All vulnerabilities
CVE-2026-56097

Red Hat Satellite 6.16 for RHEL 8: Rubygem-katello: sql injection in registry proxy via labels

Red Hat Red Hat Satellite 6.16 for RHEL 8Operating systems
Open in ThreatlineRecord JSON
CVSS
6.5Medium
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.27%Chance of exploitation activity in the next 30 days, higher than 18% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed inNone listedNo source names a fixed version. Check the vendor advisory below
Published1 Oct 2026Updated 7 Oct 2026CVE List

What fixes it

No source in this snapshot names a fixed version. The vendor advisories under References are the place to check.

Description

A flaw was found in rubygem-katello. An SQL injection vulnerability exists in the Red Hat Satellite Katello Registry Proxy. The application fails to sanitize input parameters used in database queries within the RegistryProxiesController. The methods check_blob_push_org_label and get_matching_products_from_org take user-supplied labels directly from the request path and interpolate them into raw SQL fragments. This flaw is accessible to a user with only the create_personal_access_tokens permission, even if the user access is restricted, with no Organization or Location assigned.

Text from CVE List

Affected versions 5

  • Red Hat Satellite 6.16 for RHEL 8unaffected: 0:4.14.0.23-1.el8sat and laterCVE List
  • Red Hat Satellite 6.16 for RHEL 9unaffected: 0:4.14.0.23-1.el9sat and laterCVE List
  • Red Hat Satellite 6.17 for RHEL 9unaffected: 0:4.16.0.20-1.el9sat and laterCVE List
  • Red Hat Satellite 6.18 for RHEL 9unaffected: 0:4.18.0.24-1.el9sat and laterCVE List
  • Red Hat Satellite 6.19 for RHEL 9unaffected: 0:4.20.0.11-1.el9sat and laterCVE List

References 6