CVE-2025-31722

CVE-2025-31722 — Jenkins Templating Engine RCE For educational and authorized security research purposes only. Description Sandbox bypass vulnerability in the Jenkins Templating Engine JTE plugin = 2.5.3 that allows a low-privileged user to execute arbitrary code on the Jenkins server. The flaw...

foreman: Foreman: Arbitrary code execution via safemode sandbox bypass

A flaw was found in Foreman. This vulnerability allows an authenticated remote attacker with low-level read permissions to achieve arbitrary code execution on the underlying server. By manipulating the permitted methods list within the template rendering engine, an attacker can bypass the safemod...

foreman: Foreman: Arbitrary code execution via safemode sandbox bypass

A flaw was found in Foreman. This vulnerability allows an authenticated remote attacker with low-level read permissions to achieve arbitrary code execution on the underlying server. By manipulating the permitted methods list within the template rendering engine, an attacker can bypass the safemod...

foreman: Foreman: Arbitrary code execution via safemode sandbox bypass

A flaw was found in Foreman. This vulnerability allows an authenticated remote attacker with low-level read permissions to achieve arbitrary code execution on the underlying server. By manipulating the permitted methods list within the template rendering engine, an attacker can bypass the safemod...

CVE-2026-96658

A flaw was found in Foreman. This vulnerability allows an authenticated remote attacker with low-level read permissions to achieve arbitrary code execution on the underlying server. By manipulating the permitted methods list within the template rendering engine, an attacker can bypass the safemod...

EUVD-2026-90921

A flaw was found in Foreman. An authenticated attacker with low-level permissions can achieve remote code execution RCE by bypassing the safemode sandbox within the templating engine. Due to improper handling of delegated methods, an attacker can append unauthorized functions to the allowed...

CVE-2026-96658 Foreman: foreman: arbitrary code execution via safemode sandbox bypass

A flaw was found in Foreman. This vulnerability allows an authenticated remote attacker with low-level read permissions to achieve arbitrary code execution on the underlying server. By manipulating the permitted methods list within the template rendering engine, an attacker can bypass the safemod...

CVE-2026-96658 Foreman: foreman: arbitrary code execution via safemode sandbox bypass

A flaw was found in Foreman. This vulnerability allows an authenticated remote attacker with low-level read permissions to achieve arbitrary code execution on the underlying server. By manipulating the permitted methods list within the template rendering engine, an attacker can bypass the safemod...

CVE-2026-96658

A flaw was found in Foreman. This vulnerability allows an authenticated remote attacker with low-level read permissions to achieve arbitrary code execution on the underlying server. By manipulating the permitted methods list within the template rendering engine, an attacker can bypass the safemod...

CVE-2026-96658

A flaw was found in Foreman. This vulnerability allows an authenticated remote attacker with low-level read permissions to achieve arbitrary code execution on the underlying server. By manipulating the permitted methods list within the template rendering engine, an attacker can bypass the safemod...

foreman: Foreman: Arbitrary code execution via safemode sandbox bypass

A flaw was found in Foreman. This vulnerability allows an authenticated remote attacker with low-level read permissions to achieve arbitrary code execution on the underlying server. By manipulating the permitted methods list within the template rendering engine, an attacker can bypass the safemod...

CVE-2026-96658: Improper Control of Generation of Code

A flaw was found in Foreman. An authenticated attacker with low-level permissions can achieve remote code execution RCE by bypassing the safemode sandbox within the templating engine. Due to improper handling of delegated methods, an attacker can append unauthorized functions to the allowed...

PT-2026-103944

Name of the Vulnerable Software and Affected Versions Foreman affected versions not specified Red Hat Satellite affected versions not specified Description An authenticated attacker with low-level permissions can achieve remote code execution RCE by bypassing the safemode sandbox within the...

GO-2026-6158 Wings exposes node configuration secrets through egg configuration-file templating in github.com/pterodactyl/wings

Wings exposes node configuration secrets through egg configuration-file templating in github.com/pterodactyl/wings...

org.jenkins-ci.plugins:templating-engine (>=2.2, <=2.5.3) potentially affected by CVE-2026-57281 via org.jenkins-ci.plugins:script-security (1.76)

org.jenkins-ci.plugins:script-security MAVEN version 1.76 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.jenkins-ci.plugins:templating-engine =2.2, =2.5.3 Source cves: CVE-2026-57281...

org.jenkins-ci.plugins:templating-engine (>=1.6, <=2.2.1.1) potentially affected by CVE-2026-57285 via org.jenkins-ci.plugins:github-branch-source (2.5.1)

org.jenkins-ci.plugins:github-branch-source MAVEN version 2.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - org.jenkins-ci.plugins:templating-engine =1.6, =2.2.1.1 Source cves:...

org.jenkins-ci.plugins:templating-engine (>=2.3, <=2.5.3) potentially affected by CVE-2026-57282 via org.jenkins-ci.plugins:git-client (3.2.1)

org.jenkins-ci.plugins:git-client MAVEN version 3.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - org.jenkins-ci.plugins:templating-engine =2.3, =2.5.3 Source cves: CVE-2026-57282 Source...

org.jenkins-ci.plugins:templating-engine (>=1.6, <=2.1) potentially affected by CVE-2026-57280 via org.jenkins-ci.plugins:script-security (1.42)

org.jenkins-ci.plugins:script-security MAVEN version 1.42 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.jenkins-ci.plugins:templating-engine =1.6, =2.1 Source cves: CVE-2026-57280 Sour...

org.jenkins-ci.plugins:templating-engine (>=2.2, <=2.5.3) potentially affected by CVE-2026-57280 via org.jenkins-ci.plugins:script-security (1.76)

org.jenkins-ci.plugins:script-security MAVEN version 1.76 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.jenkins-ci.plugins:templating-engine =2.2, =2.5.3 Source cves: CVE-2026-57280...

Litestar has HTML Injection Through its CSRF Token

Overview Litestar instances which use a template engine in conjunction with CSRF protection are vulnerable to HTML Injection which can be escalated to Cross Site Scripting due to the contents of the CSRF cookie being excluded from automatic escaping by the template engine when configured inline...