CVE Explorer

CVE-2026-4324

A flaw was found in the Katello plugin for Red Hat Satellite. This vulnerability, caused by improper sanitization of user-provided input, allows a remote attacker to inject arbitrary SQL commands into the sort_by parameter of the /api/hosts/bootc_images API endpoint. This can lead to a Denial of Service (DoS) by triggering database errors, and potentially enable Boolean-based Blind SQL injection, which could allow an attacker to extract sensitive information from the database.

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:f446df21a11c24e2c40856c52dfe3bae6156fb5b04e168f88d6fb7ba2cf75598

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 27 assertions

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9","cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite_utils:6.17::el9"],"defaultStatus":"affected","packageName":"rubygem-fog-kubevirt","product":"Red Hat Satellite 6.17 for RHEL 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:1.5.1-1.el9sat","versionType":"rpm"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c591508155ff27d42f75bf779d9a3107a50918c9dcc3e945c0021276ebdb7849 · sha256:31e0e613d2448e11… · /containers/cna/affected/6

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite:6"],"defaultStatus":"unaffected","packageName":"satellite:el8/rubygem-katello","product":"Red Hat Satellite 6","vendor":"Red Hat"}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c591508155ff27d42f75bf779d9a3107a50918c9dcc3e945c0021276ebdb7849 · sha256:31e0e613d2448e11… · /containers/cna/affected/26

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9","cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite_utils:6.17::el9"],"defaultStatus":"affected","packageName":"rubygem-katello","product":"Red Hat Satellite 6.17 for RHEL 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:4.16.0.14-1.el9sat","versionType":"rpm"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c591508155ff27d42f75bf779d9a3107a50918c9dcc3e945c0021276ebdb7849 · sha256:31e0e613d2448e11… · /containers/cna/affected/8

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9","cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite_utils:6.17::el9"],"defaultStatus":"affected","packageName":"python-pulp-rpm","product":"Red Hat Satellite 6.17 for RHEL 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:3.27.10-2.el9pc","versionType":"rpm"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c591508155ff27d42f75bf779d9a3107a50918c9dcc3e945c0021276ebdb7849 · sha256:31e0e613d2448e11… · /containers/cna/affected/17

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9","cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite_utils:6.17::el9"],"defaultStatus":"affected","packageName":"libcomps","product":"Red Hat Satellite 6.17 for RHEL 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:0.1.23-0.3.el9pc","versionType":"rpm"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c591508155ff27d42f75bf779d9a3107a50918c9dcc3e945c0021276ebdb7849 · sha256:31e0e613d2448e11… · /containers/cna/affected/1

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9","cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite_utils:6.17::el9"],"defaultStatus":"affected","packageName":"python-pulp-container","product":"Red Hat Satellite 6.17 for RHEL 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:2.22.3-1.el9pc","versionType":"rpm"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c591508155ff27d42f75bf779d9a3107a50918c9dcc3e945c0021276ebdb7849 · sha256:31e0e613d2448e11… · /containers/cna/affected/16

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9","cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite_utils:6.17::el9"],"defaultStatus":"affected","packageName":"python-django","product":"Red Hat Satellite 6.17 for RHEL 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:4.2.28-0.1.el9pc","versionType":"rpm"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c591508155ff27d42f75bf779d9a3107a50918c9dcc3e945c0021276ebdb7849 · sha256:31e0e613d2448e11… · /containers/cna/affected/15

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9","cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite_utils:6.17::el9"],"defaultStatus":"affected","packageName":"yggdrasil-worker-forwarder","product":"Red Hat Satellite 6.17 for RHEL 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:0.0.3-4.el9sat","versionType":"rpm"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c591508155ff27d42f75bf779d9a3107a50918c9dcc3e945c0021276ebdb7849 · sha256:31e0e613d2448e11… · /containers/cna/affected/11

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9","cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite_utils:6.17::el9"],"defaultStatus":"affected","packageName":"python-brotli","product":"Red Hat Satellite 6.17 for RHEL 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:1.2.0-0.1.el9pc","versionType":"rpm"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c591508155ff27d42f75bf779d9a3107a50918c9dcc3e945c0021276ebdb7849 · sha256:31e0e613d2448e11… · /containers/cna/affected/2

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9","cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite_utils:6.17::el9"],"defaultStatus":"affected","packageName":"foreman","product":"Red Hat Satellite 6.17 for RHEL 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:3.14.0.14-1.el9sat","versionType":"rpm"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c591508155ff27d42f75bf779d9a3107a50918c9dcc3e945c0021276ebdb7849 · sha256:31e0e613d2448e11… · /containers/cna/affected/0

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9","cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite_utils:6.17::el9"],"defaultStatus":"affected","packageName":"python-pulp-rpm","product":"Red Hat Satellite 6.17 for RHEL 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:3.27.10-2.el9pc","versionType":"rpm"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c591508155ff27d42f75bf779d9a3107a50918c9dcc3e945c0021276ebdb7849 · sha256:31e0e613d2448e11… · /containers/cna/affected/5

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9","cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite_utils:6.17::el9"],"defaultStatus":"affected","packageName":"satellite","product":"Red Hat Satellite 6.17 for RHEL 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:6.17.7-1.el9sat","versionType":"rpm"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c591508155ff27d42f75bf779d9a3107a50918c9dcc3e945c0021276ebdb7849 · sha256:31e0e613d2448e11… · /containers/cna/affected/22

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite:6.19::el9","cpe:/a:redhat:satellite_capsule:6.19::el9","cpe:/a:redhat:satellite_maintenance:6.19::el9","cpe:/a:redhat:satellite_utils:6.19::el9"],"defaultStatus":"affected","packageName":"rubygem-katello","product":"Red Hat Satellite 6.19 for RHEL 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:4.20.0.4-1.el9sat","versionType":"rpm"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c591508155ff27d42f75bf779d9a3107a50918c9dcc3e945c0021276ebdb7849 · sha256:31e0e613d2448e11… · /containers/cna/affected/25

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9","cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite_utils:6.17::el9"],"defaultStatus":"affected","packageName":"rubygem-foreman_kubevirt","product":"Red Hat Satellite 6.17 for RHEL 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:0.4.3-1.el9sat","versionType":"rpm"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c591508155ff27d42f75bf779d9a3107a50918c9dcc3e945c0021276ebdb7849 · sha256:31e0e613d2448e11… · /containers/cna/affected/7

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9","cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite_utils:6.17::el9"],"defaultStatus":"affected","packageName":"rubygem-rubyipmi","product":"Red Hat Satellite 6.17 for RHEL 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:0.13.0-1.el9sat","versionType":"rpm"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c591508155ff27d42f75bf779d9a3107a50918c9dcc3e945c0021276ebdb7849 · sha256:31e0e613d2448e11… · /containers/cna/affected/9

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9","cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite_utils:6.17::el9"],"defaultStatus":"affected","packageName":"satellite","product":"Red Hat Satellite 6.17 for RHEL 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:6.17.7-1.el9sat","versionType":"rpm"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c591508155ff27d42f75bf779d9a3107a50918c9dcc3e945c0021276ebdb7849 · sha256:31e0e613d2448e11… · /containers/cna/affected/10

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9","cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite_utils:6.17::el9"],"defaultStatus":"affected","packageName":"rubygem-rubyipmi","product":"Red Hat Satellite 6.17 for RHEL 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:0.13.0-1.el9sat","versionType":"rpm"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c591508155ff27d42f75bf779d9a3107a50918c9dcc3e945c0021276ebdb7849 · sha256:31e0e613d2448e11… · /containers/cna/affected/21

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9","cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite_utils:6.17::el9"],"defaultStatus":"affected","packageName":"foreman","product":"Red Hat Satellite 6.17 for RHEL 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:3.14.0.14-1.el9sat","versionType":"rpm"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c591508155ff27d42f75bf779d9a3107a50918c9dcc3e945c0021276ebdb7849 · sha256:31e0e613d2448e11… · /containers/cna/affected/12

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite:6.18::el9","cpe:/a:redhat:satellite_capsule:6.18::el9","cpe:/a:redhat:satellite_utils:6.18::el9"],"defaultStatus":"affected","packageName":"rubygem-katello","product":"Red Hat Satellite 6.18 for RHEL 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:4.18.0.9-1.el9sat","versionType":"rpm"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c591508155ff27d42f75bf779d9a3107a50918c9dcc3e945c0021276ebdb7849 · sha256:31e0e613d2448e11… · /containers/cna/affected/24

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9","cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite_utils:6.17::el9"],"defaultStatus":"affected","packageName":"libcomps","product":"Red Hat Satellite 6.17 for RHEL 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:0.1.23-0.3.el9pc","versionType":"rpm"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c591508155ff27d42f75bf779d9a3107a50918c9dcc3e945c0021276ebdb7849 · sha256:31e0e613d2448e11… · /containers/cna/affected/13

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9","cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite_utils:6.17::el9"],"defaultStatus":"affected","packageName":"python-pulp-container","product":"Red Hat Satellite 6.17 for RHEL 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:2.22.3-1.el9pc","versionType":"rpm"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c591508155ff27d42f75bf779d9a3107a50918c9dcc3e945c0021276ebdb7849 · sha256:31e0e613d2448e11… · /containers/cna/affected/4

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c591508155ff27d42f75bf779d9a3107a50918c9dcc3e945c0021276ebdb7849 · sha256:31e0e613d2448e11… · /containers/cna/affected/18

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9","cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite_utils:6.17::el9"],"defaultStatus":"affected","packageName":"rubygem-foreman_kubevirt","product":"Red Hat Satellite 6.17 for RHEL 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:0.4.3-1.el9sat","versionType":"rpm"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c591508155ff27d42f75bf779d9a3107a50918c9dcc3e945c0021276ebdb7849 · sha256:31e0e613d2448e11… · /containers/cna/affected/19

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9","cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite_utils:6.17::el9"],"defaultStatus":"affected","packageName":"python-django","product":"Red Hat Satellite 6.17 for RHEL 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:4.2.28-0.1.el9pc","versionType":"rpm"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c591508155ff27d42f75bf779d9a3107a50918c9dcc3e945c0021276ebdb7849 · sha256:31e0e613d2448e11… · /containers/cna/affected/3

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9","cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite_utils:6.17::el9"],"defaultStatus":"affected","packageName":"python-brotli","product":"Red Hat Satellite 6.17 for RHEL 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:1.2.0-0.1.el9pc","versionType":"rpm"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c591508155ff27d42f75bf779d9a3107a50918c9dcc3e945c0021276ebdb7849 · sha256:31e0e613d2448e11… · /containers/cna/affected/14

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9","cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite_utils:6.17::el9"],"defaultStatus":"affected","packageName":"rubygem-katello","product":"Red Hat Satellite 6.17 for RHEL 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:4.16.0.14-1.el9sat","versionType":"rpm"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c591508155ff27d42f75bf779d9a3107a50918c9dcc3e945c0021276ebdb7849 · sha256:31e0e613d2448e11… · /containers/cna/affected/20

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9","cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite_utils:6.17::el9"],"defaultStatus":"affected","packageName":"yggdrasil-worker-forwarder","product":"Red Hat Satellite 6.17 for RHEL 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:0.0.3-4.el9sat","versionType":"rpm"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c591508155ff27d42f75bf779d9a3107a50918c9dcc3e945c0021276ebdb7849 · sha256:31e0e613d2448e11… · /containers/cna/affected/23

Affected products and versions

27 source assertions

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c591508155ff27d42f75bf779d9a3107a50918c9dcc3e945c0021276ebdb7849 · sha256:31e0e613d2448e11… · /containers/cna/affected/6

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c591508155ff27d42f75bf779d9a3107a50918c9dcc3e945c0021276ebdb7849 · sha256:31e0e613d2448e11… · /containers/cna/affected/26

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9","cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite_utils:6.17::el9"],"defaultStatus":"affected","packageName":"rubygem-katello","product":"Red Hat Satellite 6.17 for RHEL 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:4.16.0.14-1.el9sat","versionType":"rpm"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c591508155ff27d42f75bf779d9a3107a50918c9dcc3e945c0021276ebdb7849 · sha256:31e0e613d2448e11… · /containers/cna/affected/8

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9","cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite_utils:6.17::el9"],"defaultStatus":"affected","packageName":"python-pulp-rpm","product":"Red Hat Satellite 6.17 for RHEL 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:3.27.10-2.el9pc","versionType":"rpm"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c591508155ff27d42f75bf779d9a3107a50918c9dcc3e945c0021276ebdb7849 · sha256:31e0e613d2448e11… · /containers/cna/affected/17

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9","cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite_utils:6.17::el9"],"defaultStatus":"affected","packageName":"libcomps","product":"Red Hat Satellite 6.17 for RHEL 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:0.1.23-0.3.el9pc","versionType":"rpm"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c591508155ff27d42f75bf779d9a3107a50918c9dcc3e945c0021276ebdb7849 · sha256:31e0e613d2448e11… · /containers/cna/affected/1

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9","cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite_utils:6.17::el9"],"defaultStatus":"affected","packageName":"python-pulp-container","product":"Red Hat Satellite 6.17 for RHEL 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:2.22.3-1.el9pc","versionType":"rpm"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c591508155ff27d42f75bf779d9a3107a50918c9dcc3e945c0021276ebdb7849 · sha256:31e0e613d2448e11… · /containers/cna/affected/16

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9","cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite_utils:6.17::el9"],"defaultStatus":"affected","packageName":"python-django","product":"Red Hat Satellite 6.17 for RHEL 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:4.2.28-0.1.el9pc","versionType":"rpm"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c591508155ff27d42f75bf779d9a3107a50918c9dcc3e945c0021276ebdb7849 · sha256:31e0e613d2448e11… · /containers/cna/affected/15

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9","cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite_utils:6.17::el9"],"defaultStatus":"affected","packageName":"yggdrasil-worker-forwarder","product":"Red Hat Satellite 6.17 for RHEL 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:0.0.3-4.el9sat","versionType":"rpm"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c591508155ff27d42f75bf779d9a3107a50918c9dcc3e945c0021276ebdb7849 · sha256:31e0e613d2448e11… · /containers/cna/affected/11

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9","cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite_utils:6.17::el9"],"defaultStatus":"affected","packageName":"python-brotli","product":"Red Hat Satellite 6.17 for RHEL 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:1.2.0-0.1.el9pc","versionType":"rpm"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c591508155ff27d42f75bf779d9a3107a50918c9dcc3e945c0021276ebdb7849 · sha256:31e0e613d2448e11… · /containers/cna/affected/2

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9","cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite_utils:6.17::el9"],"defaultStatus":"affected","packageName":"foreman","product":"Red Hat Satellite 6.17 for RHEL 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:3.14.0.14-1.el9sat","versionType":"rpm"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c591508155ff27d42f75bf779d9a3107a50918c9dcc3e945c0021276ebdb7849 · sha256:31e0e613d2448e11… · /containers/cna/affected/0

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9","cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite_utils:6.17::el9"],"defaultStatus":"affected","packageName":"python-pulp-rpm","product":"Red Hat Satellite 6.17 for RHEL 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:3.27.10-2.el9pc","versionType":"rpm"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c591508155ff27d42f75bf779d9a3107a50918c9dcc3e945c0021276ebdb7849 · sha256:31e0e613d2448e11… · /containers/cna/affected/5

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9","cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite_utils:6.17::el9"],"defaultStatus":"affected","packageName":"satellite","product":"Red Hat Satellite 6.17 for RHEL 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:6.17.7-1.el9sat","versionType":"rpm"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c591508155ff27d42f75bf779d9a3107a50918c9dcc3e945c0021276ebdb7849 · sha256:31e0e613d2448e11… · /containers/cna/affected/22

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c591508155ff27d42f75bf779d9a3107a50918c9dcc3e945c0021276ebdb7849 · sha256:31e0e613d2448e11… · /containers/cna/affected/25

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9","cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite_utils:6.17::el9"],"defaultStatus":"affected","packageName":"rubygem-foreman_kubevirt","product":"Red Hat Satellite 6.17 for RHEL 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:0.4.3-1.el9sat","versionType":"rpm"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c591508155ff27d42f75bf779d9a3107a50918c9dcc3e945c0021276ebdb7849 · sha256:31e0e613d2448e11… · /containers/cna/affected/7

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9","cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite_utils:6.17::el9"],"defaultStatus":"affected","packageName":"rubygem-rubyipmi","product":"Red Hat Satellite 6.17 for RHEL 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:0.13.0-1.el9sat","versionType":"rpm"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c591508155ff27d42f75bf779d9a3107a50918c9dcc3e945c0021276ebdb7849 · sha256:31e0e613d2448e11… · /containers/cna/affected/9

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9","cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite_utils:6.17::el9"],"defaultStatus":"affected","packageName":"satellite","product":"Red Hat Satellite 6.17 for RHEL 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:6.17.7-1.el9sat","versionType":"rpm"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c591508155ff27d42f75bf779d9a3107a50918c9dcc3e945c0021276ebdb7849 · sha256:31e0e613d2448e11… · /containers/cna/affected/10

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9","cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite_utils:6.17::el9"],"defaultStatus":"affected","packageName":"rubygem-rubyipmi","product":"Red Hat Satellite 6.17 for RHEL 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:0.13.0-1.el9sat","versionType":"rpm"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c591508155ff27d42f75bf779d9a3107a50918c9dcc3e945c0021276ebdb7849 · sha256:31e0e613d2448e11… · /containers/cna/affected/21

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9","cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite_utils:6.17::el9"],"defaultStatus":"affected","packageName":"foreman","product":"Red Hat Satellite 6.17 for RHEL 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:3.14.0.14-1.el9sat","versionType":"rpm"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c591508155ff27d42f75bf779d9a3107a50918c9dcc3e945c0021276ebdb7849 · sha256:31e0e613d2448e11… · /containers/cna/affected/12

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c591508155ff27d42f75bf779d9a3107a50918c9dcc3e945c0021276ebdb7849 · sha256:31e0e613d2448e11… · /containers/cna/affected/24

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9","cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite_utils:6.17::el9"],"defaultStatus":"affected","packageName":"libcomps","product":"Red Hat Satellite 6.17 for RHEL 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:0.1.23-0.3.el9pc","versionType":"rpm"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c591508155ff27d42f75bf779d9a3107a50918c9dcc3e945c0021276ebdb7849 · sha256:31e0e613d2448e11… · /containers/cna/affected/13

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9","cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite_utils:6.17::el9"],"defaultStatus":"affected","packageName":"python-pulp-container","product":"Red Hat Satellite 6.17 for RHEL 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:2.22.3-1.el9pc","versionType":"rpm"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c591508155ff27d42f75bf779d9a3107a50918c9dcc3e945c0021276ebdb7849 · sha256:31e0e613d2448e11… · /containers/cna/affected/4

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c591508155ff27d42f75bf779d9a3107a50918c9dcc3e945c0021276ebdb7849 · sha256:31e0e613d2448e11… · /containers/cna/affected/18

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9","cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite_utils:6.17::el9"],"defaultStatus":"affected","packageName":"rubygem-foreman_kubevirt","product":"Red Hat Satellite 6.17 for RHEL 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:0.4.3-1.el9sat","versionType":"rpm"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c591508155ff27d42f75bf779d9a3107a50918c9dcc3e945c0021276ebdb7849 · sha256:31e0e613d2448e11… · /containers/cna/affected/19

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9","cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite_utils:6.17::el9"],"defaultStatus":"affected","packageName":"python-django","product":"Red Hat Satellite 6.17 for RHEL 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:4.2.28-0.1.el9pc","versionType":"rpm"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c591508155ff27d42f75bf779d9a3107a50918c9dcc3e945c0021276ebdb7849 · sha256:31e0e613d2448e11… · /containers/cna/affected/3

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9","cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite_utils:6.17::el9"],"defaultStatus":"affected","packageName":"python-brotli","product":"Red Hat Satellite 6.17 for RHEL 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:1.2.0-0.1.el9pc","versionType":"rpm"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c591508155ff27d42f75bf779d9a3107a50918c9dcc3e945c0021276ebdb7849 · sha256:31e0e613d2448e11… · /containers/cna/affected/14

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9","cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite_utils:6.17::el9"],"defaultStatus":"affected","packageName":"rubygem-katello","product":"Red Hat Satellite 6.17 for RHEL 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:4.16.0.14-1.el9sat","versionType":"rpm"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c591508155ff27d42f75bf779d9a3107a50918c9dcc3e945c0021276ebdb7849 · sha256:31e0e613d2448e11… · /containers/cna/affected/20

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9","cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite_utils:6.17::el9"],"defaultStatus":"affected","packageName":"yggdrasil-worker-forwarder","product":"Red Hat Satellite 6.17 for RHEL 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:0.0.3-4.el9sat","versionType":"rpm"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c591508155ff27d42f75bf779d9a3107a50918c9dcc3e945c0021276ebdb7849 · sha256:31e0e613d2448e11… · /containers/cna/affected/23

Provider-owned CVSS observations

1 source assertion

{"metric":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":5.4,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L","version":"3.1"},"metric_type":"cvssV3_1"}

cve_program_cvelist_v5cvss
urn:baitaphish:normalized-source-record:v2:c591508155ff27d42f75bf779d9a3107a50918c9dcc3e945c0021276ebdb7849 · sha256:31e0e613d2448e11… · /containers/cna/metrics/1/cvssV3_1

CWE assertions

1 source assertion

{"cweId":"CWE-89","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')","lang":"en","type":"CWE"}

cve_program_cvelist_v5cwe
urn:baitaphish:normalized-source-record:v2:c591508155ff27d42f75bf779d9a3107a50918c9dcc3e945c0021276ebdb7849 · sha256:31e0e613d2448e11… · /containers/cna/problemTypes/0/descriptions/0

Source references

5 source assertions

{"name":"RHSA-2026:22326","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:22326"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:c591508155ff27d42f75bf779d9a3107a50918c9dcc3e945c0021276ebdb7849 · sha256:31e0e613d2448e11… · /containers/cna/references/0

{"name":"RHSA-2026:5968","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:5968"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:c591508155ff27d42f75bf779d9a3107a50918c9dcc3e945c0021276ebdb7849 · sha256:31e0e613d2448e11… · /containers/cna/references/1

{"name":"RHSA-2026:5970","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:5970"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:c591508155ff27d42f75bf779d9a3107a50918c9dcc3e945c0021276ebdb7849 · sha256:31e0e613d2448e11… · /containers/cna/references/2

{"tags":["vdb-entry","x_refsource_REDHAT"],"url":"https://access.redhat.com/security/cve/CVE-2026-4324"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:c591508155ff27d42f75bf779d9a3107a50918c9dcc3e945c0021276ebdb7849 · sha256:31e0e613d2448e11… · /containers/cna/references/3

{"name":"RHBZ#2448349","tags":["issue-tracking","x_refsource_REDHAT"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2448349"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:c591508155ff27d42f75bf779d9a3107a50918c9dcc3e945c0021276ebdb7849 · sha256:31e0e613d2448e11… · /containers/cna/references/4

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer