Red Hat Security Advisory: Satellite 6.16.10 Async Update

Fixed packages 40

Vulnerabilities 4

• High 8.8
  CVE-2026-5136

  Foreman: foreman: privilege escalation to administrator-level access via usergroup role assignment manipulation

  A flaw was found in Foreman. The Usergroup model in Foreman does not properly validate role assignments against the calling user's permissions. This allows an authenticated user with usergroup management permissions to attach arbitrary roles, including admini…

  Red Hat Red Hat Satellite 6 Red Hat Satellite 6.16 for RHEL 8 Red Hat Satellite 6.17 for RHEL 9
  Jul 1, 2026
• Medium 6.5
  CVE-2026-5135

  Foreman: foreman: unauthorized modification of host configurations via broken access control

  A flaw was found in Foreman. This broken access control vulnerability allows an authenticated user with host-edit permissions to retarget an existing lookup value override to a different host. This is achieved by modifying the match field through nested host …

  Red Hat Red Hat Satellite 6 Red Hat Satellite 6.16 for RHEL 8 Red Hat Satellite 6.17 for RHEL 9
  Jul 1, 2026
• Medium 6.5
  CVE-2026-5142

  Foreman: foreman: cross-tenant private ssh key disclosure via taxonomy scoping bypass

  A flaw was found in foreman. Authenticated users with 'view_keypairs' permission can bypass taxonomy scoping, allowing them to download private SSH (Secure Shell) keys from other organizations by directly querying key pair IDs. This vulnerability leads to cro…

  Red Hat Red Hat Satellite 6 Red Hat Satellite 6.16 for RHEL 8 Red Hat Satellite 6.17 for RHEL 9
  Jul 1, 2026
• Medium 4.3
  CVE-2026-5138

  Foreman: foreman: information disclosure via improper validation of nested request parameters

  A flaw was found in Foreman. An authenticated user with host-edit permissions could exploit a cross-tenant information disclosure vulnerability. This flaw occurs because the taxonomy_scope controller method does not properly validate organization and location…

  Red Hat Red Hat Satellite 6 Red Hat Satellite 6.16 for RHEL 8 Red Hat Satellite 6.17 for RHEL 9
  Jul 1, 2026

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2452230
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2452970
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2452971
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2452999
• article
  https://issues.redhat.com/browse/SAT-47220
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_34367.json
• report
  https://access.redhat.com/security/cve/CVE-2026-5135
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-5135
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-5135
• report
  https://access.redhat.com/security/cve/CVE-2026-5136
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-5136
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-5136
• report
  https://access.redhat.com/security/cve/CVE-2026-5138
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-5138
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-5138
• report
  https://access.redhat.com/security/cve/CVE-2026-5142
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-5142
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-5142