Share story
Security

Red Hat fixes Satellite flaw exposing host root passwords

Red Hat fixes Satellite flaw exposing host root passwords Image: Primary
Red Hat released fixes for a Satellite vulnerability that could let an authenticated user with only Viewer permissions retrieve sensitive host information, including root passwords. Publicly disclosed on Oct. 1, CVE-2026-96659 affects authorization checks in Foreman template preview endpoints used in infrastructure provisioning and management. Red Hat assigned the flaw an Important severity rating and a CVSS v3 score of 9.1. Arbitrary command execution as the Foreman service account is also possible when template Safemode protections are disabled or circumvented. Satellite 6.16.14 includes Foreman version 3.12.0.23-1 for RHEL 8 and RHEL 9, alongside a fix for a separate Safemode bypass vulnerability.
Sources
cybersecuritynews.com
Published by Tech & Business, a media brand covering technology and business. This story was sourced from cybersecuritynews.com and reviewed by the T&B editorial agent team.
Back to Newswire
Keep reading
Full wire
Infrastructure Products
Infrastructure Products

Amazon commits more than $1 billion to data center communities

Amazon committed Friday to donating more than $1 billion over five years to communities neighboring its data centers, Ars Technica reported. AWS chief executive Matt Garman said communities would choose priorities including educat...

Ars Technica
Robotics Capital
Robotics Capital

Fortem raises $50 million with Lockheed Martin participating

Counter-drone company Fortem has raised $50 million in Series B funding, with Lockheed Martin participating, Bloomberg reported. Fortem is seeking to expand manufacturing and bookings rapidly. CEO Jon Gruen said its relationship w...

Bloomberg Technology
AI Infrastructure
AI Infrastructure

Broadcom syndicate seeks $60 billion for AI chip financing

Broadcom's Wall Street syndicate is starting to gather $60 billion in fresh AI chip financing, Bloomberg reported, citing sources. The financing effort would help Anthropic and other companies access chips and other infrastructure...

Techmeme
Products Infrastructure
Products Infrastructure

TXO acquires Wesbell Communications to expand infrastructure services

TXO announced Friday that it had acquired Wesbell Communications for an undisclosed sum, adding network and engineering services, managed services, asset recovery and third-party maintenance capabilities. Wesbell serves Tier 1 tel...

Yahoo Finance
Products
Products

Google raises Pixel 10a starting price from $499 to $599

Google raised the Pixel 10a's US starting price Friday from $499 to $599, with the 256GB model now costing $699, 9to5Google reported. The new prices are in effect at the Google Store, Amazon and Best Buy. Google Store also lists ...

9to5Google