PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-12515 Red Hat CVE debrief

CVE-2026-12515 is a medium-severity vulnerability in Red Hat Satellite's Katello component. It stems from insufficient authorization checks in the ContentUploadsController, allowing users with edit_products permission to query content information for repositories they shouldn't access. This issue, published on 2026-06-17, was modified on 2026-06-18. Exploitation requires authentication but doesn't permit unauthorized content modification, import, or publication.

Vendor
Red Hat
Product
Red Hat Hardened Images
CVSS
MEDIUM 4.3
CISA KEV
Not listed in stored evidence
Original CVE published
2026-06-17
Original CVE updated
2026-06-26
Advisory published
2026-06-17
Advisory updated
2026-06-26

Who should care

Red Hat Satellite administrators, security teams managing Red Hat Satellite, and users with edit_products permissions in Katello should be aware of this vulnerability. Although it doesn't allow content modification, it could be used to gather information about repository contents.

Technical summary

The vulnerability is caused by inadequate authorization checks in Katello's ContentUploadsController. Specifically, users with the edit_products permission can query content information for repositories outside their authorized management scope. This could potentially be exploited by authenticated attackers to determine the existence of specific content in otherwise inaccessible repositories. The issue has a CVSS score of 4.3 and is classified as CWE-862 (Missing Authorization).

Defensive priority

Medium

Recommended defensive actions

  • Review and restrict edit_products permissions to ensure only authorized users have this capability.
  • Monitor repository access logs for unusual query patterns.
  • Implement additional access controls to limit repository content information disclosure.
  • Apply patches or updates provided by Red Hat as soon as available.
  • Consider implementing a Web Application Firewall (WAF) to detect and prevent exploitation attempts.
  • Conduct regular security audits to identify and address potential authorization issues.

Evidence notes

The information provided is based on data from the National Vulnerability Database (NVD) and Red Hat security advisories. The CVE record and NVD detail pages were referenced in compiling this debrief. Additional information was sourced from Red Hat's security CVE page and a Bugzilla entry related to this issue.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-12515 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-12515

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-12515 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-12515

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.