PT-2026-50457 · Red Hat · Red Hat Hardened Images+1

Published 2026-06-17 · Updated 2026-06-17 · CVE-2026-12515

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Katello of Red Hat Satellite (affected versions not specified)

Description Insufficient authorization checks in the ContentUploadsController within the content upload functionality allow authenticated users with the edit products permission to query content information for repositories they are not authorized to manage. This allows an attacker to determine if specific content exists within otherwise inaccessible repositories, although it does not permit unauthorized modification, import, or publication of content.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2026-12515

Affected Products

Red Hat Hardened Images

Red Hat Satellite 6

References · 5

• https://github.com/Katello/katello/pull/11712 · Note
• https://access.redhat.com/security/cve/CVE-2026-12515 · Note
• https://twitter.com/infoflowcloud/status/2067352129719636190 · Twitter Post
• https://bugzilla.redhat.com/show_bug.cgi?id=2489812 · Note
• https://twitter.com/CVEnew/status/2067351040136040725 · Twitter Post