8.8
Élevée
CVE-2026-96658 A flaw was found in Foreman
Description
A flaw was found in Foreman. This vulnerability allows an authenticated remote attacker with low-level read permissions to achieve arbitrary code execution on the underlying server. By manipulating the permitted methods list within the template rendering engine, an attacker can bypass the safemode sandbox isolation and execute unauthorized commands directly on the host system.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Red Hat Satellite 6.19 for RHEL 9 | Versions non publiées | |
| Red Hat Satellite 6.16 for RHEL 8 | Versions non publiées | |
| Red Hat Satellite 6.16 for RHEL 9 | Versions non publiées | |
| Red Hat Satellite 6.18 for RHEL 9 | Versions non publiées | |
| Red Hat Satellite 6.17 for RHEL 9 | Versions non publiées |
Références
- RHSA-2026:74503 access.redhat.com
- RHSA-2026:74504 access.redhat.com
- RHSA-2026:74505 access.redhat.com
- RHSA-2026:74506 access.redhat.com
- access.redhat.com access.redhat.com
- RHBZ#2534185 bugzilla.redhat.com
Chronologie
- Publiée
- Dernière modification