Vulnerabilities

TI-2026-04485 CVE-2026-5138 · GHSA-47r2-h2mh-qqjp

Foreman: foreman: information disclosure via improper validation of nested request parameters

LOW 20

A flaw was found in Foreman.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0038 Published 2026-07-01 Partial fix · 3.12.0.17-1.el8sat, 3.12.0.17-1.el9sat +3 CWE-639

TI-2026-04482 CVE-2026-5135 · GHSA-vpj3-792h-v855

Foreman: foreman: unauthorized modification of host configurations via broken access control

LOW 29

A flaw was found in Foreman.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00431 Published 2026-07-01 Partial fix · 3.12.0.17-1.el8sat, 3.12.0.17-1.el9sat +3 CWE-639

TI-2026-04489 CVE-2026-5142 · GHSA-h2gj-g5gx-f7qq

Foreman: foreman: cross-tenant private ssh key disclosure via taxonomy scoping bypass

LOW 29

A flaw was found in foreman.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00445 Published 2026-07-01 Partial fix · 3.12.0.17-1.el8sat, 3.12.0.17-1.el9sat +3 CWE-639

TI-2026-04483 CVE-2026-5136 · GHSA-fpxf-rppp-4373

Foreman: foreman: privilege escalation to administrator-level access via usergroup role assignment manipulation

MEDIUM 41

A flaw was found in Foreman.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00555 Published 2026-07-01 Partial fix · 3.12.0.17-1.el8sat, 3.12.0.17-1.el9sat +3 CWE-266

Vulnerabilities

Filters

Foreman: foreman: information disclosure via improper validation of nested request parameters

Foreman: foreman: unauthorized modification of host configurations via broken access control

Foreman: foreman: cross-tenant private ssh key disclosure via taxonomy scoping bypass

Foreman: foreman: privilege escalation to administrator-level access via usergroup role assignment manipulation