Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

CVE-2026-1961 Forman: foreman: remote code execution via command injection in websocket proxy

🗓️ 26 Mar 2026 12:53:09Reported by redhatType 
cvelist
 cvelist🔗 www.cve.org👁 19 Views

Foreman remote code execution via command injection in websocket proxy from unsanitized hostnames.

Related
Affected
Refs
ReporterTitlePublishedViews
Family
ATTACKERKB		CVE-2026-1961
26 Mar 202612:53
–attackerkb
Circl		CVE-2026-1961
26 Mar 202614:42
–circl
CNNVD		Foreman 安全漏洞
26 Mar 202600:00
–cnnvd
CVE		CVE-2026-1961
26 Mar 202612:53
–cve
EUVD		EUVD-2026-16167
26 Mar 202615:30
–euvd
NVD		CVE-2026-1961
26 Mar 202613:16
–nvd
OSV		RHSA-2026:5968 Red Hat Security Advisory: Satellite 6.18.4 Async Update
27 Mar 202610:14
–osv
OSV		RHSA-2026:5970 Red Hat Security Advisory: Satellite 6.17.7 Async Update
27 Mar 202610:14
–osv
OSV		RHSA-2026:5971 Red Hat Security Advisory: Satellite 6.16.7 Async Update
27 Mar 202610:14
–osv
Positive Technologies		PT-2026-28315
26 Mar 202600:00
–ptsecurity
Rows per page
[
  {
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.16 for RHEL 8",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "foreman",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:3.12.0.14-1.el8sat",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:satellite_utils:6.16::el8",
      "cpe:/a:redhat:satellite:6.16::el9",
      "cpe:/a:redhat:satellite_utils:6.16::el9",
      "cpe:/a:redhat:satellite:6.16::el8",
      "cpe:/a:redhat:satellite_capsule:6.16::el8",
      "cpe:/a:redhat:satellite_capsule:6.16::el9",
      "cpe:/a:redhat:satellite_maintenance:6.16::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.16 for RHEL 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "foreman",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:3.12.0.14-1.el9sat",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:satellite_utils:6.16::el8",
      "cpe:/a:redhat:satellite:6.16::el9",
      "cpe:/a:redhat:satellite_utils:6.16::el9",
      "cpe:/a:redhat:satellite:6.16::el8",
      "cpe:/a:redhat:satellite_capsule:6.16::el8",
      "cpe:/a:redhat:satellite_capsule:6.16::el9",
      "cpe:/a:redhat:satellite_maintenance:6.16::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.17 for RHEL 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "foreman",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:3.14.0.14-1.el9sat",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:satellite:6.17::el9",
      "cpe:/a:redhat:satellite_utils:6.17::el9",
      "cpe:/a:redhat:satellite_capsule:6.17::el9",
      "cpe:/a:redhat:satellite_maintenance:6.17::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.17 for RHEL 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "libcomps",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:0.1.23-0.3.el9pc",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:satellite:6.17::el9",
      "cpe:/a:redhat:satellite_utils:6.17::el9",
      "cpe:/a:redhat:satellite_capsule:6.17::el9",
      "cpe:/a:redhat:satellite_maintenance:6.17::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.17 for RHEL 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "python-brotli",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:1.2.0-0.1.el9pc",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:satellite:6.17::el9",
      "cpe:/a:redhat:satellite_utils:6.17::el9",
      "cpe:/a:redhat:satellite_capsule:6.17::el9",
      "cpe:/a:redhat:satellite_maintenance:6.17::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.17 for RHEL 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "python-django",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:4.2.28-0.1.el9pc",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:satellite:6.17::el9",
      "cpe:/a:redhat:satellite_utils:6.17::el9",
      "cpe:/a:redhat:satellite_capsule:6.17::el9",
      "cpe:/a:redhat:satellite_maintenance:6.17::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.17 for RHEL 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "python-pulp-container",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:2.22.3-1.el9pc",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:satellite:6.17::el9",
      "cpe:/a:redhat:satellite_utils:6.17::el9",
      "cpe:/a:redhat:satellite_capsule:6.17::el9",
      "cpe:/a:redhat:satellite_maintenance:6.17::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.17 for RHEL 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "python-pulp-rpm",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:3.27.10-2.el9pc",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:satellite:6.17::el9",
      "cpe:/a:redhat:satellite_utils:6.17::el9",
      "cpe:/a:redhat:satellite_capsule:6.17::el9",
      "cpe:/a:redhat:satellite_maintenance:6.17::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.17 for RHEL 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "rubygem-fog-kubevirt",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:1.5.1-1.el9sat",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:satellite:6.17::el9",
      "cpe:/a:redhat:satellite_utils:6.17::el9",
      "cpe:/a:redhat:satellite_capsule:6.17::el9",
      "cpe:/a:redhat:satellite_maintenance:6.17::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.17 for RHEL 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "rubygem-foreman_kubevirt",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:0.4.3-1.el9sat",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:satellite:6.17::el9",
      "cpe:/a:redhat:satellite_utils:6.17::el9",
      "cpe:/a:redhat:satellite_capsule:6.17::el9",
      "cpe:/a:redhat:satellite_maintenance:6.17::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.17 for RHEL 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "rubygem-katello",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:4.16.0.14-1.el9sat",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:satellite:6.17::el9",
      "cpe:/a:redhat:satellite_utils:6.17::el9",
      "cpe:/a:redhat:satellite_capsule:6.17::el9",
      "cpe:/a:redhat:satellite_maintenance:6.17::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.17 for RHEL 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "rubygem-rubyipmi",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:0.13.0-1.el9sat",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:satellite:6.17::el9",
      "cpe:/a:redhat:satellite_utils:6.17::el9",
      "cpe:/a:redhat:satellite_capsule:6.17::el9",
      "cpe:/a:redhat:satellite_maintenance:6.17::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.17 for RHEL 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "satellite",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:6.17.7-1.el9sat",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:satellite:6.17::el9",
      "cpe:/a:redhat:satellite_utils:6.17::el9",
      "cpe:/a:redhat:satellite_capsule:6.17::el9",
      "cpe:/a:redhat:satellite_maintenance:6.17::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.17 for RHEL 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "yggdrasil-worker-forwarder",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:0.0.3-4.el9sat",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:satellite:6.17::el9",
      "cpe:/a:redhat:satellite_utils:6.17::el9",
      "cpe:/a:redhat:satellite_capsule:6.17::el9",
      "cpe:/a:redhat:satellite_maintenance:6.17::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.17 for RHEL 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "foreman",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:3.14.0.14-1.el9sat",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:satellite:6.17::el9",
      "cpe:/a:redhat:satellite_utils:6.17::el9",
      "cpe:/a:redhat:satellite_capsule:6.17::el9",
      "cpe:/a:redhat:satellite_maintenance:6.17::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.17 for RHEL 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "libcomps",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:0.1.23-0.3.el9pc",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:satellite:6.17::el9",
      "cpe:/a:redhat:satellite_utils:6.17::el9",
      "cpe:/a:redhat:satellite_capsule:6.17::el9",
      "cpe:/a:redhat:satellite_maintenance:6.17::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.17 for RHEL 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "python-brotli",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:1.2.0-0.1.el9pc",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:satellite:6.17::el9",
      "cpe:/a:redhat:satellite_utils:6.17::el9",
      "cpe:/a:redhat:satellite_capsule:6.17::el9",
      "cpe:/a:redhat:satellite_maintenance:6.17::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.17 for RHEL 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "python-django",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:4.2.28-0.1.el9pc",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:satellite:6.17::el9",
      "cpe:/a:redhat:satellite_utils:6.17::el9",
      "cpe:/a:redhat:satellite_capsule:6.17::el9",
      "cpe:/a:redhat:satellite_maintenance:6.17::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.17 for RHEL 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "python-pulp-container",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:2.22.3-1.el9pc",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:satellite:6.17::el9",
      "cpe:/a:redhat:satellite_utils:6.17::el9",
      "cpe:/a:redhat:satellite_capsule:6.17::el9",
      "cpe:/a:redhat:satellite_maintenance:6.17::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.17 for RHEL 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "python-pulp-rpm",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:3.27.10-2.el9pc",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:satellite:6.17::el9",
      "cpe:/a:redhat:satellite_utils:6.17::el9",
      "cpe:/a:redhat:satellite_capsule:6.17::el9",
      "cpe:/a:redhat:satellite_maintenance:6.17::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.17 for RHEL 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "rubygem-fog-kubevirt",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:1.5.1-1.el9sat",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:satellite:6.17::el9",
      "cpe:/a:redhat:satellite_utils:6.17::el9",
      "cpe:/a:redhat:satellite_capsule:6.17::el9",
      "cpe:/a:redhat:satellite_maintenance:6.17::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.17 for RHEL 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "rubygem-foreman_kubevirt",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:0.4.3-1.el9sat",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:satellite:6.17::el9",
      "cpe:/a:redhat:satellite_utils:6.17::el9",
      "cpe:/a:redhat:satellite_capsule:6.17::el9",
      "cpe:/a:redhat:satellite_maintenance:6.17::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.17 for RHEL 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "rubygem-katello",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:4.16.0.14-1.el9sat",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:satellite:6.17::el9",
      "cpe:/a:redhat:satellite_utils:6.17::el9",
      "cpe:/a:redhat:satellite_capsule:6.17::el9",
      "cpe:/a:redhat:satellite_maintenance:6.17::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.17 for RHEL 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "rubygem-rubyipmi",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:0.13.0-1.el9sat",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:satellite:6.17::el9",
      "cpe:/a:redhat:satellite_utils:6.17::el9",
      "cpe:/a:redhat:satellite_capsule:6.17::el9",
      "cpe:/a:redhat:satellite_maintenance:6.17::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.17 for RHEL 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "satellite",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:6.17.7-1.el9sat",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:satellite:6.17::el9",
      "cpe:/a:redhat:satellite_utils:6.17::el9",
      "cpe:/a:redhat:satellite_capsule:6.17::el9",
      "cpe:/a:redhat:satellite_maintenance:6.17::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.17 for RHEL 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "yggdrasil-worker-forwarder",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:0.0.3-4.el9sat",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:satellite:6.17::el9",
      "cpe:/a:redhat:satellite_utils:6.17::el9",
      "cpe:/a:redhat:satellite_capsule:6.17::el9",
      "cpe:/a:redhat:satellite_maintenance:6.17::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.18 for RHEL 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "foreman",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:3.16.0.12-1.el9sat",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:satellite_capsule:6.18::el9",
      "cpe:/a:redhat:satellite:6.18::el9",
      "cpe:/a:redhat:satellite_utils:6.18::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "satellite-utils:el8/foreman",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:satellite:6"
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
08 Apr 2026 11:23Current
CVSS 3.18
EPSS0.01377
CWE-78
remote code executioncommand injectionwebsocket proxyunsanitized hostnamescompute resourcesvirtual machine consoleforeman
19