Vulnerabilities

TI-2026-10760 CVE-2026-12542 · GHSA-79jg-9wx4-f5rr

Foreman: command injection in foreman-tail

LOW 35

A flaw was found in Foreman.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00563 Published 2026-10-01 Partial fix · 3.12.0.23-1.el8sat, 3.12.0.23-1.el9sat +3 CWE-78

TI-2026-63830 CVE-2026-96658 · GHSA-g2wg-rx2f-4j5r

Foreman: foreman: arbitrary code execution via safemode sandbox bypass

MEDIUM 41

A flaw was found in Foreman.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00724 Published 2026-10-01 Fixed in 1.5.0-2.el8sat, 1.5.0-2.el9sat +11 CWE-94

TI-2026-63831 CVE-2026-96659 · GHSA-2fj2-wwpq-f5jr

Foreman: excessive permissions for viewer role on preview

LOW 39

A flaw was found in Foreman.

CVSS 3.1CRITICAL 9.1 Network Low privileges No interaction EPSS 0.00347 Published 2026-10-01 Fixed in 3.12.0.23-1.el8sat, 3.12.0.23-1.el9sat +13 CWE-267

TI-2026-10761 CVE-2026-12544 · GHSA-q8r6-95rf-344m

Foreman: ssti and insecure deserialization in foreman-rake configuration

LOW 35

A flaw was found in Foreman.

CVSS 3.1HIGH 7.7 Local High privileges User interaction EPSS 0.00225 Published 2026-10-01 Partial fix · 3.12.0.23-1.el8sat, 3.12.0.23-1.el9sat +3 CWE-502

TI-2026-10759 CVE-2026-12541 · GHSA-rcq3-9wpf-p347

Foreman: command injection in foreman-rake database tasks

MEDIUM 40

A flaw was found in Foreman.

CVSS 3.1HIGH 8.2 Local High privileges No interaction EPSS 0.01236 Published 2026-10-01 Partial fix · 3.12.0.23-1.el8sat, 3.12.0.23-1.el9sat +3 CWE-78

TI-2026-10758 CVE-2026-12540 · GHSA-c5q9-9fc7-jgxp

Foreman: command injection in foreman-rake errors:fetch_log via request_id parameter

MEDIUM 40

A flaw was found in Foreman.

CVSS 3.1HIGH 8.2 Local High privileges No interaction EPSS 0.01236 Published 2026-10-01 Partial fix · 3.12.0.23-1.el8sat, 3.12.0.23-1.el9sat +3 CWE-78

TI-2026-10663 CVE-2026-12423 · GHSA-6m3j-qcjr-3vqm

Foreman: unauthenticated information disclosure via provisioning token validation flaw

LOW 39

A flaw was found in Foreman.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00384 Published 2026-10-01 Partial fix · 3.12.0.23-1.el8sat, 3.12.0.23-1.el9sat +3 CWE-306

TI-2026-56317 CVE-2026-81658 · GHSA-p76g-9c4w-2889

Foreman: cross-tenant disclosure of template revisions via unauthorized audit lookup

LOW 29

A flaw was found in Foreman.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00344 Published 2026-08-27 Fix deferred CWE-639

TI-2026-04485 CVE-2026-5138 · GHSA-47r2-h2mh-qqjp

Foreman: foreman: information disclosure via improper validation of nested request parameters

LOW 20

A flaw was found in Foreman.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0038 Published 2026-07-01 Partial fix · 3.12.0.17-1.el8sat, 3.12.0.17-1.el9sat +3 CWE-639

TI-2026-04482 CVE-2026-5135 · GHSA-vpj3-792h-v855

Foreman: foreman: unauthorized modification of host configurations via broken access control

LOW 29

A flaw was found in Foreman.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00431 Published 2026-07-01 Partial fix · 3.12.0.17-1.el8sat, 3.12.0.17-1.el9sat +3 CWE-639

TI-2026-04489 CVE-2026-5142 · GHSA-h2gj-g5gx-f7qq

Foreman: foreman: cross-tenant private ssh key disclosure via taxonomy scoping bypass

LOW 29

A flaw was found in foreman.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00445 Published 2026-07-01 Partial fix · 3.12.0.17-1.el8sat, 3.12.0.17-1.el9sat +3 CWE-639

TI-2026-04483 CVE-2026-5136 · GHSA-fpxf-rppp-4373

Foreman: foreman: privilege escalation to administrator-level access via usergroup role assignment manipulation

MEDIUM 41

A flaw was found in Foreman.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00555 Published 2026-07-01 Partial fix · 3.12.0.17-1.el8sat, 3.12.0.17-1.el9sat +3 CWE-266

TI-2026-11283 CVE-2026-13316 · GHSA-f274-c23v-hx4j

Foreman: ssrf to cloud metada service through unvalidated test_url parameters in foreman config

LOW 19

A flaw has been found in foreman when HTTP parameters are modified in http_proxies_controller and http_proxy files.

CVSS 3.1MEDIUM 4.4 Local High privileges No interaction EPSS 0.0015 Published 2026-06-30 Fix deferred CWE-918

TI-2026-07971 CVE-2026-9073 · GHSA-7rcj-2493-83x3

Foreman-mcp-server: mcp server: insecure sensitive http header sanitization

LOW 27

A flaw was found in foreman-mcp-server.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00208 Published 2026-06-23 Fixed in 1782228427, 1782228692 CWE-532

TI-2026-10430 CVE-2026-12112 · GHSA-6v32-2jc8-w595

Foreman-mcp-server: mcp server: active session hijacking via insecure session state reuse

LOW 35

A flaw was found in the foreman-mcp-server.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00216 Published 2026-06-23 Fixed in 1782228427, 1782228692 CWE-287

TI-2026-35991 CVE-2026-48710 · GHSA-86qp-5c8j-p5mr

Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks

CRITICAL 86KEV

Starlette is a lightweight ASGI framework/toolkit.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.70288 Published 2026-05-26 Partial fix · 1.0.1 CWE-444

TI-2026-36128 CVE-2026-48864 · GHSA-2927-mfhv-37vh

Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data

LOW 35

A flaw was found in libsolv.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00227 Published 2026-05-26 Fixed in 0.7.33-5.el10_2, 0.7.29-8.el10_0.1 +60 CWE-787

TI-2026-08044 CVE-2026-9149 · GHSA-9q56-xf64-q987

Libsolv: heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv file

MEDIUM 62

A flaw was found in libsolv.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00312 Published 2026-05-20 Partial fix · 0.7.33-5.el10_2, 0.7.29-8.el10_0.1 +1 CWE-122

TI-2026-08045 CVE-2026-9150 · GHSA-p4w9-3pj8-mhq7

Libsolv: stack-based buffer overflow in libsolv's debian metadata parser when handling sha384/sha512 checksums

LOW 29

A flaw was found in libsolv.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00409 Published 2026-05-20 Partial fix · 0.7.33-5.el10_2, 0.7.29-8.el10_0.1 +2 CWE-121

TI-2026-01620 CVE-2026-1961 · GHSA-fh2w-2c26-vpg5

Forman: foreman: remote code execution via command injection in websocket proxy

HIGH 73

A flaw was found in Foreman.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01922 Published 2026-03-26 Partial fix · 3.12.0.14-1.el8sat, 3.12.0.14-1.el9sat +13 CWE-78

TI-2026-23208 CVE-2026-29063 · GHSA-wf6x-7x77-mvgw

Immutable.js: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in immutable

MEDIUM 46

Immutable.js provides many Persistent Immutable data structures.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.0099 Published 2026-03-06 Partial fix · 3.8.3, 4.3.7 +2 CWE-1321

TI-2026-00742 CVE-2026-0980 · GHSA-hfcp-477w-3wjw

Rubyipmi: red hat satellite: remote code execution in rubyipmi via malicious bmc username

MEDIUM 42

A flaw was found in rubyipmi, a gem used in the Baseboard Management Controller (BMC) component of Red Hat Satellite.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0085 Published 2026-02-27 Partial fix · 0.13.0-0.1.el8sat, 0.13.0-0.1.el9sat +13 CWE-78

TI-2025-08765 CVE-2025-9572 · GHSA-gvvp-xfg4-2fr6

Foreman: satellite: graphql api permission bypass leads to information disclosure

LOW 29

n authorization flaw in Foreman's GraphQL API allows low-privileged users to access metadata beyond their assigned permissions.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00384 Published 2026-02-27 Fixed in 3.16.2, 3.9.1.14-1.el8sat +9 CWE-863

TI-2024-07345 CVE-2024-7923 · GHSA-pmjc-mxf4-8qwx

Puppet-pulpcore: an authentication bypass vulnerability exists in pulpcore

MEDIUM 50

An authentication bypass vulnerability has been identified in Pulpcore when deployed with Gunicorn versions prior to 22.0, due to the puppet-pulpcore configuration.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00814 Published 2024-09-04 Fixed in 22.0, 1:3.5.2.8-1.el8sat +4 CWE-287

TI-2024-06507 CVE-2024-7012 · GHSA-gp3v-m4q9-3v8h

Puppet-foreman: an authentication bypass vulnerability exists in foreman

MEDIUM 50

An authentication bypass vulnerability has been identified in Foreman when deployed with External Authentication, due to the puppet-foreman configuration.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00769 Published 2024-09-04 Fixed in 22.0, 1:3.5.2.8-1.el8sat +4 CWE-287

Vulnerabilities

Filters