CVE-2026-1961

A flaw was found in Foreman. A remote attacker could exploit a command injection vulnerability in Foreman's WebSocket proxy implementation. This vulnerability arises from the system's use of unsanitized hostname values from compute resource providers when constructing shell commands. By operating a malicious compute resource server, an attacker could achieve remote code execution on the Foreman server when a user accesses VM VNC console functionality. This could lead to the compromise of sensitive credentials and the entire managed infrastructure.

• CWE-78
• CWE-78

• https://access.redhat.com/errata/RHSA-2026:5968Vendor Advisory
• https://access.redhat.com/errata/RHSA-2026:5970Vendor Advisory
• https://access.redhat.com/errata/RHSA-2026:5971Vendor Advisory
• https://access.redhat.com/security/cve/CVE-2026-1961Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2437036Exploit, Issue Tracking, Vendor Advisory
• https://www.openwall.com/lists/oss-security/2026/03/27/3Mailing List, Third Party Advisory
• https://access.redhat.com/errata/RHSA-2026:5968Vendor Advisory
• https://access.redhat.com/errata/RHSA-2026:5970Vendor Advisory
• https://access.redhat.com/errata/RHSA-2026:5971Vendor Advisory
• https://access.redhat.com/security/cve/CVE-2026-1961Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2437036Exploit, Issue Tracking, Vendor Advisory
• https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-1961.jsonVendor Advisory

Published

Mar 26, 2026

Last Modified

Oct 20, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-1960Stored Cross-Site Scripting (XSS) vulnerability in Loggro Py…5.1
• CVE-2026-19600Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7…4.9
• CVE-2026-19601Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7…4.9
• CVE-2026-19603Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7…4.3
• CVE-2026-19607A flaw was found in the first-broker-login flow of the keycl…5.3
• CVE-2026-19608A flaw was found in the group policy provider of Keycloak au…5.3
• CVE-2026-19610A flaw was found in the platform-mbean component of JBoss EA…6.5
• CVE-2026-19611A flaw was found in WildFly Elytron. Password hashing and ve…7.4
• CVE-2026-19612Adobe Experience Manager is affected by a DOM-based Cross-Si…5.4
• CVE-2026-19613The ECS WordPress plugin before 4.3.10 does not perform own…6.5
• CVE-2026-19614The API is prone to XML external entity (XXE) injection. By …5.3
• CVE-2026-19615The Admin and Site Enhancements (ASE) WordPress plugin befor…6.8