Where
-Infinity
0

Trending

Last week
Last month
Last year

foremanForeman: ssrf to cloud metada service through unvalidated test_url parameters in foreman config

Risk 26
Severity
4.4
First published (updated )
CVE-2026-13316

Foreman Foreman MCP ServerForeman-mcp-server: mcp server: active session hijacking via insecure session state reuse

Risk 69
Severity
7.8
First published (updated )
CVE-2026-12112

Foreman foreman-mcp-serverForeman-mcp-server: mcp server: insecure sensitive http header sanitization

Risk 26
Severity
6.2
EPSS
0.15%
First published (updated )
CVE-2026-9073

theforeman foremanForeman: foreman: cross-tenant private ssh key disclosure via taxonomy scoping bypass

Risk 40
Severity
6.5
First published (updated )
CVE-2026-5142

redhat SatelliteForeman: foreman: information disclosure via improper validation of nested request parameters

Risk 24
Severity
4.3
First published (updated )
CVE-2026-5138
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

redhat SatelliteForeman: foreman: privilege escalation to administrator-level access via usergroup role assignment manipulation

Risk 84
Severity
8.8
First published (updated )
CVE-2026-5136

redhat SatelliteForeman: foreman: unauthorized modification of host configurations via broken access control

Risk 40
Severity
6.5
First published (updated )
CVE-2026-5135

redhat SatelliteForeman: satellite: graphql api permission bypass leads to information disclosure

Risk 38
Severity
6.5
First published (updated )
CVE-2025-9572

redhat/foremanForeman: world readable file containing secrets

Risk 60
Severity
6.7
First published (updated )
CVE-2023-4886

redhat/foremanArbitrary code execution through yaml global parameters

Risk 72
Severity
9.1
First published (updated )
CVE-2023-0462
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

rubygems/foremanOs command injection via ct_command and fcct_command

Risk 74
Severity
9.1
First published (updated )
CVE-2022-3874

redhat/foremanThe realm_freeipa module of Foreman smart proxy suffers from a flaw that can be exploited as a man-i…

Risk 35
Severity
5.9
First published (updated )
CVE-2021-3494

redhat/foremanForeman versions before 2.3.4 and before 2.4.0 is affected by an improper authorization handling fla…

Risk 35
Severity
5.4
First published (updated )
CVE-2021-3469

theforeman foremanXSS

Risk 38
Severity
6.1
First published (updated )
CVE-2017-7535

theforeman foremanForeman since version 1.5 is vulnerable to an incorrect authorization check due to which users with …

Risk 79
Severity
8.8
First published (updated )
CVE-2017-7505
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

redhat/foremanForeman before 1.7.5 allows remote authenticated users to bypass organization and location restricti…

Risk 21
Severity
4
First published (updated )
CVE-2015-1844

redhat/foremanForman before 1.7.4 does not verify SSL certificates for LDAP connections, which allows man-in-the-m…

Risk 26
Severity
5
First published (updated )
CVE-2015-1816

theforeman foremanPath Traversal

Risk 40
Severity
6.4
First published (updated )
CVE-2014-4507

theforeman foremanCode Injection

Risk 52
Severity
7.5
First published (updated )
CVE-2013-0171

theforeman foremanForeman before 1.1 allows remote authenticated users to gain privileges via a (1) XMLHttpRequest or …

Risk 46
Severity
6.5
First published (updated )
CVE-2013-0187
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

theforeman foremanForeman before 1.1 uses a salt of "foreman" to hash root passwords, which makes it easier for attack…

Risk 26
Severity
5
First published (updated )
CVE-2013-0173

theforeman foremanThe smart proxy in Foreman before 1.1 uses a umask set to 0, which allows local users to modify file…

Risk 25
Severity
3.6
First published (updated )
CVE-2012-5477

theforeman foremanInfoleak

Risk 26
Severity
5
First published (updated )
CVE-2013-0174

theforeman foremanCode Injection

Risk 52
Severity
7.5
First published (updated )
CVE-2013-0210

theforeman foremanForeman 1.4.0 before 1.5.0 does not properly restrict access to provisioning template previews, whic…

Risk 27
Severity
5
First published (updated )
CVE-2014-0192
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

theforeman foremanSQL Injection

Risk 52
Severity
7.5
First published (updated )
CVE-2012-5648

theforeman foremanSession fixation vulnerability in Foreman before 1.4.2 allows remote attackers to hijack web session…

Risk 48
Severity
6.8
First published (updated )
CVE-2014-0090

theforeman foremanXSS

Risk 23
Severity
4.3
First published (updated )
CVE-2014-0089

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203