CVE ID :CVE-2026-12540 Published : Oct. 1, 2026, 4:22 p.m. | 56 minutes ago Description :A flaw was found in Foreman. A command injection vulnerability exists in the foreman-rake errors:fetch_log task. The request_id parameter is passed to an underlying system command (typically grep) without...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-12540 - Foreman: command injection in foreman-rake errors:fetch_log via request_id parameter

VERWANDTEARTIKEL

CVE-2026-96659 - Foreman: excessive permissions for viewer role on preview

CVE-2026-96658 - Foreman: safemode bypass leading to rce

CVE-2026-12541 - Foreman: command injection in foreman-rake database tasks

CVE-2026-12405 - Rubygem-foreman_remote_execution: command injection in job invocations via effective_user parameter

CVE-2026-94620 - Classroom 50 vulnerable to arbitrary file overwrite on the teacher's machine via symlink in a student repo (gh teacher download)

CVE-2026-12627 - Fortra's Core Privileged Access Manager (BoKS) autoregistration stack buffer overflow vulnerability