RH
Product
Red Hat Satellite 6.18
On CISA KEVExploited in the wild
38
CVEs
1
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 9High 18Medium 10Low 1
Watch
Add Red Hat Satellite 6.18 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-48710 In wildKEV | 6.5 | May 26 | Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks Affected: All versions, or not specified |
| CVE-2026-42041 | 6.5 | Apr 24 | Axios: Authentication Bypass via Prototype Pollution Gadget in `validateStatus` Merge Strategy Affected: All versions, or not specified |
| CVE-2025-69196 | 6.5 | Mar 16 | FastMCP OAuth Proxy token reuse across MCP servers Affected: All versions, or not specified |
| CVE-2026-26007 | 6.5 | Feb 10 | cryptography Subgroup Attack Due to Missing Subgroup Validation for SECT Curves Affected: All versions, or not specified |
| CVE-2026-9073 | 6.2 | Jun 23 | Foreman-mcp-server: mcp server: insecure sensitive http header sanitization Affected: All versions, or not specified |
| CVE-2026-24049 | 5.5 | Jan 22 | wheel Allows Arbitrary File Permission Modification via Path Traversal Affected: All versions, or not specified |
| CVE-2026-1312 | 5.4 | Feb 3 | Potential SQL injection via QuerySet.order_by and FilteredRelation Affected: All versions, or not specified |
| CVE-2026-1287 | 5.4 | Feb 3 | Potential SQL injection in column aliases via control characters Affected: All versions, or not specified |
| CVE-2026-1207 | 5.4 | Feb 3 | Potential SQL injection via raster lookups on PostGIS Affected: All versions, or not specified |
| CVE-2026-40175 | 4.8 | Apr 10 | Axios has Unrestricted Cloud Metadata Exfiltration via Header Injection Chain Affected: All versions, or not specified |
Showing 10