DeutschShown in its original language — a full translation is planned for a future version.
Foreman: Mehrere Schwachstellen
view advisory published 2026-10-01
Ein Angreifer kann mehrere Schwachstellen in Foreman ausnutzen, um beliebigen Programmcode auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren und vertrauliche Informationen offenzulegen.
01
describes (7)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-12542US | high7.8 | — | ||
A flaw was found in Foreman. The foreman-tail utility is vulnerable to OS command injection due to the unsafe use of the eval command. The script takes user-supplied arguments and… | ||||
| CVE-2026-96659US | critical9.1 | — | ||
A flaw was found in Foreman. This vulnerability allows an authenticated user with low-level Viewer permissions to cause unauthorized information disclosure by submitting requests t… | ||||
| CVE-2026-96658US | high8.8 | — | ||
A flaw was found in Foreman. This vulnerability allows an authenticated remote attacker with low-level read permissions to achieve arbitrary code execution on the underlying server… | ||||
| CVE-2026-12544US | high7.7 | — | ||
A flaw was found in Foreman. The foreman-rake initialization logic in /usr/share/foreman/config/settings.rb contains a vulnerable code pattern where configuration data is processed… | ||||
| CVE-2026-12541US | high8.2 | — | ||
A flaw was found in Foreman. OS command injection vulnerabilities exist in the foreman-rake db:dump and db:import_dump tasks. The application fails to properly sanitize user-suppli… | ||||
| CVE-2026-12540US | high8.2 | — | ||
A flaw was found in Foreman. A command injection vulnerability exists in the foreman-rake errors:fetch_log task. The request_id parameter is passed to an underlying system command… | ||||
| CVE-2026-12423US | high7.5OT elevated | — | ||
A flaw was found in Foreman. The Red Hat Satellite /unattended/provision API endpoint is vulnerable to an authentication bypass due to a semantic logic flaw in host_verifier.rb. Th… | ||||
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory RHSA-2026:74505 vom 2026-10-02external
- GitHub Advisory Database vom 2026-10-01external
- GitHub Advisory Database vom 2026-10-01external
- GitHub Advisory Database vom 2026-10-01external
- GitHub Advisory Database vom 2026-10-01external
- GitHub Advisory Database vom 2026-10-01external
- GitHub Advisory Database vom 2026-10-01external
- GitHub Advisory Database vom 2026-10-01external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan