CVE-2026-96659
Last modified
CVE-2026-96659 is a critical-severity vulnerability rated 9.1/10 on the CVSS scale. A flaw was found in Foreman. This vulnerability allows an authenticated user with low-level Viewer permissions to cause unauthorized information disclosure by submitting requests to template preview endpoints. EPSS estimates a 0.32% chance of exploitation in the next 30 days.
Description
A flaw was found in Foreman. This vulnerability allows an authenticated user with low-level Viewer permissions to cause unauthorized information disclosure by submitting requests to template preview endpoints. By exploiting this issue, the user can access sensitive data, such as host root passwords. Furthermore, under insecure system configurations where Safemode protections are disabled, the flaw may allow the user to execute arbitrary commands as the Foreman system account.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | Red Hat Satellite 6.16 for RHEL 8 | All versions |
| Red Hat | Red Hat Satellite 6.16 for RHEL 9 | All versions |
| Red Hat | Red Hat Satellite 6.17 for RHEL 9 | All versions |
| Red Hat | Red Hat Satellite 6.18 for RHEL 9 | All versions |
| Red Hat | Red Hat Satellite 6.19 for RHEL 9 | All versions |
References
Timeline
- Published
- Last Modified
- Status
- Undergoing Analysis
Frequently Asked Questions
What is CVE-2026-96659?
How severe is CVE-2026-96659?
How do I fix CVE-2026-96659?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-96652Plex Media Server before 1.43.3.10861 allows SSRF via '/play…4.3
- CVE-2026-96653The WP Directory Kit plugin for WordPress is vulnerable to t…6.5
- CVE-2026-96654Plex Media Server before 1.43.3.10861 does not correctly neu…6.5
- CVE-2026-96655Plex Media Server before 1.43.3.10861 allows an authenticate…4.3
- CVE-2026-96656Plex Media Server before 1.43.3.10861 allows an admin user t…7.2
- CVE-2026-96658A flaw was found in Foreman. An authenticated attacker with …9.9
- CVE-2026-96662The Appointment Booking Plugin – LatePoint | Calendar & Sche…7.5
- CVE-2026-96667The Real Estate Manager – Property Listing and Agent Managem…7.2
- CVE-2026-9667IBM WebSphere Application Server 9.0, and 8.5 is vulnerable …5.3
- CVE-2026-96671Cross-Site Request Forgery (CSRF) vulnerability in fifu.app …8.8
- CVE-2026-96672Frappe ERPNext versions before 16.34.1 fail to validate that…6.4
- CVE-2026-96673Photoview through 2.4.0 contains an SQL injection vulnerabil…7.5
Are you affected by CVE-2026-96659?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST