CVE ID :CVE-2026-12405 Published : Oct. 1, 2026, 4:21 p.m. | 56 minutes ago Description :A flaw was found in rubygem-foreman_remote_execution. A command injection vulnerability exists in the Red Hat Satellite API (/api/v2/job_invocations). When a job template has the effective_user property...

#Sicherheitslücke #Linux

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-12405 - Rubygem-foreman_remote_execution: command injection in job invocations via effective_user parameter

VERWANDTEARTIKEL

CVE-2026-96659 - Foreman: excessive permissions for viewer role on preview

CVE-2026-96658 - Foreman: safemode bypass leading to rce

CVE-2026-12541 - Foreman: command injection in foreman-rake database tasks

CVE-2026-12540 - Foreman: command injection in foreman-rake errors:fetch_log via request_id parameter

CVE-2026-94620 - Classroom 50 vulnerable to arbitrary file overwrite on the teacher's machine via symlink in a student repo (gh teacher download)

CVE-2026-12627 - Fortra's Core Privileged Access Manager (BoKS) autoregistration stack buffer overflow vulnerability