FO
Product
Foreman
86
CVEs
0
On KEV
9.8
Max CVSS
7
New 30D
Severity mix
Critical 5High 21Medium 34Low 0
Watch
Add Foreman to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-96658 | 8.8 | Oct 1 | Foreman: foreman: arbitrary code execution via safemode sandbox bypass Affected: before 2.0.1; 3.19.0; 3.19.1; 5.0.0 |
| CVE-2026-5136 | 8.8 | Jul 1 | Foreman: foreman: privilege escalation to administrator-level access via usergroup role assignment manipulation Affected: before 3.18.2; 3.19.0 before 3.19.1 |
| CVE-2026-1961 | 8.8 | Mar 26 | Forman: foreman: remote code execution via command injection in websocket proxy Affected: before 3.16.3; 3.17.0 before 3.17.2; 3.18.0 before 3.18.1 |
| CVE-2021-3590 | 8.8 | Aug 22 | A flaw was found in Foreman project Affected: 1.6.0 and later |
| CVE-2017-2672 | 8.8 | Jun 21 | A flaw was found in foreman before version 1.15 in the logging of adding and registering images Affected: before 1.15 |
| CVE-2016-9593 | 8.8 | Apr 16 | foreman-debug before version 1.15.0 is vulnerable to a flaw in foreman-debug's logging Affected: before 1.15.0 |
| CVE-2018-1097 | 8.8 | Apr 4 | A flaw was found in foreman before 1.16.1 Affected: before 1.6.1 |
| CVE-2017-7505 | 8.8 | May 26 | Foreman since version 1.5 is vulnerable to an incorrect authorization check due to which users with user management permission who are assigned to some organization(s) can do all… Affected: 1.5.0; 1.5.0; 1.5.0; 1.5.1; 1.5.2; 1.5.3; +34 more |
| CVE-2016-4475 | 8.8 | Aug 19 | The (1) Organization and (2) Locations APIs and UIs in Foreman before 1.11.4 and 1.12.x before 1.12.0-RC3 allow remote authenticated users to bypass organization and location… Affected: through 1.11.3; 1.12.0 |
| CVE-2016-3728 | 8.8 | May 20 | Eval injection vulnerability in tftp_api.rb in the TFTP module in the Smart-Proxy in Foreman before 1.10.4 and 1.11.x before 1.11.2 allows remote attackers to execute arbitrary… Affected: 1.11.0; 1.11.0; 1.11.0; 1.11.0; 1.11.1; 1.10.3 |
| CVE-2026-12541 | 8.2 | Oct 1 | Foreman: command injection in foreman-rake database tasks Affected: All versions, or not specified |
| CVE-2026-12540 | 8.2 | Oct 1 | Foreman: command injection in foreman-rake errors:fetch_log via request_id parameter Affected: All versions, or not specified |
| CVE-2015-5246 | 8.1 | Oct 6 | The LDAP Authentication functionality in Foreman might allow remote attackers with knowledge of old passwords to gain access via vectors involving the password lifetime period in… Affected: 1.9.0 |
| CVE-2015-5152 | 8.1 | Jul 17 | Foreman after 1.1 and before 1.9.0-RC1 does not redirect HTTP requests to HTTPS when the require_ssl setting is set to true, which allows remote attackers to obtain user… Affected: 1.1-1; 1.2.0; 1.2.0; 1.2.0; 1.2.0; 1.2.1; +34 more |
| CVE-2026-12542 | 7.8 | Oct 1 | Foreman: command injection in foreman-tail Affected: 1.5.0 through 3.19.1; 5.0.0 |
| CVE-2026-12112 | 7.8 | Jun 23 | Foreman-mcp-server: mcp server: active session hijacking via insecure session state reuse Affected: All versions, or not specified |
| CVE-2021-20260 | 7.8 | Aug 26 | A flaw was found in the Foreman project Affected: All versions, or not specified |
| CVE-2026-12544 | 7.7 | Oct 1 | Foreman: ssti and insecure deserialization in foreman-rake configuration Affected: All versions, or not specified |
| CVE-2026-12423 | 7.5 | Oct 1 | Foreman: unauthenticated information disclosure via provisioning token validation flaw Affected: All versions, or not specified |
| CVE-2014-8183 | 7.4 | Aug 1 | It was found that foreman, versions 1.x.x before 1.15.6, in Satellite 6 did not properly enforce access controls on certain resources Affected: 1.0 before 1.15.6 |
| CVE-2021-3584 | 7.2 | Dec 23 | A server side remote code execution vulnerability was found in Foreman project Affected: before 2.4.1; 2.5.0 before 2.5.1; 3.0.0; 3.0.0 |
Showing 21