RH
Product
Red Hat Satellite 6.19
On CISA KEVExploited in the wild
13
CVEs
1
On KEV
9.3
Max CVSS
0
New 30D
Severity mix
Critical 1High 9Medium 3Low 0
Watch
Add Red Hat Satellite 6.19 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-44494 | 8.7 | Jun 11 | Axios: Full Man-in-the-Middle via Prototype Pollution Gadget in `config.proxy` Affected: All versions, or not specified |
| CVE-2026-42945 | 8.1 | May 13 | NGINX ngx_http_rewrite_module vulnerability Affected: All versions, or not specified |
| CVE-2026-12112 | 7.8 | Jun 23 | Foreman-mcp-server: mcp server: active session hijacking via insecure session state reuse Affected: All versions, or not specified |
| CVE-2026-13676 | 7.5 | Jun 29 | fast-uri vulnerable to host confusion via failed IDN canonicalization Affected: All versions, or not specified |
| CVE-2026-12143 | 7.5 | Jun 12 | form-data does not escape CR/LF/quote in multipart field names and filenames (CRLF injection) Affected: All versions, or not specified |
| CVE-2026-44487 | 7.5 | Jun 11 | Axios: Proxy-Authorization Credential Leak to Origin Server Across HTTP-to-HTTPS Redirect in Axios Node.js HTTP Adapter Affected: All versions, or not specified |
| CVE-2026-44488 | 7.5 | Jun 11 | Axios: Allocation of Resources Without Limits or Throttling in axios Affected: All versions, or not specified |
| CVE-2026-42561 | 7.5 | May 13 | Python-Multipart: Denial of Service via unbounded multipart part headers Affected: All versions, or not specified |
| CVE-2026-44432 | 7.5 | May 13 | urllib3: Decompression-bomb safeguards bypassed in parts of the streaming API Affected: All versions, or not specified |
Showing 9