Skip to content
Threat Feed
Subscribe

Vendor

Foreman

2 briefs RSS
high advisory

Command Injection in Red Hat Satellite (CVE-2026-12405)

A command injection vulnerability in the rubygem-foreman_remote_execution component allows authenticated attackers to execute arbitrary shell commands via the Satellite API.

Satellite +1 vulnerability command-injection server-side web-application-vulnerability authentication-bypass cve-2026-12423
2r 3t 1c
critical advisory

Remote Code Execution in Foreman via Safemode Sandbox Bypass

An authenticated, low-privileged attacker can achieve remote code execution in Foreman by bypassing the templating engine's safemode sandbox to invoke unauthorized functions.

Foreman rce vulnerability webserver information-disclosure command-injection
4t 4c updated