一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年10月2日

CVE-2026-96659 [CRITICAL] – A flaw was found in Foreman. This vulnerability allows an authenticated user with low-leve

未分类
📑 文章目录

A flaw was found in Foreman. This vulnerability allows an authenticated user with low-level Viewer permissions to cause unauthorized information disclosure by submitting requests to template preview endpoints. By exploiting this issue, the user can access sensitive data, such as host root passwords. Furthermore, under insecure system configurations where Safemode protections are disabled, the flaw may allow the user to execute arbitrary commands as the Foreman system account.