CVEvulnerability

CVE-2026-1961

8.8 HIGH Published 2026-03-26 Modified 2026-10-20 Official page ↗
Status
Analyzed
Published
2026-03-26
Last modified
2026-10-20
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.0 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS 3.1 ([email protected])
8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 3.1 (0b0ca135-0b70-47e7-9f44-1890c2a1c46c)
8.0 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Weaknesses
CWE-78

Description

A flaw was found in Foreman. A remote attacker could exploit a command injection vulnerability in Foreman's WebSocket proxy implementation. This vulnerability arises from the system's use of unsanitized hostname values from compute resource providers when constructing shell commands. By operating a malicious compute resource server, an attacker could achieve remote code execution on the Foreman server when a user accesses VM VNC console functionality. This could lead to the compromise of sensitive credentials and the entire managed infrastructure.

Affected configurations

• redhat satellite (>= 6.16 < 6.16.7) • redhat satellite (>= 6.17 < 6.17.7) • theforeman foreman (< 3.16.3) • theforeman foreman (>= 3.17.0 < 3.17.2) • theforeman foreman (>= 3.18.0 < 3.18.1) • redhat satellite (>= 6.18 < 6.18.4) • redhat satellite 6.0

Related

Weakness · CWE (1)

  • CWE-78 Improper Neutralization of Special Elements used in an OS Command weakness

References