Threat database

A critical vulnerability (CVE-2026-96658) in Foreman allows an authenticated attacker with low-level permissions to bypass the safemode sandbox in the templating engine, enabling remote code execution on the hosting server. This occurs due to improper handling of delegated methods, allowing unauthorized functions to be appended to the allowed execution list. The flaw affects Foreman versions 6.19.0 through 6.19.4. A security update is available in Red Hat Satellite 6.19.5 that addresses this issue.

Red Hat Satellite 6.15 for RHEL 8 has multiple security vulnerabilities including an OS command injection in foreman via ct_location and fcct_location parameters, unsafe default in rubygem-rack QueryParser allowing params_limit bypass, and unbounded read in Rack::Request form parsing leading to memory exhaustion. These issues are fixed in Red Hat Satellite 6.15.5.6. Users are advised to upgrade to this version to mitigate these vulnerabilities.

A vulnerability was found in Satellite. When running a remote execution job on a host, the host's SSH key is not being checked. When the key changes, the Satellite still connects it because it uses "-o StrictHostKeyChecking=no". This flaw can lead to a man-in-the-middle attack (MITM), denial of service, leaking of secrets the remote execution job contains, or other issues that may arise from the attacker's ability to forge an SSH key. This issue does not directly allow unauthorized remote execution on the Satellite, although it can leak secrets that may lead to it.