CVE-2026-107203

The Foreman package contains an incorrect authorization flaw in its network interface handling . The domain and subnet interface API fails to apply search limits on host permissions, allowing a low-privileged network attacker to view interface records for hosts they are not authorized to access. ...

EUVD-2026-97236

An incorrect authorization flaw has been found in network interface handling in the Foreman package. The domain and subnet interface API checks only that the caller holds a host permission. It does not apply the search limit on that permission, so the request is answered from every interface on t...

CVE-2026-107203 Foreman: domain and subnet interface api skips host search filters

An incorrect authorization flaw has been found in network interface handling in the Foreman package. The domain and subnet interface API checks only that the caller holds a host permission. It does not apply the search limit on that permission, so the request is answered from every interface on t...