https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T00:16:05.333763+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-105941 EUVD-2026-105941 2026-10-03T00:16:05.404807+00:00 EUVD-2026-105941 https://cve.radiocsirt.org/vuln/fkie_cve-2013-2113 fkie_cve-2013-2113 2026-10-03T00:16:05.404851+00:00

The create method in app/controllers/users_controller.rb in Foreman before 1.2.0-RC2 allows remote authenticated users with permissions to create or edit other users to gain privileges by (1) changing the admin flag or (2) assigning an arbitrary role.

 https://cve.radiocsirt.org/vuln/ghsa-5f23-fjp4-22q7 GHSA-5f23-fjp4-22q7 2026-10-03T00:16:05.404883+00:00

The create method in app/controllers/users_controller.rb in Foreman before 1.2.0-RC2 allows remote authenticated users with permissions to create or edit other users to gain privileges by (1) changing the admin flag or (2) assigning an arbitrary role.

 https://cve.radiocsirt.org/vuln/gsd-2013-2113 gsd-2013-2113 2026-10-03T00:16:05.404900+00:00 gsd-2013-2113 https://cve.radiocsirt.org/vuln/rhsa-2013:0995 RHSA-2013:0995 — Red Hat Security Advisory: Foreman security and bug fix update 2026-10-03T00:16:05.404912+00:00

Foreman: app/controllers/users_controller.rb arbitrary admin user creation due to mass assignment Foreman: app/controllers/bookmarks_controller.rb remote code execution