Skip to content
Threat Feed
Subscribe

Tag

Foreman

2 briefs RSS
critical advisory

Remote Code Execution in Foreman via Safemode Sandbox Bypass

An authenticated, low-privileged attacker can achieve remote code execution in Foreman by bypassing the templating engine's safemode sandbox to invoke unauthorized functions.

Foreman rce vulnerability webserver information-disclosure command-injection
4t 4c updated
critical advisory

Foreman WebSocket Proxy Command Injection Vulnerability (CVE-2026-1961)

A command injection vulnerability exists in Foreman's WebSocket proxy, enabling remote code execution on the Foreman server via a malicious compute resource server when a user accesses VM VNC console functionality.

command-injection rce foreman
2r 1t