp |
< 0:3.14.0.22-1.el9sat Fix: upgrade to 0:3.14.0.22-1.el9sat
|
| Red Hat:satellite_utils:6.17::el9 | redhat | foreman |
< 0:3.14.0.22-1.el9sat Fix: upgrade to 0:3.14.0.22-1.el9sat
|
| Red Hat:satellite_utils:6.17::el9 | redhat | foreman-cli |
< 0:3.14.0.22-1.el9sat Fix: upgrade to 0:3.14.0.22-1.el9sat
|
| Red Hat:satellite:6.17::el9 | redhat | foreman |
< 0:3.14.0.22-1.el9sat Fix: upgrade to 0:3.14.0.22-1.el9sat
|
| Red Hat:satellite:6.17::el9 | redhat | foreman-cli |
< 0:3.14.0.22-1.el9sat Fix: upgrade to 0:3.14.0.22-1.el9sat
|
| Red Hat:satellite:6.17::el9 | redhat | foreman-debug |
< 0:3.14.0.22-1.el9sat Fix: upgrade to 0:3.14.0.22-1.el9sat
|
| Red Hat:satellite:6.17::el9 | redhat | foreman-dynflow-sidekiq |
< 0:3.14.0.22-1.el9sat Fix: upgrade to 0:3.14.0.22-1.el9sat
|
| Red Hat:satellite:6.17::el9 | redhat | foreman-ec2 |
< 0:3.14.0.22-1.el9sat Fix: upgrade to 0:3.14.0.22-1.el9sat
|
| Red Hat:satellite:6.17::el9 | redhat | foreman-journald |
< 0:3.14.0.22-1.el9sat Fix: upgrade to 0:3.14.0.22-1.el9sat
|
| Red Hat:satellite:6.17::el9 | redhat | foreman-libvirt |
< 0:3.14.0.22-1.el9sat Fix: upgrade to 0:3.14.0.22-1.el9sat
|
| Red Hat:satellite:6.17::el9 | redhat | foreman-openstack |
< 0:3.14.0.22-1.el9sat Fix: upgrade to 0:3.14.0.22-1.el9sat
|
| Red Hat:satellite:6.17::el9 | redhat | foreman-ovirt |
< 0:3.14.0.22-1.el9sat Fix: upgrade to 0:3.14.0.22-1.el9sat
|
| Red Hat:satellite:6.17::el9 | redhat | foreman-pcp |
< 0:3.14.0.22-1.el9sat Fix: upgrade to 0:3.14.0.22-1.el9sat
|
| Red Hat:satellite:6.17::el9 | redhat | foreman-postgresql |
< 0:3.14.0.22-1.el9sat Fix: upgrade to 0:3.14.0.22-1.el9sat
|
| Red Hat:satellite:6.17::el9 | redhat | foreman-redis |
< 0:3.14.0.22-1.el9sat Fix: upgrade to 0:3.14.0.22-1.el9sat
|
| Red Hat:satellite:6.17::el9 | redhat | foreman-service |
< 0:3.14.0.22-1.el9sat Fix: upgrade to 0:3.14.0.22-1.el9sat
|
| Red Hat:satellite:6.17::el9 | redhat | foreman-telemetry |
< 0:3.14.0.22-1.el9sat Fix: upgrade to 0:3.14.0.22-1.el9sat
|
| Red Hat:satellite:6.17::el9 | redhat | foreman-vmware |
< 0:3.14.0.22-1.el9sat Fix: upgrade to 0:3.14.0.22-1.el9sat
|
| Red Hat:satellite_utils:6.17::el9 | redhat | rubygem-hammer_cli |
< 0:3.14.0-2.el9sat Fix: upgrade to 0:3.14.0-2.el9sat
|
| Red Hat:satellite:6.17::el9 | redhat | rubygem-hammer_cli |
< 0:3.14.0-2.el9sat Fix: upgrade to 0:3.14.0-2.el9sat
|
| Red Hat:satellite_capsule:6.17::el9 | redhat | python-dynaconf |
< 0:3.2.13-1.el9pc Fix: upgrade to 0:3.2.13-1.el9pc
|
| Red Hat:satellite_capsule:6.17::el9 | redhat | python3.11-dynaconf |
< 0:3.2.13-1.el9pc Fix: upgrade to 0:3.2.13-1.el9pc
|
| Red Hat:satellite:6.17::el9 | redhat | python-dynaconf |
< 0:3.2.13-1.el9pc Fix: upgrade to 0:3.2.13-1.el9pc
|
| Red Hat:satellite:6.17::el9 | redhat | python3.11-dynaconf |
< 0:3.2.13-1.el9pc Fix: upgrade to 0:3.2.13-1.el9pc
|
| Red Hat:satellite:6.17::el9 | redhat | yggdrasil-worker-forwarder |
< 0:0.1.0-2.1.el9sat Fix: upgrade to 0:0.1.0-2.1.el9sat
|
| Red Hat:satellite_capsule:6.17::el9 | redhat | python-lxml |
< 0:5.3.1-2.el9pc Fix: upgrade to 0:5.3.1-2.el9pc
|
| Red Hat:satellite_capsule:6.17::el9 | redhat | python-lxml-debugsource |
< 0:5.3.1-2.el9pc Fix: upgrade to 0:5.3.1-2.el9pc
|
| Red Hat:satellite_capsule:6.17::el9 | redhat | python3.11-lxml |
< 0:5.3.1-2.el9pc Fix: upgrade to 0:5.3.1-2.el9pc
|
| Red Hat:satellite_capsule:6.17::el9 | redhat | python3.11-lxml-debuginfo |
< 0:5.3.1-2.el9pc Fix: upgrade to 0:5.3.1-2.el9pc
|
| Red Hat:satellite:6.17::el9 | redhat | python-lxml |
< 0:5.3.1-2.el9pc Fix: upgrade to 0:5.3.1-2.el9pc
|
| Red Hat:satellite:6.17::el9 | redhat | python-lxml-debugsource |
< 0:5.3.1-2.el9pc Fix: upgrade to 0:5.3.1-2.el9pc
|
| Red Hat:satellite:6.17::el9 | redhat | python3.11-lxml |
< 0:5.3.1-2.el9pc Fix: upgrade to 0:5.3.1-2.el9pc
|
| Red Hat:satellite:6.17::el9 | redhat | python3.11-lxml-debuginfo |
< 0:5.3.1-2.el9pc Fix: upgrade to 0:5.3.1-2.el9pc
|
| Red Hat:satellite_capsule:6.17::el9 | redhat | python-sqlparse |
< 0:0.6.0-1.el9pc Fix: upgrade to 0:0.6.0-1.el9pc
|
| Red Hat:satellite_capsule:6.17::el9 | redhat | python3.11-sqlparse |
< 0:0.6.0-1.el9pc Fix: upgrade to 0:0.6.0-1.el9pc
|
| Red Hat:satellite:6.17::el9 | redhat | python-sqlparse |
< 0:0.6.0-1.el9pc Fix: upgrade to 0:0.6.0-1.el9pc
|
| Red Hat:satellite:6.17::el9 | redhat | python3.11-sqlparse |
< 0:0.6.0-1.el9pc Fix: upgrade to 0:0.6.0-1.el9pc
|
| Red Hat:satellite:6.17::el9 | redhat | rubygem-katello |
< 0:4.16.0.20-1.el9sat Fix: upgrade to 0:4.16.0.20-1.el9sat
|
| Red Hat:satellite_capsule:6.17::el9 | redhat | python-gitpython |
< 0:3.1.62-1.el9pc Fix: upgrade to 0:3.1.62-1.el9pc
|
| Red Hat:satellite_capsule:6.17::el9 | redhat | python3.11-gitpython |
< 0:3.1.62-1.el9pc Fix: upgrade to 0:3.1.62-1.el9pc
|
| Red Hat:satellite:6.17::el9 | redhat | python-gitpython |
< 0:3.1.62-1.el9pc Fix: upgrade to 0:3.1.62-1.el9pc
|
| Red Hat:satellite:6.17::el9 | redhat | python3.11-gitpython |
< 0:3.1.62-1.el9pc Fix: upgrade to 0:3.1.62-1.el9pc
|
| Red Hat:satellite_capsule:6.17::el9 | redhat | satellite |
< 0:6.17.12-1.el9sat Fix: upgrade to 0:6.17.12-1.el9sat
|
| Red Hat:satellite_capsule:6.17::el9 | redhat | satellite-capsule |
< 0:6.17.12-1.el9sat Fix: upgrade to 0:6.17.12-1.el9sat
|
| Red Hat:satellite_capsule:6.17::el9 | redhat | satellite-common |
< 0:6.17.12-1.el9sat Fix: upgrade to 0:6.17.12-1.el9sat
|
| Red Hat:satellite_capsule:6.17::el9 | redhat | satellite-obsolete-packages |
< 0:6.17.12-1.el9sat Fix: upgrade to 0:6.17.12-1.el9sat
|
Showing 50 of 57. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Red Hat:satellite_utils:6.17::el9 | redhat | satellite |
< 0:6.17.12-1.el9sat Fix: upgrade to 0:6.17.12-1.el9sat
|
| Red Hat:satellite_utils:6.17::el9 | redhat | satellite-cli |
< 0:6.17.12-1.el9sat Fix: upgrade to 0:6.17.12-1.el9sat
|
| Red Hat:satellite:6.17::el9 | redhat | rubygem-safemode |
< 0:1.5.0-2.el9sat Fix: upgrade to 0:1.5.0-2.el9sat
|
| Red Hat:satellite:6.17::el9 | redhat | satellite |
< 0:6.17.12-1.el9sat Fix: upgrade to 0:6.17.12-1.el9sat
|
| Red Hat:satellite:6.17::el9 | redhat | satellite-cli |
< 0:6.17.12-1.el9sat Fix: upgrade to 0:6.17.12-1.el9sat
|
| Red Hat:satellite:6.17::el9 | redhat | satellite-common |
< 0:6.17.12-1.el9sat Fix: upgrade to 0:6.17.12-1.el9sat
|
| Red Hat:satellite:6.17::el9 | redhat | satellite-obsolete-packages |
< 0:6.17.12-1.el9sat Fix: upgrade to 0:6.17.12-1.el9sat
|
Original advisory text
Red Hat Security Advisory: Satellite 6.17.12 Async Update
References
- https://access.redhat.com/errata/RHSA-2026:74505 Vendor Advisory
- https://access.redhat.com/security/updates/classification/#critical Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2449774 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2484204 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2488952 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2488956 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2489969 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2489970 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2489971 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2489992 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2489993 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2490542 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2490543 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2515815 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2515820 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2515838 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2515839 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2517518 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2517523 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2517527 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2520368 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2523205 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2523348 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2530744 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2534185 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2536844 Third Party Advisory
- https://issues.redhat.com/browse/SAT-50544 Third Party Advisory
- https://issues.redhat.com/browse/SAT-50545 Third Party Advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_74505.... Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-12405 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-12405 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-12405 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-12423 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-12423 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-12423 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-12540 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-12540 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-12540 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-12541 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-12541 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-12541 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-12542 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-12542 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-12542 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-12544 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-12544 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-12544 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-12545 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-12545 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-12545 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-33154 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-33154 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-33154 Vendor Advisory
- https://github.com/dynaconf/dynaconf/commit/2fbb45ee36b8c0caa5b924fe19f3c1a5e860... Third Party Advisory
- https://github.com/dynaconf/dynaconf/releases/tag/3.2.13 Third Party Advisory
- https://github.com/dynaconf/dynaconf/security/advisories/GHSA-pxrr-hq57-q35p Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2026-33818 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-33818 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-33818 Vendor Advisory
- https://go.dev/cl/814980 Third Party Advisory
- https://go.dev/issue/80405 Third Party Advisory
- https://groups.google.com/g/golang-announce/c/94pEornpRlI Third Party Advisory
- https://pkg.go.dev/vuln/GO-2026-5972 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-42504 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-42504 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-42504 Vendor Advisory
- https://go.dev/cl/774481 Third Party Advisory
- https://go.dev/issue/79217 Third Party Advisory
- https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw Third Party Advisory
- https://pkg.go.dev/vuln/GO-2026-5038 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-49825 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-49825 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-49825 Vendor Advisory
- https://github.com/fedora-python/lxml_html_clean/commit/322357ac61c6cf80fcbaba53... Third Party Advisory
- https://github.com/fedora-python/lxml_html_clean/releases/tag/0.4.5 Third Party Advisory
- https://github.com/fedora-python/lxml_html_clean/security/advisories/GHSA-4jhm-j... Third Party Advisory
- https://github.com/lxml/lxml/commit/5927a6d5e851845140975d99b65461e255caaab0 Third Party Advisory
- https://github.com/lxml/lxml/releases/tag/lxml-6.1.1 Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2026-54284 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-54284 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-54284 Vendor Advisory
- https://github.com/andialbrecht/sqlparse/commit/939b129e24c0ad5d51368b1aa72fffca... Third Party Advisory
- https://github.com/andialbrecht/sqlparse/security/advisories/GHSA-pwgv-4x5q-6m9f Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2026-56097 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-56097 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-56097 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-56098 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-56098 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-56098 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-56858 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-56858 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-56858 Vendor Advisory
- https://go.dev/cl/807100 Third Party Advisory
- https://go.dev/issue/80435 Third Party Advisory
- https://pkg.go.dev/vuln/GO-2026-6091 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-56860 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-56860 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-56860 Vendor Advisory
- https://go.dev/cl/803681 Third Party Advisory
- https://go.dev/issue/80494 Third Party Advisory
- https://pkg.go.dev/vuln/GO-2026-6218 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-56862 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-56862 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-56862 Vendor Advisory
- https://go.dev/cl/804261 Third Party Advisory
- https://go.dev/issue/80528 Third Party Advisory
- https://pkg.go.dev/vuln/GO-2026-6090 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-59893 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-59893 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-59893 Vendor Advisory
- https://github.com/andialbrecht/sqlparse/commit/d1d80602741f77ec78e5a04ce4719244... Third Party Advisory
- https://github.com/andialbrecht/sqlparse/security/advisories/GHSA-prg7-hcfm-mfcr Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2026-71491 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-71491 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-71491 Vendor Advisory
- https://github.com/andialbrecht/sqlparse/commit/ef2012a5eeb491e604dea2b00d516904... Third Party Advisory
- https://github.com/andialbrecht/sqlparse/security/advisories/GHSA-f2ff-p2ww-7p4p Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2026-78679 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-78679 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-78679 Vendor Advisory
- https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-3wxw-... Third Party Advisory
- https://www.vulncheck.com/advisories/gitpython-before-arbitrary-file-read-via-ta... Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2026-79654 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-79654 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-79654 Vendor Advisory
- https://github.com/Katello/katello/pull/11847 Third Party Advisory
- https://projects.theforeman.org/issues/39701 Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2026-87817 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-87817 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-87817 Vendor Advisory
- https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-239g-... Third Party Advisory
- https://www.vulncheck.com/advisories/gitpython-before-3.1.60-remote-code-executi... Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2026-96658 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-96658 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-96658 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-96659 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-96659 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-96659 Vendor Advisory
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker full control (estimated)
Timeline
Published3 Oct 2026
Updated3 Oct 2026
First seen3 Oct 2026
Sources
RHSA-2026:74505 · OSV
Track software like this
Free during beta