CVE-2026-13316: Server-Side Request Forgery (SSRF) in Red Hat Red Hat Satellite 6
A flaw has been found in foreman when HTTP parameters are modified in http_proxies_controller and http_proxy files. Attackers can perform an SSRF attack and steal cloud metadata service on AWS/GCP/Azure environment through foreman component.
AI Analysis
Technical Summary
This vulnerability in Red Hat Satellite 6 involves SSRF via modified HTTP parameters in foreman's http_proxies_controller and http_proxy files. Attackers with high privileges can exploit this to access sensitive cloud metadata services on AWS, GCP, and Azure. The CVSS 3.1 score is 4.4, reflecting a medium severity with high confidentiality impact but no integrity or availability impact. The affected product is a cloud service, and Red Hat provides vendor-managed remediation. The vendor advisory confirms the existence of a patch and recommends applying it.
Potential Impact
Successful exploitation can lead to unauthorized access to cloud metadata services in AWS, GCP, and Azure environments, potentially exposing sensitive information. The confidentiality impact is high, but integrity and availability are not affected. The attack requires high privileges and no user interaction is needed.
Mitigation Recommendations
A patch is available for this vulnerability. Since Red Hat Satellite 6 is a cloud-hosted service, Red Hat manages remediation server-side. Users should consult the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2026-13316 for detailed patching instructions and ensure their systems are updated accordingly.
CVE-2026-13316: Server-Side Request Forgery (SSRF) in Red Hat Red Hat Satellite 6
Description
A flaw has been found in foreman when HTTP parameters are modified in http_proxies_controller and http_proxy files. Attackers can perform an SSRF attack and steal cloud metadata service on AWS/GCP/Azure environment through foreman component.
CVSS v3.1
Score 4.4medium
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability in Red Hat Satellite 6 involves SSRF via modified HTTP parameters in foreman's http_proxies_controller and http_proxy files. Attackers with high privileges can exploit this to access sensitive cloud metadata services on AWS, GCP, and Azure. The CVSS 3.1 score is 4.4, reflecting a medium severity with high confidentiality impact but no integrity or availability impact. The affected product is a cloud service, and Red Hat provides vendor-managed remediation. The vendor advisory confirms the existence of a patch and recommends applying it.
Potential Impact
Successful exploitation can lead to unauthorized access to cloud metadata services in AWS, GCP, and Azure environments, potentially exposing sensitive information. The confidentiality impact is high, but integrity and availability are not affected. The attack requires high privileges and no user interaction is needed.
Mitigation Recommendations
A patch is available for this vulnerability. Since Red Hat Satellite 6 is a cloud-hosted service, Red Hat manages remediation server-side. Users should consult the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2026-13316 for detailed patching instructions and ensure their systems are updated accordingly.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- redhat
- Date Reserved
- 2026-06-25T07:46:22.379Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Remediation Level
- null
- Is Cloud Service
- true
- Vendor Advisory Urls
- [{"url":"https://access.redhat.com/security/cve/CVE-2026-13316","vendor":"Red Hat"}]
Threat ID: 6a439fbb27e9c797199c07aa
Added to database: 06/30/2026, 10:51:39 UTC
Last enriched: 07/07/2026, 11:51:22 UTC
Last updated: 08/13/2026, 12:41:08 UTC
Views: 59
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.