CVE-2026-81658

A flaw was found in Foreman. The template revision endpoint does not enforce object-level authorization when retrieving an audited template revision. An authenticated, low privileged user with a template-related permission, such as view_ptables, can obtain historical template contents belonging to another organization or location by supplying the corresponding audit ID. This can result in unauthorized disclosure of historical template contents, which may contain sensitive configuration information, credentials, or other secrets. The REST API revision endpoints correctly restrict this lookup.

• CWE-639

• https://access.redhat.com/security/cve/CVE-2026-81658Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2524899Issue Tracking, Vendor Advisory

Published

Aug 27, 2026

Last Modified

Oct 7, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-81652The Photo Gallery, Sliders, Proofing and WordPress plugin …2.7
• CVE-2026-81653The Photo Gallery, Sliders, Proofing and WordPress plugin …4.2
• CVE-2026-81654The Photo Gallery, Sliders, Proofing and WordPress plugin …3.1
• CVE-2026-81655The Ad Inserter WordPress plugin before 2.8.19 does not cor…7.5
• CVE-2026-81656IBM Guardium Data Protection 12.2 is vulnerable to a SQL inj…8.8
• CVE-2026-81657IBM Guardium Data Protection 12.2 could allow a remote unaut…9.8
• CVE-2026-81659Affected versions of Flowintel allow attacker-controlled not…7.1
• CVE-2026-8166Improper neutralization of input during web page generation …5.4
• CVE-2026-81660The Groundhogg — CRM, Newsletters, and Marketing Automation …8.8
• CVE-2026-81662Affected versions of Flowintel improperly trust configuratio…8.6
• CVE-2026-81664The OpenFaaS gateway registers GET /system/telemetry in gate…5.3
• CVE-2026-81665A heap-based buffer overflow was found in Corosync's Totem P…7.5