PT-2026-53837 · Red Hat · Red Hat Satellite 6

Published 2026-06-30 · Updated 2026-06-30 · CVE-2026-13316

NVD

CVSS v3.1

4.4

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

A flaw has been found in foreman when HTTP parameters are modified in http proxies controller and http proxy files. Attackers can perform an SSRF attack and steal cloud metadata service on AWS/GCP/Azure environment through foreman component.

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2026-13316

Affected Products

Red Hat Satellite 6

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-13316 · Security Note
• https://access.redhat.com/security/cve/CVE-2026-13316 · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=2490345 · Note