CVE-2026-96659

Foreman: excessive permissions for viewer role on preview

State: Published
Severity: 9.1 Critical
Published: Oct 1, 2026
Updated: Oct 16, 2026
Reserved: Sep 23, 2026

Description

A flaw was found in Foreman. This vulnerability allows an authenticated user with low-level Viewer permissions to cause unauthorized information disclosure by submitting requests to template preview endpoints. By exploiting this issue, the user can access sensitive data, such as host root passwords. Furthermore, under insecure system configurations where Safemode protections are disabled, the flaw may allow the user to execute arbitrary commands as the Foreman system account.

Scores

CVSS	Score	Vector	Source
3.1	9.1 Critical	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L	redhat

Weaknesses

CWE-267 Privilege Defined With Unsafe Actions

Affected Products

Product	Versions
Red Hat Satellite 6.16 for RHEL 8Red Hat	0:3.12.0.23-1.el8sat and laterNot affected
Red Hat Satellite 6.16 for RHEL 9Red Hat	0:3.12.0.23-1.el9sat and laterNot affected
Red Hat Satellite 6.17 for RHEL 9Red Hat	0:3.14.0.22-1.el9sat and laterNot affected
Red Hat Satellite 6.17 for RHEL 9Red Hat	0:3.2.13-1.el9pc and laterNot affected
Red Hat Satellite 6.17 for RHEL 9Red Hat	0:3.1.62-1.el9pc and laterNot affected
Red Hat Satellite 6.17 for RHEL 9Red Hat	0:5.3.1-2.el9pc and laterNot affected
Red Hat Satellite 6.17 for RHEL 9Red Hat	0:0.6.0-1.el9pc and laterNot affected
Red Hat Satellite 6.17 for RHEL 9Red Hat	0:15.0.2-2.el9sat and laterNot affected
Red Hat Satellite 6.17 for RHEL 9Red Hat	0:3.14.0-2.el9sat and laterNot affected
Red Hat Satellite 6.17 for RHEL 9Red Hat	0:4.16.0.20-1.el9sat and laterNot affected
Red Hat Satellite 6.17 for RHEL 9Red Hat	0:1.5.0-2.el9sat and laterNot affected
Red Hat Satellite 6.17 for RHEL 9Red Hat	0:6.17.12-1.el9sat and laterNot affected
Red Hat Satellite 6.17 for RHEL 9Red Hat	0:0.1.0-2.1.el9sat and laterNot affected
Red Hat Satellite 6.18 for RHEL 9Red Hat	0:3.16.0.25-1.el9sat and laterNot affected
Red Hat Satellite 6.19 for RHEL 9Red Hat	0:3.18.0.14-1.el9sat and laterNot affected

References

RHSA-2026:74503vendor-advisory
RHSA-2026:74504vendor-advisory
RHSA-2026:74505vendor-advisory
RHSA-2026:74506vendor-advisory
https://access.redhat.com/security/cve/CVE-2026-96659vdb-entry
RHBZ#2536844issue-tracking
http://www.openwall.com/lists/oss-security/2026/10/07/1

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.