{"schemaVersion":3,"id":"CVE-2026-96659","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"A flaw was found in Foreman. This vulnerability allows an authenticated user with low-level Viewer permissions to cause unauthorized information disclosure by submitting requests to template preview endpoints. By exploiting this issue, the user can access sensitive data, such as host root passwords. Furthermore, under insecure system configurations where Safemode protections are disabled, the flaw may allow the user to execute arbitrary commands as the Foreman system account.","dates":{"published":"2026-10-01T16:23:23.666Z","modified":"2026-10-16T12:18:17.723Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":9.1,"severity":"critical","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":9.1,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":9.1,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00324,"percentile":0.24148,"severity":"low","asOf":"2026-10-21T00:00:00.000Z","change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[{"date":"2026-10-02T00:00:00.000Z","score":0.00324,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00322,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00322,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00322,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00322,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00329,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00329,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00329,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00329,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00329,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00329,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00329,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00329,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00329,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00329,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00324,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00324,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00324,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00324,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.00324,"percentile":0.24148}],"last30":[{"date":"2026-10-02T00:00:00.000Z","score":0.00324,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00322,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00322,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00322,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00322,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00329,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00329,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00329,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00329,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00329,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00329,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00329,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00329,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00329,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00329,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00324,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00324,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00324,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00324,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.00324,"percentile":0.24148}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-267","name":"Privilege Defined With Unsafe Actions","description":"A particular privilege, role, capability, or right can be used to perform unsafe actions that were not intended, even when it is assigned to the correct entity.","type":"weakness","status":"Incomplete","abstraction":"Base","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/267.html"}],"affected":[{"vendor":"redhat","product":"satellite","name":"satellite","label":"satellite","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 6.16, < 6.16.4","noFixRecorded":false,"fixedIn":null},{"text":"≥ 6.17, < 6.17.12","noFixRecorded":false,"fixedIn":null},{"text":"≥ 6.19, < 6.19.5","noFixRecorded":false,"fixedIn":null},{"text":"≥ 6.18, < 6.18.10","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 6.16, < 6.16.4 | ≥ 6.17, < 6.17.12 | ≥ 6.19, < 6.19.5 | ≥ 6.18, < 6.18.10","eol":null,"hubHref":"/vendor/redhat/satellite"},{"vendor":"theforeman","product":"foreman","name":"foreman","label":"foreman","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 1.9.0, ≤ 3.19.1","noFixRecorded":false,"fixedIn":null},{"text":"5.0.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 1.9.0, ≤ 3.19.1 | 5.0.0","eol":{"isEol":false,"eolDate":null,"matchMethod":"cpe","cycle":{"name":"5.0","label":"5.0","eolFrom":null,"isLts":false,"isMaintained":true,"latestVersion":"5.0.1"},"product":{"name":"foreman","label":"Foreman","category":"server-app"}},"hubHref":"/vendor/theforeman/foreman"}],"affectedCount":2,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://access.redhat.com/errata/RHSA-2026:74503","label":"access.redhat.com/errata/RHSA-2026:74503","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:74504","label":"access.redhat.com/errata/RHSA-2026:74504","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:74505","label":"access.redhat.com/errata/RHSA-2026:74505","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:74506","label":"access.redhat.com/errata/RHSA-2026:74506","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-96659","label":"access.redhat.com/security/cve/CVE-2026-96659","hostname":"access.redhat.com","tags":["VDB Entry","X Refsource REDHAT","Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2536844","label":"bugzilla.redhat.com/show_bug.cgi?id=2536844","hostname":"bugzilla.redhat.com","tags":["Issue Tracking","X Refsource REDHAT","Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2026/10/07/1","label":"www.openwall.com/lists/oss-security/2026/10/07/1","hostname":"www.openwall.com","tags":["Mailing List","Patch","Third Party Advisory"]}],"lineage":{"upstream":[],"downstream":["RHSA-2026:74503","RHSA-2026:74504","RHSA-2026:74505","RHSA-2026:74506"],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2026-10-01T16:23:23.666Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-10-16T12:18:17.723Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":70,"level":"high","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T19:59:38.422Z","stale":false,"partial":false}}