CVE-2026-1961
EUVD-2026-1616726.03.2026, 13:16
A flaw was found in Foreman. A remote attacker could exploit a command injection vulnerability in Foreman's WebSocket proxy implementation. This vulnerability arises from the system's use of unsanitized hostname values from compute resource providers when constructing shell commands. By operating a malicious compute resource server, an attacker could achieve remote code execution on the Foreman server when a user accesses VM VNC console functionality. This could lead to the compromise of sensitive credentials and the entire managed infrastructure.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| redhat | satellite | 6.16 ≤ 𝑥 < 6.16.7 |
| redhat | satellite | 6.17 ≤ 𝑥 < 6.17.7 |
| theforeman | foreman | 𝑥 < 3.16.3 |
| theforeman | foreman | 3.17.0 ≤ 𝑥 < 3.17.2 |
| theforeman | foreman | 3.18.0 ≤ 𝑥 < 3.18.1 |
| redhat | satellite | 6.18 ≤ 𝑥 < 6.18.4 |
| redhat | satellite | 6.0 |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources
(CNA/ADP records, vendor advisories, Enginsight analysis).
| Vendor | Product | Version | Source |
|---|---|---|---|
| Red Hat | Red Hat Satellite 6.16 for RHEL 8 | 0:3.12.0.14-1.el8sat ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Satellite 6.16 for RHEL 9 | 0:3.12.0.14-1.el9sat ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Satellite 6.17 for RHEL 9 | 0:3.14.0.14-1.el9sat ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Satellite 6.17 for RHEL 9 | 0:0.1.23-0.3.el9pc ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Satellite 6.17 for RHEL 9 | 0:1.2.0-0.1.el9pc ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Satellite 6.17 for RHEL 9 | 0:4.2.28-0.1.el9pc ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Satellite 6.17 for RHEL 9 | 0:2.22.3-1.el9pc ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Satellite 6.17 for RHEL 9 | 0:3.27.10-2.el9pc ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Satellite 6.17 for RHEL 9 | 0:1.5.1-1.el9sat ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Satellite 6.17 for RHEL 9 | 0:0.4.3-1.el9sat ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Satellite 6.17 for RHEL 9 | 0:4.16.0.14-1.el9sat ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Satellite 6.17 for RHEL 9 | 0:0.13.0-1.el9sat ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Satellite 6.17 for RHEL 9 | 0:6.17.7-1.el9sat ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Satellite 6.17 for RHEL 9 | 0:0.0.3-4.el9sat ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Satellite 6.18 for RHEL 9 | 0:3.16.0.12-1.el9sat ≤ 𝑥 < * | ADP |
References