1383 matches found
CVE-2026-86323
A flaw was found in Foreman’s Api::V2::MailNotificationsController, where authorization checks on user-specific mail-notification resources are insufficient. The GET /api/v2/users/:id/mailnotifications endpoint resolves the target account using User.findparams:id without verifying that the...
CVE-2026-86324
A flaw was found in Foreman’s Api::V2::SshKeysController, where the target user is resolved through Foreman::Controller::UserAwarefinduser using User.findparams:userid without enforcing the required parent-user authorization check. An attacker with the createsshkeys permission can exploit this...
CVE-2026-86322
A flaw was found in Foreman’s Api::V2::PersonalAccessTokensController, where Foreman::Controller::UserAwarefinduser resolves the target account using User.findparams:userid without applying the required parent-user authorization check. An attacker with the createpersonalaccesstokens permission ca...
EUVD-2026-124677
A flaw was found in Foreman’s Api::V2::SshKeysController, where the target user is resolved through Foreman::Controller::UserAwarefinduser using User.findparams:userid without enforcing the required parent-user authorization check. An attacker with the createsshkeys permission can exploit this...
CVE-2026-86324 Foreman: authorization flaw in the foreman::controller::useraware handling used by api::v2::sshkeyscontroller
A flaw was found in Foreman’s Api::V2::SshKeysController, where the target user is resolved through Foreman::Controller::UserAwarefinduser using User.findparams:userid without enforcing the required parent-user authorization check. An attacker with the createsshkeys permission can exploit this...
CVE-2026-86324
A flaw in Foreman 's Api::V2::SshKeysController allows for an authorization bypass because the system resolves the target user via Foreman::Controller::UserAware#find_user using User.find(params[:user_id]) without enforcing required parent-user authorization checks. An attacker possessing the cre...
CVE-2026-86323
A flaw was found in Foreman’s Api::V2::MailNotificationsController, where authorization checks on user-specific mail-notification resources are insufficient. The GET /api/v2/users/:id/mailnotifications endpoint resolves the target account using User.findparams:id without verifying that the...
CVE-2026-86324
A flaw was found in Foreman’s Api::V2::SshKeysController, where the target user is resolved through Foreman::Controller::UserAwarefinduser using User.findparams:userid without enforcing the required parent-user authorization check. An attacker with the createsshkeys permission can exploit this...
EUVD-2026-124676
A flaw was found in Foreman’s Api::V2::MailNotificationsController, where authorization checks on user-specific mail-notification resources are insufficient. The GET /api/v2/users/:id/mailnotifications endpoint resolves the target account using User.findparams:id without verifying that the...
CVE-2026-86323
A vulnerability exists in Foreman 's Api::V2::MailNotificationsController due to insufficient authorization checks on user-specific mail-notification resources. The GET /api/v2/users/:id/mail_notifications endpoint resolves target accounts using User.find(params[:id]) without verifying if the aut...
CVE-2026-86323 Foreman: authorization flaw in the mail-notification endpoints implemented by api::v2::mailnotificationscontroller
A flaw was found in Foreman’s Api::V2::MailNotificationsController, where authorization checks on user-specific mail-notification resources are insufficient. The GET /api/v2/users/:id/mailnotifications endpoint resolves the target account using User.findparams:id without verifying that the...
CVE-2026-86322 Foreman: authorization flaw in the foreman::controller::useraware#find_user handling used by api::v2::personalaccesstokenscontroller
A flaw was found in Foreman’s Api::V2::PersonalAccessTokensController, where Foreman::Controller::UserAwarefinduser resolves the target account using User.findparams:userid without applying the required parent-user authorization check. An attacker with the createpersonalaccesstokens permission ca...
CVE-2026-86322
A flaw exists in Foreman 's Api::V2::PersonalAccessTokensController where Foreman::Controller::UserAware#find_user resolves accounts using User.find(params[:user_id]) without a required parent-user authorization check. An attacker possessing the create_personal_access_tokens permission can exploi...
EUVD-2026-124675
A flaw was found in Foreman’s Api::V2::PersonalAccessTokensController, where Foreman::Controller::UserAwarefinduser resolves the target account using User.findparams:userid without applying the required parent-user authorization check. An attacker with the createpersonalaccesstokens permission ca...
CVE-2026-86322
A flaw was found in Foreman’s Api::V2::PersonalAccessTokensController, where Foreman::Controller::UserAwarefinduser resolves the target account using User.findparams:userid without applying the required parent-user authorization check. An attacker with the createpersonalaccesstokens permission ca...
CVE-2026-107443
A flaw was found in Foreman. An authenticated user with viewhosts privileges can retrieve rendered provisioning template content for a host via the hosts template API endpoint, disclosing sensitive data such as the host root password. This is an incomplete fix of CVE-2026-96659, which hardened th...
CVE-2026-107443
A flaw was found in Foreman. An authenticated user with viewhosts privileges can retrieve rendered provisioning template content for a host via the hosts template API endpoint, disclosing sensitive data such as the host root password. This is an incomplete fix of CVE-2026-96659, which hardened th...
EUVD-2026-124670
A flaw was found in Foreman. An authenticated user with viewhosts privileges can retrieve rendered provisioning template content for a host via the hosts template API endpoint, disclosing sensitive data such as the host root password. This is an incomplete fix of CVE-2026-96659, which hardened th...
CVE-2026-107443
A flaw in Foreman allows an authenticated user with view_hosts privileges to retrieve rendered provisioning template content via the hosts template API endpoint . This vulnerability results in the disclosure of sensitive information, such as the host root password . The issue stems from an incomp...
CVE-2026-107443 Foreman: foreman: api host template render discloses secrets to view_hosts users (incomplete cve-2026-96659 fix)
A flaw was found in Foreman. An authenticated user with viewhosts privileges can retrieve rendered provisioning template content for a host via the hosts template API endpoint, disclosing sensitive data such as the host root password. This is an incomplete fix of CVE-2026-96659, which hardened th...