TI-2026-04483 CVE-2026-5136 · GHSA-fpxf-rppp-4373
Foreman: foreman: privilege escalation to administrator-level access via usergroup role assignment manipulation
Priority MEDIUM 41
A flaw was found in Foreman.
RHSA-2026:34367
Satellite 6.16.10 Async Update
Released 2026-07-01 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Satellite 6.16 for RHEL 8 foreman-3.12.0.17-1.el8sat, foreman-cli-3.12.0.17-1.el8sat, foreman-debug-3.12.0.17-1.el8sat +12
- Red Hat Satellite 6.16 for RHEL 9 foreman-3.12.0.17-1.el9sat, foreman-cli-3.12.0.17-1.el9sat, foreman-debug-3.12.0.17-1.el9sat +12
Fixes 4 records
TI-2026-04489 CVE-2026-5142 · GHSA-h2gj-g5gx-f7qq
Foreman: foreman: cross-tenant private ssh key disclosure via taxonomy scoping bypass
Priority LOW 29
A flaw was found in foreman.
TI-2026-04482 CVE-2026-5135 · GHSA-vpj3-792h-v855
Foreman: foreman: unauthorized modification of host configurations via broken access control
Priority LOW 29
A flaw was found in Foreman.
TI-2026-04485 CVE-2026-5138 · GHSA-47r2-h2mh-qqjp
Foreman: foreman: information disclosure via improper validation of nested request parameters
Priority LOW 20
A flaw was found in Foreman.