Critical

Foreman: excessive permissions for viewer role on preview

Type: advisorySource: Official CVE List1 source record

A flaw was found in Foreman. This vulnerability allows an authenticated user with low-level Viewer permissions to cause unauthorized information disclosure by submitting requests to template preview endpoints. By exploiting this issue, the user can access sensitive data, such as host root passwords. Furthermore, under insecure system configurations where Safemode protections are disabled, the flaw may allow the user to execute arbitrary commands as the Foreman system account.

Announced 1 Oct 2026Group revision 1

Original source ↗

CVE-2026-96659

Primary source · Revision 1

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-96659

Red Hat Satellite 6.16 for RHEL 8

Source reference: /containers/cna/affected/0/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Satellite 6.16 for RHEL 9

Source reference: /containers/cna/affected/1/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Satellite 6.17 for RHEL 9

Source reference: /containers/cna/affected/2/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Satellite 6.17 for RHEL 9

Source reference: /containers/cna/affected/3/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Satellite 6.17 for RHEL 9

Source reference: /containers/cna/affected/4/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Satellite 6.17 for RHEL 9

Source reference: /containers/cna/affected/5/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Satellite 6.17 for RHEL 9

Source reference: /containers/cna/affected/6/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Satellite 6.17 for RHEL 9

Source reference: /containers/cna/affected/7/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Satellite 6.17 for RHEL 9

Source reference: /containers/cna/affected/8/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Satellite 6.17 for RHEL 9

Source reference: /containers/cna/affected/9/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Satellite 6.17 for RHEL 9

Source reference: /containers/cna/affected/10/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Satellite 6.17 for RHEL 9

Source reference: /containers/cna/affected/11/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Satellite 6.17 for RHEL 9

Source reference: /containers/cna/affected/12/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Satellite 6.18 for RHEL 9

Source reference: /containers/cna/affected/13/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Satellite 6.19 for RHEL 9

Source reference: /containers/cna/affected/14/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Structured affected-version data

Original package identities and version rules from this source.

[
  {
    "cpes": [
      "cpe:/a:redhat:satellite:6.16::el8",
      "cpe:/a:redhat:satellite:6.16::el9",
      "cpe:/a:redhat:satellite_capsule:6.16::el8",
      "cpe:/a:redhat:satellite_capsule:6.16::el9",
      "cpe:/a:redhat:satellite_utils:6.16::el8",
      "cpe:/a:redhat:satellite_utils:6.16::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.16 for RHEL 8",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:3.12.0.23-1.el8sat",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "foreman",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:satellite:6.16::el8",
      "cpe:/a:redhat:satellite:6.16::el9",
      "cpe:/a:redhat:satellite_capsule:6.16::el8",
      "cpe:/a:redhat:satellite_capsule:6.16::el9",
      "cpe:/a:redhat:satellite_utils:6.16::el8",
      "cpe:/a:redhat:satellite_utils:6.16::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.16 for RHEL 9",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:3.12.0.23-1.el9sat",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "foreman",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:satellite:6.17::el9",
      "cpe:/a:redhat:satellite_capsule:6.17::el9",
      "cpe:/a:redhat:satellite_utils:6.17::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.17 for RHEL 9",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:3.14.0.22-1.el9sat",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "foreman",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:satellite:6.17::el9",
      "cpe:/a:redhat:satellite_capsule:6.17::el9",
      "cpe:/a:redhat:satellite_utils:6.17::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.17 for RHEL 9",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:3.2.13-1.el9pc",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "python-dynaconf",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:satellite:6.17::el9",
      "cpe:/a:redhat:satellite_capsule:6.17::el9",
      "cpe:/a:redhat:satellite_utils:6.17::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.17 for RHEL 9",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:3.1.62-1.el9pc",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "python-gitpython",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:satellite:6.17::el9",
      "cpe:/a:redhat:satellite_capsule:6.17::el9",
      "cpe:/a:redhat:satellite_utils:6.17::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.17 for RHEL 9",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:5.3.1-2.el9pc",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "python-lxml",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:satellite:6.17::el9",
      "cpe:/a:redhat:satellite_capsule:6.17::el9",
      "cpe:/a:redhat:satellite_utils:6.17::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.17 for RHEL 9",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:0.6.0-1.el9pc",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "python-sqlparse",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:satellite:6.17::el9",
      "cpe:/a:redhat:satellite_capsule:6.17::el9",
      "cpe:/a:redhat:satellite_utils:6.17::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.17 for RHEL 9",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:15.0.2-2.el9sat",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "rubygem-foreman_remote_execution",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:satellite:6.17::el9",
      "cpe:/a:redhat:satellite_capsule:6.17::el9",
      "cpe:/a:redhat:satellite_utils:6.17::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.17 for RHEL 9",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:3.14.0-2.el9sat",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "rubygem-hammer_cli",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:satellite:6.17::el9",
      "cpe:/a:redhat:satellite_capsule:6.17::el9",
      "cpe:/a:redhat:satellite_utils:6.17::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.17 for RHEL 9",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:4.16.0.20-1.el9sat",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "rubygem-katello",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:satellite:6.17::el9",
      "cpe:/a:redhat:satellite_capsule:6.17::el9",
      "cpe:/a:redhat:satellite_utils:6.17::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.17 for RHEL 9",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:1.5.0-2.el9sat",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "rubygem-safemode",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:satellite:6.17::el9",
      "cpe:/a:redhat:satellite_capsule:6.17::el9",
      "cpe:/a:redhat:satellite_utils:6.17::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.17 for RHEL 9",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:6.17.12-1.el9sat",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "satellite",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:satellite:6.17::el9",
      "cpe:/a:redhat:satellite_capsule:6.17::el9",
      "cpe:/a:redhat:satellite_utils:6.17::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.17 for RHEL 9",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:0.1.0-2.1.el9sat",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "yggdrasil-worker-forwarder",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:satellite:6.18::el9",
      "cpe:/a:redhat:satellite_capsule:6.18::el9",
      "cpe:/a:redhat:satellite_utils:6.18::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.18 for RHEL 9",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:3.16.0.25-1.el9sat",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "foreman",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:satellite:6.19::el9",
      "cpe:/a:redhat:satellite_capsule:6.19::el9",
      "cpe:/a:redhat:satellite_utils:6.19::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.19 for RHEL 9",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:3.18.0.14-1.el9sat",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "foreman",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  }
]

Related CVEs: CVE-2026-96659
Source reference: /cveMetadata/cveId

Publisher severity

critical

Source reference: /containers/cna/metrics

Event: #32418 · Revision 1
Added to Heist Feed: Sun, 25 Oct 2026 08:49:09 GMT
Publisher date: Thu, 01 Oct 2026 16:23:23 GMT

Read the original announcement

Revision history

25 Oct 2026CVE-2026-96659 · Revision 1Source updated