Read the docs
Red Hat Security Advisory

RHSA-2026:95653

Satellite 6 Client Update

Released 2026-11-05 · Red Hat rating Critical · View on Red Hat →

Fixed in

Fixes 1 record

Priority MEDIUM 43

Deserialization of untrusted data in the report-processing code of Puppet, as used by Puppet Server, in the affected releases, allows a client that holds any CA-signed agent certificate to execute arbitrary code on the P…

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.00366 Published 2026-11-03 Partial fix · 2023.8.13, 2025.12.1 +1 CWE-502