What’s Vulnerable › Vulnerabilities

CVE-2026-81658: Foreman: cross-tenant disclosure of template revisions via unauthorized audit lookup

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-08-27 · updated 2026-10-07
• Weakness: CWE-639

Description

A flaw was found in Foreman. The template revision endpoint does not enforce object-level authorization when retrieving an audited template revision. An authenticated, low privileged user with a template-related permission, such as view_ptables, can obtain historical template contents belonging to another organization or location by supplying the corresponding audit ID. This can result in unauthorized disclosure of historical template contents, which may contain sensitive configuration information, credentials, or other secrets. The REST API revision endpoints correctly restrict this lookup.

Affected products

• Red Hat Satellite 6: 6.0
• foreman: all versions

References

• https://access.redhat.com/security/cve/CVE-2026-81658
• https://bugzilla.redhat.com/show_bug.cgi?id=2524899

Get alerted when CVE-2026-81658 or the next vulnerability affects your stack