CVE-2025-10622: A flaw was found in Red Hat Satellite (Foreman component). This vulnerability allows an authenticated user with edit_settings permissions to achieve arbitrary…

PriorityP351high8CVSS 3.1

AVNACHPRHUINSCCHIHAH

EPSS

0.57%

43.5th percentile

A flaw was found in Red Hat Satellite (Foreman component). This vulnerability allows an authenticated user with edit_settings permissions to achieve arbitrary command execution on the underlying operating system via insufficient server-side validation of command whitelisting.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
the_foreman	foreman	>= 3.12.0 < 3.16.1	3.16.1

CVSS provenance

nvdv3.18.0HIGHCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

vendor_redhat8.0HIGH

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.