Vulnerabilities

TI-2026-10760 CVE-2026-12542 · GHSA-79jg-9wx4-f5rr

Foreman: command injection in foreman-tail

LOW 35

A flaw was found in Foreman.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00563 Published 2026-10-01 Partial fix · 3.12.0.23-1.el8sat, 3.12.0.23-1.el9sat +3 CWE-78

TI-2026-63830 CVE-2026-96658 · GHSA-g2wg-rx2f-4j5r

Foreman: foreman: arbitrary code execution via safemode sandbox bypass

MEDIUM 41

A flaw was found in Foreman.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00724 Published 2026-10-01 Fixed in 1.5.0-2.el8sat, 1.5.0-2.el9sat +11 CWE-94

TI-2026-63831 CVE-2026-96659 · GHSA-2fj2-wwpq-f5jr

Foreman: excessive permissions for viewer role on preview

LOW 39

A flaw was found in Foreman.

CVSS 3.1CRITICAL 9.1 Network Low privileges No interaction EPSS 0.00347 Published 2026-10-01 Fixed in 3.12.0.23-1.el8sat, 3.12.0.23-1.el9sat +13 CWE-267

TI-2026-10761 CVE-2026-12544 · GHSA-q8r6-95rf-344m

Foreman: ssti and insecure deserialization in foreman-rake configuration

LOW 35

A flaw was found in Foreman.

CVSS 3.1HIGH 7.7 Local High privileges User interaction EPSS 0.00225 Published 2026-10-01 Partial fix · 3.12.0.23-1.el8sat, 3.12.0.23-1.el9sat +3 CWE-502

TI-2026-10759 CVE-2026-12541 · GHSA-rcq3-9wpf-p347

Foreman: command injection in foreman-rake database tasks

MEDIUM 40

A flaw was found in Foreman.

CVSS 3.1HIGH 8.2 Local High privileges No interaction EPSS 0.01236 Published 2026-10-01 Partial fix · 3.12.0.23-1.el8sat, 3.12.0.23-1.el9sat +3 CWE-78

TI-2026-10758 CVE-2026-12540 · GHSA-c5q9-9fc7-jgxp

Foreman: command injection in foreman-rake errors:fetch_log via request_id parameter

MEDIUM 40

A flaw was found in Foreman.

CVSS 3.1HIGH 8.2 Local High privileges No interaction EPSS 0.01236 Published 2026-10-01 Partial fix · 3.12.0.23-1.el8sat, 3.12.0.23-1.el9sat +3 CWE-78

TI-2026-10663 CVE-2026-12423 · GHSA-6m3j-qcjr-3vqm

Foreman: unauthenticated information disclosure via provisioning token validation flaw

LOW 39

A flaw was found in Foreman.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00384 Published 2026-10-01 Partial fix · 3.12.0.23-1.el8sat, 3.12.0.23-1.el9sat +3 CWE-306

TI-2026-56317 CVE-2026-81658 · GHSA-p76g-9c4w-2889

Foreman: cross-tenant disclosure of template revisions via unauthorized audit lookup

LOW 29

A flaw was found in Foreman.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00344 Published 2026-08-27 Fix deferred CWE-639

TI-2026-04485 CVE-2026-5138 · GHSA-47r2-h2mh-qqjp

Foreman: foreman: information disclosure via improper validation of nested request parameters

LOW 20

A flaw was found in Foreman.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0038 Published 2026-07-01 Partial fix · 3.12.0.17-1.el8sat, 3.12.0.17-1.el9sat +3 CWE-639

TI-2026-04482 CVE-2026-5135 · GHSA-vpj3-792h-v855

Foreman: foreman: unauthorized modification of host configurations via broken access control

LOW 29

A flaw was found in Foreman.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00431 Published 2026-07-01 Partial fix · 3.12.0.17-1.el8sat, 3.12.0.17-1.el9sat +3 CWE-639

TI-2026-04489 CVE-2026-5142 · GHSA-h2gj-g5gx-f7qq

Foreman: foreman: cross-tenant private ssh key disclosure via taxonomy scoping bypass

LOW 29

A flaw was found in foreman.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00445 Published 2026-07-01 Partial fix · 3.12.0.17-1.el8sat, 3.12.0.17-1.el9sat +3 CWE-639

TI-2026-04483 CVE-2026-5136 · GHSA-fpxf-rppp-4373

Foreman: foreman: privilege escalation to administrator-level access via usergroup role assignment manipulation

MEDIUM 41

A flaw was found in Foreman.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00555 Published 2026-07-01 Partial fix · 3.12.0.17-1.el8sat, 3.12.0.17-1.el9sat +3 CWE-266

TI-2026-11283 CVE-2026-13316 · GHSA-f274-c23v-hx4j

Foreman: ssrf to cloud metada service through unvalidated test_url parameters in foreman config

LOW 19

A flaw has been found in foreman when HTTP parameters are modified in http_proxies_controller and http_proxy files.

CVSS 3.1MEDIUM 4.4 Local High privileges No interaction EPSS 0.0015 Published 2026-06-30 Fix deferred CWE-918

TI-2026-07971 CVE-2026-9073 · GHSA-7rcj-2493-83x3

Foreman-mcp-server: mcp server: insecure sensitive http header sanitization

LOW 27

A flaw was found in foreman-mcp-server.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00208 Published 2026-06-23 Fixed in 1782228427, 1782228692 CWE-532

TI-2026-10430 CVE-2026-12112 · GHSA-6v32-2jc8-w595

Foreman-mcp-server: mcp server: active session hijacking via insecure session state reuse

LOW 35

A flaw was found in the foreman-mcp-server.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00216 Published 2026-06-23 Fixed in 1782228427, 1782228692 CWE-287

TI-2026-01620 CVE-2026-1961 · GHSA-fh2w-2c26-vpg5

Forman: foreman: remote code execution via command injection in websocket proxy

HIGH 73

A flaw was found in Foreman.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01922 Published 2026-03-26 Partial fix · 3.12.0.14-1.el8sat, 3.12.0.14-1.el9sat +13 CWE-78

TI-2025-08765 CVE-2025-9572 · GHSA-gvvp-xfg4-2fr6

Foreman: satellite: graphql api permission bypass leads to information disclosure

LOW 29

n authorization flaw in Foreman's GraphQL API allows low-privileged users to access metadata beyond their assigned permissions.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00384 Published 2026-02-27 Fixed in 3.16.2, 3.9.1.14-1.el8sat +9 CWE-863

TI-2025-09723 CVE-2025-10622 · GHSA-f5h4-c4jw-c4gm

Foreman: os command injection via ct_location and fcct_location parameters

LOW 38

A flaw was found in Red Hat Satellite (Foreman component).

CVSS 3.1HIGH 8.0 Network High privileges No interaction EPSS 0.00728 Published 2025-11-05 Partial fix · 3.16.1, 3.9.1.13-1.el8sat +4 CWE-78

TI-2024-07139 CVE-2024-7700 · GHSA-vgwc-ppmj-vcrg

Foreman: command injection in "host init config" template via "install packages" field on foreman

LOW 32

A command injection flaw was found in the "Host Init Config" template in the Foreman application via the "Install Packages" field on the "Register Host" page.

CVSS 3.1MEDIUM 6.5 Local High privileges User interaction EPSS 0.00783 Published 2024-08-12 Will not fix CWE-77

TI-2023-04498 CVE-2023-4886 · GHSA-r2mj-49jv-4jq7

Foreman: world readable file containing secrets

LOW 31

A sensitive information exposure vulnerability was found in foreman.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00288 Published 2023-10-03 Fixed in 3.5.1.24-1.el8sat, 3.7.0.10-1.el8sat +1 CWE-200

TI-2022-03551 CVE-2022-3874

Os command injection via ct_command and fcct_command

MEDIUM 45

A command injection flaw was found in foreman.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.02172 Published 2023-09-22 Fixed CWE-78

TI-2023-00437 CVE-2023-0462 · GHSA-6c26-fwvj-8945

Arbitrary code execution through yaml global parameters

MEDIUM 43

An arbitrary code execution flaw was found in Foreman.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00961 Published 2023-09-20 Fixed CWE-94

TI-2023-00113 CVE-2023-0118 · GHSA-pwc8-3cc6-gg8v

Foreman: arbitrary code execution through templates

MEDIUM 44

An arbitrary code execution flaw was found in Foreman.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.01382 Published 2023-09-20 Fixed in 3.1.1.27-1.el7sat, 3.1.1.27-1.el8sat +2 CWE-78

TI-2021-03551 CVE-2021-20260 · GHSA-634w-42gr-qj8p

Information disclosure in foreman

LOW 33

A flaw was found in the Foreman project.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00208 Published 2022-08-26 No fix listed CWE-200

TI-2021-02538 CVE-2021-3590 · GHSA-6543-h8cq-cc73

Information disclosure in foreman

LOW 39

A flaw was found in Foreman project.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00685 Published 2022-08-22 Fix deferred CWE-200

Vulnerabilities

Filters