https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 11:04:07 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-337525 EUVD-2026-337525 https://cve.radiocsirt.org/vuln/euvd-2026-337525 https://cve.radiocsirt.org/vuln/fkie_cve-2026-1961 <p>A flaw was found in Foreman. A remote attacker could exploit a command injection vulnerability in Foreman&#39;s WebSocket proxy implementation. This vulnerability arises from the system&#39;s use of unsanitized hostname values from compute resource providers when constructing shell commands. By operating a malicious compute resource server, an attacker could achieve remote code execution on the Foreman server when a user accesses VM VNC console functionality. This could lead to the compromise of sensitive credentials and the entire managed infrastructure.</p> <p>A flaw was found in Foreman. A remote attacker could exploit a command injection vulnerability in Foreman&#39;s WebSocket proxy implementation. This vulnerability arises from the system&#39;s use of unsanitized hostname values from compute resource providers when constructing shell commands. By operating a malicious compute resource server, an attacker could achieve remote code execution on the Foreman server when a user accesses VM VNC console functionality. This could lead to the compromise of sensitive credentials and the entire managed infrastructure.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-1961 https://cve.radiocsirt.org/vuln/ghsa-fh2w-2c26-vpg5 <p>A flaw was found in Foreman. A remote attacker could exploit a command injection vulnerability in Foreman&#39;s WebSocket proxy implementation. This vulnerability arises from the system&#39;s use of unsanitized hostname values from compute resource providers when constructing shell commands. By operating a malicious compute resource server, an attacker could achieve remote code execution on the Foreman server when a user accesses VM VNC console functionality. This could lead to the compromise of sensitive credentials and the entire managed infrastructure.</p> <p>A flaw was found in Foreman. A remote attacker could exploit a command injection vulnerability in Foreman&#39;s WebSocket proxy implementation. This vulnerability arises from the system&#39;s use of unsanitized hostname values from compute resource providers when constructing shell commands. By operating a malicious compute resource server, an attacker could achieve remote code execution on the Foreman server when a user accesses VM VNC console functionality. This could lead to the compromise of sensitive credentials and the entire managed infrastructure.</p> https://cve.radiocsirt.org/vuln/ghsa-fh2w-2c26-vpg5 https://cve.radiocsirt.org/vuln/rhsa-2026:5968 <p>golang: net/url: Memory exhaustion in query parameter parsing in net/url crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption rubyipmi: Red Hat Satellite: Remote Code Execution in rubyipmi via malicious BMC username foreman-kubevirt: foreman_kubevirt: Man-in-the-Middle due to insecure default SSL verification forman: Foreman: Remote Code Execution via command injection in WebSocket proxy rubygem-katello: Katello: Denial of Service and potential information disclosure via SQL injection</p> <p>golang: net/url: Memory exhaustion in query parameter parsing in net/url crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption rubyipmi: Red Hat Satellite: Remote Code Execution in rubyipmi via malicious BMC username foreman-kubevirt: foreman_kubevirt: Man-in-the-Middle due to insecure default SSL verification forman: Foreman: Remote Code Execution via command injection in WebSocket proxy rubygem-katello: Katello: Denial of Service and potential information disclosure via SQL injection</p> https://cve.radiocsirt.org/vuln/rhsa-2026:5968 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0912 <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Foreman ausnutzen, um beliebigen Programmcode auszuführen.</p> <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Foreman ausnutzen, um beliebigen Programmcode auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0912