Critical Red Hat Satellite Flaw Could Enable Root Password Theft and Code Execution Attacks
Red Hat fixed Satellite flaw CVE-2026-96659, which can leak host root passwords and enable Foreman command execution.
Red Hat disclosed CVE-2026-96659, an authorization flaw in Foreman template preview endpoints used by Red Hat Satellite, rated Important with CVSS 9.1. An authenticated Viewer-role user can retrieve sensitive host attributes, including root passwords. If Foreman Safemode is off or bypassed, the flaw can allow command execution as the Foreman service account; related CVE-2026-96658 is a Safemode bypass that can lead to remote code execution. Patches are available for Satellite 6.16, 6.18, and 6.19 via RHSA-2026:74506, RHSA-2026:74504, and RHSA-2026:74503.
67