Theforeman

    Dashboard / Vendors

    Products: 11
    Vulnerabilities: 92
    Known Exploited: 0
    3
    Critical Level Threats
    26
    High Level Threats
    60
    Medium Level Threats
    3
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-5135

    Foreman: foreman: unauthorized modification of host configurations via broken access control

    Last Modified: Jul 29, 2026
    Published: Jul 01, 2026

    CVE-2025-9572

    Foreman: satellite: graphql api permission bypass leads to information disclosure

    Last Modified: Mar 24, 2026
    Published: Aug 29, 2025

    CVE-2024-7700

    Foreman: command injection in "host init config" template via "install packages" field on foreman

    Last Modified: Nov 20, 2025
    Published: Aug 12, 2024

    CVE-2023-4886

    Foreman: world readable file containing secrets

    Last Modified: Feb 25, 2026
    Published: Oct 03, 2023

    CVE-2022-3874

    Os command injection via ct_command and fcct_command

    Last Modified: Nov 21, 2024
    Published: Apr 19, 2023
    Items Per Page
    Theforeman Vulnerabilities & Security CVEs | CVE-DB