CVE ID :CVE-2026-96658 Published : Oct. 1, 2026, 4:23 p.m. | 55 minutes ago Description :A flaw was found in Foreman. An authenticated attacker with low-level permissions can achieve remote code execution (RCE) by bypassing the safemode sandbox within the templating engine. Due to improper...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-96658 - Foreman: safemode bypass leading to rce

VERWANDTEARTIKEL

CVE-2026-96659 - Foreman: excessive permissions for viewer role on preview

CVE-2026-12541 - Foreman: command injection in foreman-rake database tasks

CVE-2026-12540 - Foreman: command injection in foreman-rake errors:fetch_log via request_id parameter

CVE-2026-12405 - Rubygem-foreman_remote_execution: command injection in job invocations via effective_user parameter

CVE-2026-94620 - Classroom 50 vulnerable to arbitrary file overwrite on the teacher's machine via symlink in a student repo (gh teacher download)

CVE-2026-12627 - Fortra's Core Privileged Access Manager (BoKS) autoregistration stack buffer overflow vulnerability