This advisory covers a set of security fixes for Red Hat Satellite 6.18.4, including seven CVEs: CVE-2025-61726 (memory exhaustion in query parameter parsing), CVE-2025-61729 (denial of service via crafted certificate), CVE-2025-68121 (unexpected TLS session resumption), CVE-2026-0980 (remote code execution via malicious BMC username in rubyipmi), CVE-2026-1531 (man-in-the-middle due to insecure SSL verification in foreman_kubevirt), CVE-2026-1961 (remote code execution via command injection in foreman WebSocket proxy), and CVE-2026-4324 (denial of service and potential information disclosure via SQL injection in katello). The advisory is for Red Hat Satellite 6.18 on RHEL 9 and related components. The vendor rates the overall security impact as Moderate and provides an updated release to address these issues.

The vulnerabilities collectively impact system stability and security by enabling denial of service conditions through resource exhaustion and crafted certificates, remote code execution via command injection and malicious inputs, man-in-the-middle attacks due to insecure SSL verification defaults, and potential information disclosure through SQL injection. Exploitation could lead to unauthorized code execution, service disruption, interception of sensitive data, and leakage of confidential information within affected Red Hat Satellite environments.

Red Hat has released an updated version, Red Hat Satellite 6.18.4, which addresses these vulnerabilities. Users should apply this update after ensuring all previously released errata relevant to their systems have been installed. Detailed update instructions are available in the Red Hat Satellite documentation. No alternative mitigations are specified in the advisory, so applying the official update is the recommended remediation.