Foreman

This hub aggregates every CVE we track for Foreman, a product in the enterprise software space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Foreman.

• CVE-2026-5138Foreman: foreman: information disclosure via improper validation of nested request parameters4.3Jul 1, 2026
• CVE-2026-5135Foreman: foreman: unauthorized modification of host configurations via broken access control6.5Jul 1, 2026
• CVE-2026-5142Foreman: foreman: cross-tenant private ssh key disclosure via taxonomy scoping bypass6.5Jul 1, 2026
• CVE-2026-5136Foreman: foreman: privilege escalation to administrator-level access via usergroup role assignment manipulation8.8Jul 1, 2026
• CVE-2026-13316Foreman: ssrf to cloud metada service through unvalidated test_url parameters in foreman config4.4Jun 30, 2026
• CVE-2026-9073Foreman-mcp-server: mcp server: insecure sensitive http header sanitization6.2Jun 23, 2026
• CVE-2026-12112Foreman-mcp-server: mcp server: active session hijacking via insecure session state reuse7.8Jun 23, 2026
• CVE-2025-9572Foreman: satellite: graphql api permission bypass leads to information disclosure5.0Feb 27, 2026
• CVE-2025-10622Foreman: os command injection via ct_location and fcct_location parameters8.0Nov 5, 2025
• CVE-2024-7700Foreman: command injection in "host init config" template via "install packages" field on foreman6.5Aug 12, 2024
• CVE-2023-4886Foreman: world readable file containing secrets6.7Oct 3, 2023
• CVE-2022-3874Os command injection via ct_command and fcct_command8.0Sep 22, 2023
• CVE-2023-0462Arbitrary code execution through yaml global parameters8.0Sep 20, 2023
• CVE-2023-0118Foreman: arbitrary code execution through templates9.1Sep 20, 2023
• CVE-2021-20260A flaw was found in the Foreman project. The Datacenter plugin exposes the password through the API to an authenticated local attacker with view_hosts permission. The highest threat from this vulne...7.8Aug 26, 2022