CVE-2026-107443

A flaw was found in Foreman. An authenticated user with viewhosts privileges can retrieve rendered provisioning template content for a host via the hosts template API endpoint, disclosing sensitive data such as the host root password. This is an incomplete fix of CVE-2026-96659, which hardened th...