CVE-2026-96658
published 2026-10-01CVE-2026-96658: A flaw was found in Foreman. An authenticated attacker with low-level permissions can achieve remote code execution (RCE) by bypassing the safemode sandbox…
PriorityP268critical9.9CVSS 3.1
AVNACLPRLUINSCCHIHAH
EPSS
0.70%
51.7th percentile
A flaw was found in Foreman. An authenticated attacker with low-level permissions can achieve remote code execution (RCE) by bypassing the safemode sandbox within the templating engine. Due to improper handling of delegated methods, an attacker can append unauthorized functions to the allowed execution list, enabling them to run arbitrary commands on the hosting server.
CVSS provenance
nvdv3.19.9CRITICALCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
vendor_redhat9.9CRITICAL
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
foreman: Safemode Bypass leading to RCE
vendor_redhat·2026-10-01·CVSS 9.9
CVE-2026-96658 [CRITICAL] foreman: Safemode Bypass leading to RCE
foreman: Safemode Bypass leading to RCE
A flaw was found in Foreman. An authenticated attacker with low-level permissions can achieve remote code execution (RCE) by bypassing the safemode sandbox within the templating engine. Due to improper handling of delegated methods, an attacker can append unauthorized functions to the allowed execution list, enabling them to run arbitrary commands on the hosting server.
Statement: Red Hat Product Security rates this vulnerability as having a Critical security impact because an authenticated user with minimal read permissions can achieve arbitrary remote code execution on the underlying Satellite server. In Red Hat Satellite deployments, Foreman relies on a restricted sandbox to safely render templates. Flaws in this evaluation mechanism allow adver
GHSA
A flaw was found in Foreman.
ghsa_unreviewed·2026-10-01
CVE-2026-96658 [CRITICAL] CWE-94 A flaw was found in Foreman.
A flaw was found in Foreman. An authenticated attacker with low-level permissions can achieve remote code execution (RCE) by bypassing the safemode sandbox within the templating engine. Due to improper handling of delegated methods, an attacker can append unauthorized functions to the allowed execution list, enabling them to run arbitrary commands on the hosting server.
No detection rules found.
No public exploits indexed.
2026-10-01
Published