CVE-2026-1961
Forman: foreman: remote code execution via command injection in websocket proxy
HIGH 8.0EPSS 1.4%
A flaw was found in Foreman. A remote attacker could exploit a command injection vulnerability in Foreman's WebSocket proxy implementation. This vulnerability arises from the system's use of unsanitized hostname values from compute resource providers when constructing shell commands. By operating a malicious compute resource server, an attacker could achieve remote code execution on the Foreman server when a user accesses VM VNC console functionality. This could lead to the compromise of sensitive credentials and the entire managed infrastructure.
- Affected
- Red Hat · Red Hat Satellite 6.16 for RHEL 8 · Red Hat Satellite 6.16 for RHEL 9 · Red Hat Satellite 6.17 for RHEL 9 · Red Hat Satellite 6.18 for RHEL 9 · Red Hat Satellite 6
- CVSS v3.1 CNA
- 8.0 HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H - EPSS
- 1.41% chance of exploitation in the next 30 days, 72nd percentile
- Published
- 2026-03-26
- Updated
- 2026-07-15
Proof-of-concept exploits (1)
- kalnux/CVE-2026-1961-foreman-poc0★ · 2026-09-18