PT-2026-54785 · Red Hat · Red Hat Satellite 6+5

Stanislav Fot · Published 2026-07-01 · Updated 2026-07-01 · CVE-2026-5135

NVD

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

A flaw was found in Foreman. This broken access control vulnerability allows an authenticated user with host-edit permissions to retarget an existing lookup value override to a different host. This is achieved by modifying the match field through nested host attributes, effectively bypassing authorisation checks. The consequence is the potential for unauthorised modification of managed host configurations across different organisational and location boundaries.

Fix

IDOR

Weakness Enumeration

CWE-639

Related Identifiers

CVE-2026-5135

RHSA-2026:34365

RHSA-2026:34366

RHSA-2026:34368

Affected Products

Red Hat Satellite 6

Red Hat Satellite 6.16 For Rhel 8

Red Hat Satellite 6.16 For Rhel 9

Red Hat Satellite 6.17 For Rhel 9

Red Hat Satellite 6.18 For Rhel 9

Red Hat Satellite 6.19 For Rhel 9

References · 7

• https://access.redhat.com/errata/RHSA-2026:34366 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2026:34367 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2026:34365 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2026:34368 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-5135 · Security Note
• https://access.redhat.com/security/cve/CVE-2026-5135 · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=2452230 · Note