CVE-2026-96659

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-96659
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-96659.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-96659
Downstream
RHSA (4)
Published
2026-10-01T16:23:23Z
Modified
2026-10-24T10:50:27Z
Severity
  • 9.1 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L CVSS Calculator
Summary
Foreman: excessive permissions for viewer role on preview
Details

A flaw was found in Foreman. This vulnerability allows an authenticated user with low-level Viewer permissions to cause unauthorized information disclosure by submitting requests to template preview endpoints. By exploiting this issue, the user can access sensitive data, such as host root passwords. Furthermore, under insecure system configurations where Safemode protections are disabled, the flaw may allow the user to execute arbitrary commands as the Foreman system account.

Database specific 
{
    "cna_assigner":  "redhat",
    "cwe_ids":  [
        "CWE-267"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/96xxx/CVE-2026-96659.json",
    "unresolved_ranges":  [
        {
            "extracted_events":  [
                {
                    "range":  [
                        {
                            "fixed":  "0:3.12.0.23-1.el8sat"
                        },
                        {
                            "fixed":  "0:3.12.0.23-1.el9sat"
                        },
                        {
                            "fixed":  "0:3.14.0.22-1.el9sat"
                        },
                        {
                            "fixed":  "0:3.2.13-1.el9pc"
                        },
                        {
                            "fixed":  "0:3.1.62-1.el9pc"
                        },
                        {
                            "fixed":  "0:5.3.1-2.el9pc"
                        },
                        {
                            "fixed":  "0:0.6.0-1.el9pc"
                        },
                        {
                            "fixed":  "0:15.0.2-2.el9sat"
                        },
                        {
                            "fixed":  "0:3.14.0-2.el9sat"
                        },
                        {
                            "fixed":  "0:4.16.0.20-1.el9sat"
                        },
                        {
                            "fixed":  "0:1.5.0-2.el9sat"
                        },
                        {
                            "fixed":  "0:6.17.12-1.el9sat"
                        },
                        {
                            "fixed":  "0:0.1.0-2.1.el9sat"
                        },
                        {
                            "fixed":  "0:3.16.0.25-1.el9sat"
                        },
                        {
                            "fixed":  "0:3.18.0.14-1.el9sat"
                        }
                    ],
                    "source":  "AFFECTED_FIELD",
                    "strategy":  "InverseAffectedRanges"
                }
            ]
        }
    ]
}
References

Affected packages

Git
github.com/theforeman/foreman

Affected ranges

Type
GIT
Repo
https://github.com/theforeman/foreman
Events
Introduced
cd749679ca70f9904d726b57cd2603b1332c906a
Last Affected
48b7090bd69c44b7b8fc5ad95ee7be243f852819
Introduced
092a456bdea31af4e91d7088856bd67aaff64c25
Last Affected
092a456bdea31af4e91d7088856bd67aaff64c25
Database specific
Show details 
{
    "extracted_events":  [
        {
            "cpe":  "cpe:2.3:a:theforeman:foreman:*:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "1.9.0"
                },
                {
                    "last_affected":  "3.19.1"
                }
            ],
            "source":  "CPE_RANGE"
        },
        {
            "cpe":  "cpe:2.3:a:theforeman:foreman:5.0.0:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "5.0.0"
                },
                {
                    "last_affected":  "5.0.0"
                }
            ],
            "source":  "CPE_STRING"
        }
    ]
}

Affected versions

5.*
5.0.0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-96659.json"
github.com/theforeman/foreman-installer

Affected ranges

Type
GIT
Repo
https://github.com/theforeman/foreman-installer
Events
Introduced
873b2c0a0b74c0dae788b162d13cd7933c4a4ced
Last Affected
dd9a3ad4746e606d79b4ced48d1dabdc79a52b49
Introduced
e081fe7c568a5e597c0b9b6cfb025abf36edc2ff
Last Affected
e081fe7c568a5e597c0b9b6cfb025abf36edc2ff
Database specific
Show details 
{
    "extracted_events":  [
        {
            "cpe":  "cpe:2.3:a:theforeman:foreman:*:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "1.9.0"
                },
                {
                    "last_affected":  "3.19.1"
                }
            ],
            "source":  "CPE_RANGE"
        },
        {
            "cpe":  "cpe:2.3:a:theforeman:foreman:5.0.0:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "5.0.0"
                },
                {
                    "last_affected":  "5.0.0"
                }
            ],
            "source":  "CPE_STRING"
        }
    ]
}

Affected versions

5.*
5.0.0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-96659.json"
github.com/theforeman/smart-proxy

Affected ranges

Type
GIT
Repo
https://github.com/theforeman/smart-proxy
Events
Introduced
de8f257301bc2992953d00f1bf36618b6ad52778
Last Affected
c5abbd9b13b34e6cd2055920bef27d8f03bbc80a
Introduced
e63094f9ee6794882fabc2889877372459bf7072
Last Affected
e63094f9ee6794882fabc2889877372459bf7072
Database specific
Show details 
{
    "extracted_events":  [
        {
            "cpe":  "cpe:2.3:a:theforeman:foreman:*:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "1.9.0"
                },
                {
                    "last_affected":  "3.19.1"
                }
            ],
            "source":  "CPE_RANGE"
        },
        {
            "cpe":  "cpe:2.3:a:theforeman:foreman:5.0.0:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "5.0.0"
                },
                {
                    "last_affected":  "5.0.0"
                }
            ],
            "source":  "CPE_STRING"
        }
    ]
}

Affected versions

5.*
5.0.0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-96659.json"