CVE-2026-12515Disclosure

LOWCVSS 4.3 · MEDIUM

Signal is active with 2 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A flaw was found in Katello's of Red Hat Satellite. A content upload functionality where insufficient authorization checks in the ContentUploadsController allowed users with the edit_products permission to query content information for repositories outside the products they were authorized to manage. An authenticated attacker could exploit this issue to determine whether specific content exists within repositories that should otherwise be inaccessible. This issue does not allow unauthorized modification, import, or publication of content.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-862

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

2 mentions across 1 observed day

What's happening

Technical details provided in 1 signal
Disclosure: 2 classified signals
2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d

Signal classification1 categories

Disclosure

2100.0%

Referenced assets2 URLs

By indicator

Full discourse2 posts

Infoflowcloud@infoflowcloud137d
Disclosure
🚨*CVE* CVE-2026-12515 A flaw was found in Katello's of Red Hat Satellite. A content upload functionality where insufficient authorization checks in the ContentUploadsController allowed use… https://www.cve.org/CVERecord?id=CVE-2026-12515 ----- Traducción: Se encontró una vu… http://infoflow.cloud`
Post summary
The tweet announces CVE-2026-12515 in Katello's Red Hat Satellite content upload functionality, noting insufficient authorization checks in ContentUploadsController. No PoC, exploit, patch, or active exploitation is reported.
0000030
82 followersView on X
CVE@CVEnew137d
Disclosure
CVE-2026-12515 A flaw was found in Katello's of Red Hat Satellite. A content upload functionality where insufficient authorization checks in the ContentUploadsController allowed use… https://www.cve.org/CVERecord?id=CVE-2026-12515
Post summary
The post announces that CVE-2026-12515 has been identified in Katello (Red Hat Satellite) due to insufficient authorization checks in the ContentUploadsController, but provides no PoC, exploit, or patch details.
00000293
57.6K followersView on X

Explore more

Back to dashboard