High

Forman: foreman: remote code execution via command injection in websocket proxy

Type: advisorySource: Official CVE List1 source record

A flaw was found in Foreman. A remote attacker could exploit a command injection vulnerability in Foreman's WebSocket proxy implementation. This vulnerability arises from the system's use of unsanitized hostname values from compute resource providers when constructing shell commands. By operating a malicious compute resource server, an attacker could achieve remote code execution on the Foreman server when a user accesses VM VNC console functionality. This could lead to the compromise of sensitive credentials and the entire managed infrastructure.

Announced 26 Mar 2026Group revision 1

Original source ↗

CVE-2026-1961

Primary source · Revision 1

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-1961

Red Hat Satellite 6.16 for RHEL 8

Source reference: /containers/cna/affected/0/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Satellite 6.16 for RHEL 9

Source reference: /containers/cna/affected/1/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Satellite 6.17 for RHEL 9

Source reference: /containers/cna/affected/2/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Satellite 6.17 for RHEL 9

Source reference: /containers/cna/affected/3/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Satellite 6.17 for RHEL 9

Source reference: /containers/cna/affected/4/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Satellite 6.17 for RHEL 9

Source reference: /containers/cna/affected/5/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Satellite 6.17 for RHEL 9

Source reference: /containers/cna/affected/6/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Satellite 6.17 for RHEL 9

Source reference: /containers/cna/affected/7/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Satellite 6.17 for RHEL 9

Source reference: /containers/cna/affected/8/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Satellite 6.17 for RHEL 9

Source reference: /containers/cna/affected/9/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Satellite 6.17 for RHEL 9

Source reference: /containers/cna/affected/10/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Satellite 6.17 for RHEL 9

Source reference: /containers/cna/affected/11/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Satellite 6.17 for RHEL 9

Source reference: /containers/cna/affected/12/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Satellite 6.17 for RHEL 9

Source reference: /containers/cna/affected/13/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Satellite 6.17 for RHEL 9

Source reference: /containers/cna/affected/14/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Satellite 6.17 for RHEL 9

Source reference: /containers/cna/affected/15/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Satellite 6.17 for RHEL 9

Source reference: /containers/cna/affected/16/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Satellite 6.17 for RHEL 9

Source reference: /containers/cna/affected/17/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Satellite 6.17 for RHEL 9

Source reference: /containers/cna/affected/18/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Satellite 6.17 for RHEL 9

Source reference: /containers/cna/affected/19/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Satellite 6.17 for RHEL 9

Source reference: /containers/cna/affected/20/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Satellite 6.17 for RHEL 9

Source reference: /containers/cna/affected/21/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Satellite 6.17 for RHEL 9

Source reference: /containers/cna/affected/22/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Satellite 6.17 for RHEL 9

Source reference: /containers/cna/affected/23/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Satellite 6.17 for RHEL 9

Source reference: /containers/cna/affected/24/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Satellite 6.17 for RHEL 9

Source reference: /containers/cna/affected/25/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Satellite 6.18 for RHEL 9

Source reference: /containers/cna/affected/26/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Satellite 6

Source reference: /containers/cna/affected/27/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Structured affected-version data

Original package identities and version rules from this source.

[
  {
    "cpes": [
      "cpe:/a:redhat:satellite:6.16::el8",
      "cpe:/a:redhat:satellite:6.16::el9",
      "cpe:/a:redhat:satellite_capsule:6.16::el8",
      "cpe:/a:redhat:satellite_capsule:6.16::el9",
      "cpe:/a:redhat:satellite_maintenance:6.16::el9",
      "cpe:/a:redhat:satellite_utils:6.16::el8",
      "cpe:/a:redhat:satellite_utils:6.16::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.16 for RHEL 8",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:3.12.0.14-1.el8sat",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "foreman",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:satellite:6.16::el8",
      "cpe:/a:redhat:satellite:6.16::el9",
      "cpe:/a:redhat:satellite_capsule:6.16::el8",
      "cpe:/a:redhat:satellite_capsule:6.16::el9",
      "cpe:/a:redhat:satellite_maintenance:6.16::el9",
      "cpe:/a:redhat:satellite_utils:6.16::el8",
      "cpe:/a:redhat:satellite_utils:6.16::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.16 for RHEL 9",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:3.12.0.14-1.el9sat",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "foreman",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:satellite:6.17::el9",
      "cpe:/a:redhat:satellite_capsule:6.17::el9",
      "cpe:/a:redhat:satellite_maintenance:6.17::el9",
      "cpe:/a:redhat:satellite_utils:6.17::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.17 for RHEL 9",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:3.14.0.14-1.el9sat",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "foreman",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:satellite:6.17::el9",
      "cpe:/a:redhat:satellite_capsule:6.17::el9",
      "cpe:/a:redhat:satellite_maintenance:6.17::el9",
      "cpe:/a:redhat:satellite_utils:6.17::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.17 for RHEL 9",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:0.1.23-0.3.el9pc",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "libcomps",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:satellite:6.17::el9",
      "cpe:/a:redhat:satellite_capsule:6.17::el9",
      "cpe:/a:redhat:satellite_maintenance:6.17::el9",
      "cpe:/a:redhat:satellite_utils:6.17::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.17 for RHEL 9",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:1.2.0-0.1.el9pc",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "python-brotli",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:satellite:6.17::el9",
      "cpe:/a:redhat:satellite_capsule:6.17::el9",
      "cpe:/a:redhat:satellite_maintenance:6.17::el9",
      "cpe:/a:redhat:satellite_utils:6.17::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.17 for RHEL 9",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:4.2.28-0.1.el9pc",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "python-django",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:satellite:6.17::el9",
      "cpe:/a:redhat:satellite_capsule:6.17::el9",
      "cpe:/a:redhat:satellite_maintenance:6.17::el9",
      "cpe:/a:redhat:satellite_utils:6.17::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.17 for RHEL 9",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:2.22.3-1.el9pc",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "python-pulp-container",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:satellite:6.17::el9",
      "cpe:/a:redhat:satellite_capsule:6.17::el9",
      "cpe:/a:redhat:satellite_maintenance:6.17::el9",
      "cpe:/a:redhat:satellite_utils:6.17::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.17 for RHEL 9",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:3.27.10-2.el9pc",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "python-pulp-rpm",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:satellite:6.17::el9",
      "cpe:/a:redhat:satellite_capsule:6.17::el9",
      "cpe:/a:redhat:satellite_maintenance:6.17::el9",
      "cpe:/a:redhat:satellite_utils:6.17::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.17 for RHEL 9",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:1.5.1-1.el9sat",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "rubygem-fog-kubevirt",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:satellite:6.17::el9",
      "cpe:/a:redhat:satellite_capsule:6.17::el9",
      "cpe:/a:redhat:satellite_maintenance:6.17::el9",
      "cpe:/a:redhat:satellite_utils:6.17::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.17 for RHEL 9",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:0.4.3-1.el9sat",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "rubygem-foreman_kubevirt",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:satellite:6.17::el9",
      "cpe:/a:redhat:satellite_capsule:6.17::el9",
      "cpe:/a:redhat:satellite_maintenance:6.17::el9",
      "cpe:/a:redhat:satellite_utils:6.17::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.17 for RHEL 9",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:4.16.0.14-1.el9sat",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "rubygem-katello",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:satellite:6.17::el9",
      "cpe:/a:redhat:satellite_capsule:6.17::el9",
      "cpe:/a:redhat:satellite_maintenance:6.17::el9",
      "cpe:/a:redhat:satellite_utils:6.17::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.17 for RHEL 9",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:0.13.0-1.el9sat",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "rubygem-rubyipmi",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:satellite:6.17::el9",
      "cpe:/a:redhat:satellite_capsule:6.17::el9",
      "cpe:/a:redhat:satellite_maintenance:6.17::el9",
      "cpe:/a:redhat:satellite_utils:6.17::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.17 for RHEL 9",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:6.17.7-1.el9sat",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "satellite",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:satellite:6.17::el9",
      "cpe:/a:redhat:satellite_capsule:6.17::el9",
      "cpe:/a:redhat:satellite_maintenance:6.17::el9",
      "cpe:/a:redhat:satellite_utils:6.17::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.17 for RHEL 9",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:0.0.3-4.el9sat",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "yggdrasil-worker-forwarder",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:satellite:6.17::el9",
      "cpe:/a:redhat:satellite_capsule:6.17::el9",
      "cpe:/a:redhat:satellite_maintenance:6.17::el9",
      "cpe:/a:redhat:satellite_utils:6.17::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.17 for RHEL 9",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:3.14.0.14-1.el9sat",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "foreman",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:satellite:6.17::el9",
      "cpe:/a:redhat:satellite_capsule:6.17::el9",
      "cpe:/a:redhat:satellite_maintenance:6.17::el9",
      "cpe:/a:redhat:satellite_utils:6.17::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.17 for RHEL 9",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:0.1.23-0.3.el9pc",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "libcomps",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:satellite:6.17::el9",
      "cpe:/a:redhat:satellite_capsule:6.17::el9",
      "cpe:/a:redhat:satellite_maintenance:6.17::el9",
      "cpe:/a:redhat:satellite_utils:6.17::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.17 for RHEL 9",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:1.2.0-0.1.el9pc",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "python-brotli",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:satellite:6.17::el9",
      "cpe:/a:redhat:satellite_capsule:6.17::el9",
      "cpe:/a:redhat:satellite_maintenance:6.17::el9",
      "cpe:/a:redhat:satellite_utils:6.17::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.17 for RHEL 9",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:4.2.28-0.1.el9pc",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "python-django",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:satellite:6.17::el9",
      "cpe:/a:redhat:satellite_capsule:6.17::el9",
      "cpe:/a:redhat:satellite_maintenance:6.17::el9",
      "cpe:/a:redhat:satellite_utils:6.17::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.17 for RHEL 9",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:2.22.3-1.el9pc",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "python-pulp-container",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:satellite:6.17::el9",
      "cpe:/a:redhat:satellite_capsule:6.17::el9",
      "cpe:/a:redhat:satellite_maintenance:6.17::el9",
      "cpe:/a:redhat:satellite_utils:6.17::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.17 for RHEL 9",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:3.27.10-2.el9pc",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "python-pulp-rpm",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:satellite:6.17::el9",
      "cpe:/a:redhat:satellite_capsule:6.17::el9",
      "cpe:/a:redhat:satellite_maintenance:6.17::el9",
      "cpe:/a:redhat:satellite_utils:6.17::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.17 for RHEL 9",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:1.5.1-1.el9sat",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "rubygem-fog-kubevirt",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:satellite:6.17::el9",
      "cpe:/a:redhat:satellite_capsule:6.17::el9",
      "cpe:/a:redhat:satellite_maintenance:6.17::el9",
      "cpe:/a:redhat:satellite_utils:6.17::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.17 for RHEL 9",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:0.4.3-1.el9sat",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "rubygem-foreman_kubevirt",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:satellite:6.17::el9",
      "cpe:/a:redhat:satellite_capsule:6.17::el9",
      "cpe:/a:redhat:satellite_maintenance:6.17::el9",
      "cpe:/a:redhat:satellite_utils:6.17::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.17 for RHEL 9",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:4.16.0.14-1.el9sat",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "rubygem-katello",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:satellite:6.17::el9",
      "cpe:/a:redhat:satellite_capsule:6.17::el9",
      "cpe:/a:redhat:satellite_maintenance:6.17::el9",
      "cpe:/a:redhat:satellite_utils:6.17::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.17 for RHEL 9",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:0.13.0-1.el9sat",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "rubygem-rubyipmi",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:satellite:6.17::el9",
      "cpe:/a:redhat:satellite_capsule:6.17::el9",
      "cpe:/a:redhat:satellite_maintenance:6.17::el9",
      "cpe:/a:redhat:satellite_utils:6.17::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.17 for RHEL 9",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:6.17.7-1.el9sat",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "satellite",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:satellite:6.17::el9",
      "cpe:/a:redhat:satellite_capsule:6.17::el9",
      "cpe:/a:redhat:satellite_maintenance:6.17::el9",
      "cpe:/a:redhat:satellite_utils:6.17::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.17 for RHEL 9",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:0.0.3-4.el9sat",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "yggdrasil-worker-forwarder",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:satellite:6.18::el9",
      "cpe:/a:redhat:satellite_capsule:6.18::el9",
      "cpe:/a:redhat:satellite_utils:6.18::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.18 for RHEL 9",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:3.16.0.12-1.el9sat",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "foreman",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:satellite:6"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6",
    "packageName": "satellite-utils:el8/foreman",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  }
]

Related CVEs: CVE-2026-1961
Source reference: /cveMetadata/cveId

Publisher severity

high

Source reference: /containers/cna/metrics

Event: #42530 · Revision 1
Added to Heist Feed: Sun, 25 Oct 2026 11:45:09 GMT
Publisher date: Thu, 26 Mar 2026 12:53:09 GMT

Read the original announcement

Revision history

25 Oct 2026CVE-2026-1961 · Revision 1Source updated