CVE ID :CVE-2026-12541 Published : Oct. 1, 2026, 4:22 p.m. | 56 minutes ago Description :A flaw was found in Foreman. OS command injection vulnerabilities exist in the foreman-rake db:dump and db:import_dump tasks. The application fails to properly sanitize user-supplied input in the...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-12541 - Foreman: command injection in foreman-rake database tasks

VERWANDTEARTIKEL

CVE-2026-96659 - Foreman: excessive permissions for viewer role on preview

CVE-2026-96658 - Foreman: safemode bypass leading to rce

CVE-2026-12540 - Foreman: command injection in foreman-rake errors:fetch_log via request_id parameter

CVE-2026-12405 - Rubygem-foreman_remote_execution: command injection in job invocations via effective_user parameter

CVE-2026-94620 - Classroom 50 vulnerable to arbitrary file overwrite on the teacher's machine via symlink in a student repo (gh teacher download)

CVE-2026-12627 - Fortra's Core Privileged Access Manager (BoKS) autoregistration stack buffer overflow vulnerability