Critical [CVE-2026-96659] Excessive Permissions for Viewer Role on Preview
This critical-severity Red Hat Linux advisory covers CVE-2026-96659 affecting Red Hat Satellite 6.16 for RHEL 8, Red Hat Satellite 6.16 for RHEL 9, Red Hat Satellite 6.17 for RHEL 9.
Aggregated and source-linked by VulniPulse. Data sources, validation and limitations.
VulniPulse record published Record updated
Android app · Google Play
Monitor future Red Hat Linux CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Summary
Excessive Permissions for Viewer Role on Preview. Red Hat rates this important (CVSS 9.1).
Weakness: CWE-267. Red Hat lists fixing advisory RHSA-2026:74503 with package python-sqlparse-0:0.6.0-1.el9pc, python-gitpython-0:3.1.62-1.el9pc, python-dynaconf-0:3.2.13-1.el9pc, python-lxml-0:5.3.1-2.el9pc.
Affected products named by the advisory: Red Hat Satellite 6.16 for RHEL 8; Red Hat Satellite 6.16 for RHEL 9; Red Hat Satellite 6.17 for RHEL 9; Red Hat Satellite 6.18 for RHEL 9; and 1 more.
Affected products named by the advisory: Red Hat Satellite 6.19 for RHEL 9.
Affected versions
No affected-version range was extracted from the source record. The vendor advisory is authoritative — check it before change work.
Official advisory · high-confidence parse· fetched 4 days ago·verify at source
- python-sqlparse-0:0.6.0-1.el9pc
- python-gitpython-0:3.1.62-1.el9pc
- python-dynaconf-0:3.2.13-1.el9pc
- python-lxml-0:5.3.1-2.el9pc
- satellite-0:6.17.12-1.el9sat
- foreman-0:3.16.0.25-1.el9sat
- foreman-0:3.12.0.23-1.el8sat
- rubygem-safemode-0:1.5.0-2.el9sat
- foreman-0:3.12.0.23-1.el9sat
- rubygem-katello-0:4.16.0.20-1.el9sat
- foreman-0:3.14.0.22-1.el9sat
- rubygem-hammer_cli-0:3.14.0-2.el9sat
- rubygem-foreman_remote_execution-0:15.0.2-2.el9sat
- yggdrasil-worker-forwarder-0:0.1.0-2.1.el9sat
- foreman-0:3.18.0.14-1.el9sat
- RHSA-2026:74503
Official advisory · high-confidence parse· fetched 4 days ago·verify at source
Mitigation
Upgrade to a fixed release: python-sqlparse-0:0.6.0-1.el9pc, python-gitpython-0:3.1.62-1.el9pc, python-dynaconf-0:3.2.13-1.el9pc, python-lxml-0:5.3.1-2.el9pc, satellite-0:6.17.12-1.el9sat, foreman-0:3.16.0.25-1.el9sat. That is the remediation for this advisory.
The vendor advisory may list additional interim mitigations or workarounds not captured here — review it before change work.
Official advisory · high-confidence parse· fetched 4 days ago·verify at source
Discussion(0)
No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.
Sign in to join the discussion.