Critical Red Hat Satellite Flaw Could Enable Root Password Theft and Code Execution Attacks

Red Hat has fixed a high-impact vulnerability in Red Hat Satellite that could allow a low-privileged authenticated user to access sensitive host information, including root passwords. Under unsafe configurations, the flaw could also escalate to arbitrary command execution as the Foreman service account. Tracked as CVE-2026-96659, the issue affects the Foreman component used by Red Hat Satellite for infrastructure provisioning, configuration management, and lifecycle operations. Red Hat assigned the vulnerability an Important severity rating and a CVSS v3 score of 9.1. The vulnerability was publicly disclosed on October 1, 2026. The attacker needs network access and a valid low-privileged account, but does not require user...

Read the full article at the source.