CVE-2026-1961

Forman: foreman: remote code execution via command injection in websocket proxy

8.0 HighPublic exploit

A flaw was found in Foreman. A remote attacker could exploit a command injection vulnerability in Foreman's WebSocket proxy implementation. This vulnerability arises from the system's use of unsanitized hostname values from compute resource providers when constructing shell commands. By operating a malicious compute resource server, an attacker could achieve remote code execution on the Foreman server when a user accesses VM VNC console functionality. This could lead to the compromise of sensitive credentials and the entire managed infrastructure.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: Low
User interaction: Required

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

1.92%Up 1.8 points since Mar 27, 2026

What each source reports

CVE List Score used 8.0

Forman: foreman: remote code execution via command injection in websocket proxy

Record: CVE-2026-1961
CVSS 3.1: 8.0 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Weakness: CWE-78, CWE-78
Updated: 2026-11-03

EUVDEUVD-2026-16167 8.0

Record: EUVD-2026-16167
CVSS 3.1: 8.0 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-03

GitHub AdvisoriesGHSA-fh2w-2c26-vpg5 8.0

A flaw was found in Foreman. A remote attacker could exploit a command injection vulnerability in...

Record: GHSA-fh2w-2c26-vpg5
CVSS 3.1: 8.0 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Weakness: CWE-78
Updated: 2026-11-02

NVD 8.0

Record: CVE-2026-1961
CVSS 3.1: 8.0 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness: CWE-78
Updated: 2026-11-02

OSV 8.0

Forman: foreman: remote code execution via command injection in websocket proxy

Record: CVE-2026-1961
CVSS 3.1: 8.0 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Weakness: CWE-78
Updated: 2026-11-04

OSVRHSA-2026:5968 8.3

Red Hat Security Advisory: Satellite 6.18.4 Async Update

Record: RHSA-2026:5968
CVSS 3.1: 8.3 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
Updated: 2026-11-02

OSVRHSA-2026:5970 8.5

Red Hat Security Advisory: Satellite 6.17.7 Async Update

Record: RHSA-2026:5970
CVSS 3.1: 8.5 HighCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:5971 8.5

Red Hat Security Advisory: Satellite 6.16.7 Async Update

Record: RHSA-2026:5971
CVSS 3.1: 8.5 HighCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`yggdrasil-worker-forwarder` Red Hat:satellite:6.18::el9 From an advisory covering 7 CVEs	before 0:0.0.3-4.el9sat	0:0.0.3-4.el9sat
`rubygem-rubyipmi` Red Hat:satellite_capsule:6.18::el9 From an advisory covering 7 CVEs	before 0:0.13.0-1.el9sat	0:0.13.0-1.el9sat
`rubygem-rubyipmi` Red Hat:satellite:6.18::el9 From an advisory covering 7 CVEs	before 0:0.13.0-1.el9sat	0:0.13.0-1.el9sat
`rubygem-foreman_kubevirt` Red Hat:satellite:6.18::el9 From an advisory covering 7 CVEs	before 0:0.4.3-1.el9sat	0:0.4.3-1.el9sat
`foreman` Red Hat:satellite_capsule:6.18::el9 From an advisory covering 7 CVEs	before 0:3.16.0.12-1.el9sat	0:3.16.0.12-1.el9sat
`foreman-debug` Red Hat:satellite_capsule:6.18::el9 From an advisory covering 7 CVEs	before 0:3.16.0.12-1.el9sat	0:3.16.0.12-1.el9sat
`foreman-pcp` Red Hat:satellite_capsule:6.18::el9 From an advisory covering 7 CVEs	before 0:3.16.0.12-1.el9sat	0:3.16.0.12-1.el9sat
`foreman` Red Hat:satellite_utils:6.18::el9 From an advisory covering 7 CVEs	before 0:3.16.0.12-1.el9sat	0:3.16.0.12-1.el9sat
`foreman-cli` Red Hat:satellite_utils:6.18::el9 From an advisory covering 7 CVEs	before 0:3.16.0.12-1.el9sat	0:3.16.0.12-1.el9sat
`foreman` Red Hat:satellite:6.18::el9 From an advisory covering 7 CVEs	before 0:3.16.0.12-1.el9sat	0:3.16.0.12-1.el9sat

Show 164 moreShow less

Affected packages
Package	Affected	Fixed
`foreman-cli` Red Hat:satellite:6.18::el9 From an advisory covering 7 CVEs	before 0:3.16.0.12-1.el9sat	0:3.16.0.12-1.el9sat
`foreman-debug` Red Hat:satellite:6.18::el9 From an advisory covering 7 CVEs	before 0:3.16.0.12-1.el9sat	0:3.16.0.12-1.el9sat
`foreman-dynflow-sidekiq` Red Hat:satellite:6.18::el9 From an advisory covering 7 CVEs	before 0:3.16.0.12-1.el9sat	0:3.16.0.12-1.el9sat
`foreman-ec2` Red Hat:satellite:6.18::el9 From an advisory covering 7 CVEs	before 0:3.16.0.12-1.el9sat	0:3.16.0.12-1.el9sat
`foreman-journald` Red Hat:satellite:6.18::el9 From an advisory covering 7 CVEs	before 0:3.16.0.12-1.el9sat	0:3.16.0.12-1.el9sat
`foreman-libvirt` Red Hat:satellite:6.18::el9 From an advisory covering 7 CVEs	before 0:3.16.0.12-1.el9sat	0:3.16.0.12-1.el9sat
`foreman-openstack` Red Hat:satellite:6.18::el9 From an advisory covering 7 CVEs	before 0:3.16.0.12-1.el9sat	0:3.16.0.12-1.el9sat
`foreman-pcp` Red Hat:satellite:6.18::el9 From an advisory covering 7 CVEs	before 0:3.16.0.12-1.el9sat	0:3.16.0.12-1.el9sat
`foreman-postgresql` Red Hat:satellite:6.18::el9 From an advisory covering 7 CVEs	before 0:3.16.0.12-1.el9sat	0:3.16.0.12-1.el9sat
`foreman-redis` Red Hat:satellite:6.18::el9 From an advisory covering 7 CVEs	before 0:3.16.0.12-1.el9sat	0:3.16.0.12-1.el9sat
`foreman-service` Red Hat:satellite:6.18::el9 From an advisory covering 7 CVEs	before 0:3.16.0.12-1.el9sat	0:3.16.0.12-1.el9sat
`foreman-telemetry` Red Hat:satellite:6.18::el9 From an advisory covering 7 CVEs	before 0:3.16.0.12-1.el9sat	0:3.16.0.12-1.el9sat
`foreman-vmware` Red Hat:satellite:6.18::el9 From an advisory covering 7 CVEs	before 0:3.16.0.12-1.el9sat	0:3.16.0.12-1.el9sat
`rubygem-katello` Red Hat:satellite:6.18::el9 From an advisory covering 7 CVEs	before 0:4.18.0.9-1.el9sat	0:4.18.0.9-1.el9sat
`foreman` Red Hat:satellite_capsule:6.17::el9 From an advisory covering 12 CVEs	before 0:3.14.0.14-1.el9sat	0:3.14.0.14-1.el9sat
`foreman-debug` Red Hat:satellite_capsule:6.17::el9 From an advisory covering 12 CVEs	before 0:3.14.0.14-1.el9sat	0:3.14.0.14-1.el9sat
`foreman-pcp` Red Hat:satellite_capsule:6.17::el9 From an advisory covering 12 CVEs	before 0:3.14.0.14-1.el9sat	0:3.14.0.14-1.el9sat
`libcomps` Red Hat:satellite_capsule:6.17::el9 From an advisory covering 12 CVEs	before 0:0.1.23-0.3.el9pc	0:0.1.23-0.3.el9pc
`libcomps-debuginfo` Red Hat:satellite_capsule:6.17::el9 From an advisory covering 12 CVEs	before 0:0.1.23-0.3.el9pc	0:0.1.23-0.3.el9pc
`libcomps-debugsource` Red Hat:satellite_capsule:6.17::el9 From an advisory covering 12 CVEs	before 0:0.1.23-0.3.el9pc	0:0.1.23-0.3.el9pc
`python-brotli` Red Hat:satellite_capsule:6.17::el9 From an advisory covering 12 CVEs	before 0:1.2.0-0.1.el9pc	0:1.2.0-0.1.el9pc
`python-brotli-debugsource` Red Hat:satellite_capsule:6.17::el9 From an advisory covering 12 CVEs	before 0:1.2.0-0.1.el9pc	0:1.2.0-0.1.el9pc
`python-django` Red Hat:satellite_capsule:6.17::el9 From an advisory covering 12 CVEs	before 0:4.2.28-0.1.el9pc	0:4.2.28-0.1.el9pc
`python-pulp-container` Red Hat:satellite_capsule:6.17::el9 From an advisory covering 12 CVEs	before 0:2.22.3-1.el9pc	0:2.22.3-1.el9pc
`python-pulp-rpm` Red Hat:satellite_capsule:6.17::el9 From an advisory covering 12 CVEs	before 0:3.27.10-2.el9pc	0:3.27.10-2.el9pc
`python3-libcomps` Red Hat:satellite_capsule:6.17::el9 From an advisory covering 12 CVEs	before 0:0.1.23-0.3.el9pc	0:0.1.23-0.3.el9pc
`python3-libcomps-debuginfo` Red Hat:satellite_capsule:6.17::el9 From an advisory covering 12 CVEs	before 0:0.1.23-0.3.el9pc	0:0.1.23-0.3.el9pc
`python3.11-brotli` Red Hat:satellite_capsule:6.17::el9 From an advisory covering 12 CVEs	before 0:1.2.0-0.1.el9pc	0:1.2.0-0.1.el9pc
`python3.11-brotli-debuginfo` Red Hat:satellite_capsule:6.17::el9 From an advisory covering 12 CVEs	before 0:1.2.0-0.1.el9pc	0:1.2.0-0.1.el9pc
`python3.11-django` Red Hat:satellite_capsule:6.17::el9 From an advisory covering 12 CVEs	before 0:4.2.28-0.1.el9pc	0:4.2.28-0.1.el9pc
`python3.11-libcomps` Red Hat:satellite_capsule:6.17::el9 From an advisory covering 12 CVEs	before 0:0.1.23-0.3.el9pc	0:0.1.23-0.3.el9pc
`python3.11-libcomps-debuginfo` Red Hat:satellite_capsule:6.17::el9 From an advisory covering 12 CVEs	before 0:0.1.23-0.3.el9pc	0:0.1.23-0.3.el9pc
`python3.11-pulp-container` Red Hat:satellite_capsule:6.17::el9 From an advisory covering 12 CVEs	before 0:2.22.3-1.el9pc	0:2.22.3-1.el9pc
`python3.11-pulp-rpm` Red Hat:satellite_capsule:6.17::el9 From an advisory covering 12 CVEs	before 0:3.27.10-2.el9pc	0:3.27.10-2.el9pc
`rubygem-rubyipmi` Red Hat:satellite_capsule:6.17::el9 From an advisory covering 12 CVEs	before 0:0.13.0-1.el9sat	0:0.13.0-1.el9sat
`satellite` Red Hat:satellite_capsule:6.17::el9 From an advisory covering 12 CVEs	before 0:6.17.7-1.el9sat	0:6.17.7-1.el9sat
`satellite-capsule` Red Hat:satellite_capsule:6.17::el9 From an advisory covering 12 CVEs	before 0:6.17.7-1.el9sat	0:6.17.7-1.el9sat
`satellite-common` Red Hat:satellite_capsule:6.17::el9 From an advisory covering 12 CVEs	before 0:6.17.7-1.el9sat	0:6.17.7-1.el9sat
`satellite-obsolete-packages` Red Hat:satellite_capsule:6.17::el9 From an advisory covering 12 CVEs	before 0:6.17.7-1.el9sat	0:6.17.7-1.el9sat
`libcomps` Red Hat:satellite_maintenance:6.17::el9 From an advisory covering 12 CVEs	before 0:0.1.23-0.3.el9pc	0:0.1.23-0.3.el9pc
`libcomps-debuginfo` Red Hat:satellite_maintenance:6.17::el9 From an advisory covering 12 CVEs	before 0:0.1.23-0.3.el9pc	0:0.1.23-0.3.el9pc
`libcomps-debugsource` Red Hat:satellite_maintenance:6.17::el9 From an advisory covering 12 CVEs	before 0:0.1.23-0.3.el9pc	0:0.1.23-0.3.el9pc
`python3-libcomps` Red Hat:satellite_maintenance:6.17::el9 From an advisory covering 12 CVEs	before 0:0.1.23-0.3.el9pc	0:0.1.23-0.3.el9pc
`python3-libcomps-debuginfo` Red Hat:satellite_maintenance:6.17::el9 From an advisory covering 12 CVEs	before 0:0.1.23-0.3.el9pc	0:0.1.23-0.3.el9pc
`python3.11-libcomps-debuginfo` Red Hat:satellite_maintenance:6.17::el9 From an advisory covering 12 CVEs	before 0:0.1.23-0.3.el9pc	0:0.1.23-0.3.el9pc
`foreman` Red Hat:satellite_utils:6.17::el9 From an advisory covering 12 CVEs	before 0:3.14.0.14-1.el9sat	0:3.14.0.14-1.el9sat
`foreman-cli` Red Hat:satellite_utils:6.17::el9 From an advisory covering 12 CVEs	before 0:3.14.0.14-1.el9sat	0:3.14.0.14-1.el9sat
`satellite` Red Hat:satellite_utils:6.17::el9 From an advisory covering 12 CVEs	before 0:6.17.7-1.el9sat	0:6.17.7-1.el9sat
`satellite-cli` Red Hat:satellite_utils:6.17::el9 From an advisory covering 12 CVEs	before 0:6.17.7-1.el9sat	0:6.17.7-1.el9sat
`foreman` Red Hat:satellite:6.17::el9 From an advisory covering 12 CVEs	before 0:3.14.0.14-1.el9sat	0:3.14.0.14-1.el9sat
`foreman-cli` Red Hat:satellite:6.17::el9 From an advisory covering 12 CVEs	before 0:3.14.0.14-1.el9sat	0:3.14.0.14-1.el9sat
`foreman-debug` Red Hat:satellite:6.17::el9 From an advisory covering 12 CVEs	before 0:3.14.0.14-1.el9sat	0:3.14.0.14-1.el9sat
`foreman-dynflow-sidekiq` Red Hat:satellite:6.17::el9 From an advisory covering 12 CVEs	before 0:3.14.0.14-1.el9sat	0:3.14.0.14-1.el9sat
`foreman-ec2` Red Hat:satellite:6.17::el9 From an advisory covering 12 CVEs	before 0:3.14.0.14-1.el9sat	0:3.14.0.14-1.el9sat
`foreman-journald` Red Hat:satellite:6.17::el9 From an advisory covering 12 CVEs	before 0:3.14.0.14-1.el9sat	0:3.14.0.14-1.el9sat
`foreman-libvirt` Red Hat:satellite:6.17::el9 From an advisory covering 12 CVEs	before 0:3.14.0.14-1.el9sat	0:3.14.0.14-1.el9sat
`foreman-openstack` Red Hat:satellite:6.17::el9 From an advisory covering 12 CVEs	before 0:3.14.0.14-1.el9sat	0:3.14.0.14-1.el9sat
`foreman-ovirt` Red Hat:satellite:6.17::el9 From an advisory covering 12 CVEs	before 0:3.14.0.14-1.el9sat	0:3.14.0.14-1.el9sat
`foreman-pcp` Red Hat:satellite:6.17::el9 From an advisory covering 12 CVEs	before 0:3.14.0.14-1.el9sat	0:3.14.0.14-1.el9sat
`foreman-postgresql` Red Hat:satellite:6.17::el9 From an advisory covering 12 CVEs	before 0:3.14.0.14-1.el9sat	0:3.14.0.14-1.el9sat
`foreman-redis` Red Hat:satellite:6.17::el9 From an advisory covering 12 CVEs	before 0:3.14.0.14-1.el9sat	0:3.14.0.14-1.el9sat
`foreman-service` Red Hat:satellite:6.17::el9 From an advisory covering 12 CVEs	before 0:3.14.0.14-1.el9sat	0:3.14.0.14-1.el9sat
`foreman-telemetry` Red Hat:satellite:6.17::el9 From an advisory covering 12 CVEs	before 0:3.14.0.14-1.el9sat	0:3.14.0.14-1.el9sat
`foreman-vmware` Red Hat:satellite:6.17::el9 From an advisory covering 12 CVEs	before 0:3.14.0.14-1.el9sat	0:3.14.0.14-1.el9sat
`libcomps` Red Hat:satellite:6.17::el9 From an advisory covering 12 CVEs	before 0:0.1.23-0.3.el9pc	0:0.1.23-0.3.el9pc
`libcomps-debuginfo` Red Hat:satellite:6.17::el9 From an advisory covering 12 CVEs	before 0:0.1.23-0.3.el9pc	0:0.1.23-0.3.el9pc
`libcomps-debugsource` Red Hat:satellite:6.17::el9 From an advisory covering 12 CVEs	before 0:0.1.23-0.3.el9pc	0:0.1.23-0.3.el9pc
`python-brotli` Red Hat:satellite:6.17::el9 From an advisory covering 12 CVEs	before 0:1.2.0-0.1.el9pc	0:1.2.0-0.1.el9pc
`python-brotli-debugsource` Red Hat:satellite:6.17::el9 From an advisory covering 12 CVEs	before 0:1.2.0-0.1.el9pc	0:1.2.0-0.1.el9pc
`python-django` Red Hat:satellite:6.17::el9 From an advisory covering 12 CVEs	before 0:4.2.28-0.1.el9pc	0:4.2.28-0.1.el9pc
`python-pulp-container` Red Hat:satellite:6.17::el9 From an advisory covering 12 CVEs	before 0:2.22.3-1.el9pc	0:2.22.3-1.el9pc
`python-pulp-rpm` Red Hat:satellite:6.17::el9 From an advisory covering 12 CVEs	before 0:3.27.10-2.el9pc	0:3.27.10-2.el9pc
`python3-libcomps` Red Hat:satellite:6.17::el9 From an advisory covering 12 CVEs	before 0:0.1.23-0.3.el9pc	0:0.1.23-0.3.el9pc
`python3-libcomps-debuginfo` Red Hat:satellite:6.17::el9 From an advisory covering 12 CVEs	before 0:0.1.23-0.3.el9pc	0:0.1.23-0.3.el9pc
`python3.11-brotli` Red Hat:satellite:6.17::el9 From an advisory covering 12 CVEs	before 0:1.2.0-0.1.el9pc	0:1.2.0-0.1.el9pc
`python3.11-brotli-debuginfo` Red Hat:satellite:6.17::el9 From an advisory covering 12 CVEs	before 0:1.2.0-0.1.el9pc	0:1.2.0-0.1.el9pc
`python3.11-django` Red Hat:satellite:6.17::el9 From an advisory covering 12 CVEs	before 0:4.2.28-0.1.el9pc	0:4.2.28-0.1.el9pc
`python3.11-libcomps` Red Hat:satellite:6.17::el9 From an advisory covering 12 CVEs	before 0:0.1.23-0.3.el9pc	0:0.1.23-0.3.el9pc
`python3.11-libcomps-debuginfo` Red Hat:satellite:6.17::el9 From an advisory covering 12 CVEs	before 0:0.1.23-0.3.el9pc	0:0.1.23-0.3.el9pc
`python3.11-pulp-container` Red Hat:satellite:6.17::el9 From an advisory covering 12 CVEs	before 0:2.22.3-1.el9pc	0:2.22.3-1.el9pc
`python3.11-pulp-rpm` Red Hat:satellite:6.17::el9 From an advisory covering 12 CVEs	before 0:3.27.10-2.el9pc	0:3.27.10-2.el9pc
`rubygem-fog-kubevirt` Red Hat:satellite:6.17::el9 From an advisory covering 12 CVEs	before 0:1.5.1-1.el9sat	0:1.5.1-1.el9sat
`rubygem-foreman_kubevirt` Red Hat:satellite:6.17::el9 From an advisory covering 12 CVEs	before 0:0.4.3-1.el9sat	0:0.4.3-1.el9sat
`rubygem-katello` Red Hat:satellite:6.17::el9 From an advisory covering 12 CVEs	before 0:4.16.0.14-1.el9sat	0:4.16.0.14-1.el9sat
`rubygem-rubyipmi` Red Hat:satellite:6.17::el9 From an advisory covering 12 CVEs	before 0:0.13.0-1.el9sat	0:0.13.0-1.el9sat
`satellite` Red Hat:satellite:6.17::el9 From an advisory covering 12 CVEs	before 0:6.17.7-1.el9sat	0:6.17.7-1.el9sat
`satellite-cli` Red Hat:satellite:6.17::el9 From an advisory covering 12 CVEs	before 0:6.17.7-1.el9sat	0:6.17.7-1.el9sat
`satellite-common` Red Hat:satellite:6.17::el9 From an advisory covering 12 CVEs	before 0:6.17.7-1.el9sat	0:6.17.7-1.el9sat
`satellite-obsolete-packages` Red Hat:satellite:6.17::el9 From an advisory covering 12 CVEs	before 0:6.17.7-1.el9sat	0:6.17.7-1.el9sat
`yggdrasil-worker-forwarder` Red Hat:satellite:6.17::el9 From an advisory covering 12 CVEs	before 0:0.0.3-4.el9sat	0:0.0.3-4.el9sat
`python-brotli` Red Hat:satellite_capsule:6.16::el8 From an advisory covering 11 CVEs	before 0:1.2.0-0.1.el8pc	0:1.2.0-0.1.el8pc
`python-brotli-debugsource` Red Hat:satellite_capsule:6.16::el8 From an advisory covering 11 CVEs	before 0:1.2.0-0.1.el8pc	0:1.2.0-0.1.el8pc
`python3.11-brotli` Red Hat:satellite_capsule:6.16::el8 From an advisory covering 11 CVEs	before 0:1.2.0-0.1.el8pc	0:1.2.0-0.1.el8pc
`python3.11-brotli-debuginfo` Red Hat:satellite_capsule:6.16::el8 From an advisory covering 11 CVEs	before 0:1.2.0-0.1.el8pc	0:1.2.0-0.1.el8pc
`python-brotli` Red Hat:satellite:6.16::el8 From an advisory covering 11 CVEs	before 0:1.2.0-0.1.el8pc	0:1.2.0-0.1.el8pc
`python-brotli-debugsource` Red Hat:satellite:6.16::el8 From an advisory covering 11 CVEs	before 0:1.2.0-0.1.el8pc	0:1.2.0-0.1.el8pc
`python3.11-brotli` Red Hat:satellite:6.16::el8 From an advisory covering 11 CVEs	before 0:1.2.0-0.1.el8pc	0:1.2.0-0.1.el8pc
`python3.11-brotli-debuginfo` Red Hat:satellite:6.16::el8 From an advisory covering 11 CVEs	before 0:1.2.0-0.1.el8pc	0:1.2.0-0.1.el8pc
`python-brotli` Red Hat:satellite_capsule:6.16::el9 From an advisory covering 11 CVEs	before 0:1.2.0-0.1.el9pc	0:1.2.0-0.1.el9pc
`python-brotli-debugsource` Red Hat:satellite_capsule:6.16::el9 From an advisory covering 11 CVEs	before 0:1.2.0-0.1.el9pc	0:1.2.0-0.1.el9pc
`python3.11-brotli` Red Hat:satellite_capsule:6.16::el9 From an advisory covering 11 CVEs	before 0:1.2.0-0.1.el9pc	0:1.2.0-0.1.el9pc
`python3.11-brotli-debuginfo` Red Hat:satellite_capsule:6.16::el9 From an advisory covering 11 CVEs	before 0:1.2.0-0.1.el9pc	0:1.2.0-0.1.el9pc
`python-brotli` Red Hat:satellite:6.16::el9 From an advisory covering 11 CVEs	before 0:1.2.0-0.1.el9pc	0:1.2.0-0.1.el9pc
`python-brotli-debugsource` Red Hat:satellite:6.16::el9 From an advisory covering 11 CVEs	before 0:1.2.0-0.1.el9pc	0:1.2.0-0.1.el9pc
`python3.11-brotli` Red Hat:satellite:6.16::el9 From an advisory covering 11 CVEs	before 0:1.2.0-0.1.el9pc	0:1.2.0-0.1.el9pc
`python3.11-brotli-debuginfo` Red Hat:satellite:6.16::el9 From an advisory covering 11 CVEs	before 0:1.2.0-0.1.el9pc	0:1.2.0-0.1.el9pc
`python-django` Red Hat:satellite_capsule:6.16::el8 From an advisory covering 11 CVEs	before 0:4.2.28-0.1.el8pc	0:4.2.28-0.1.el8pc
`python3.11-django` Red Hat:satellite_capsule:6.16::el8 From an advisory covering 11 CVEs	before 0:4.2.28-0.1.el8pc	0:4.2.28-0.1.el8pc
`python-django` Red Hat:satellite:6.16::el8 From an advisory covering 11 CVEs	before 0:4.2.28-0.1.el8pc	0:4.2.28-0.1.el8pc
`python3.11-django` Red Hat:satellite:6.16::el8 From an advisory covering 11 CVEs	before 0:4.2.28-0.1.el8pc	0:4.2.28-0.1.el8pc
`python-django` Red Hat:satellite_capsule:6.16::el9 From an advisory covering 11 CVEs	before 0:4.2.28-0.1.el9pc	0:4.2.28-0.1.el9pc
`python3.11-django` Red Hat:satellite_capsule:6.16::el9 From an advisory covering 11 CVEs	before 0:4.2.28-0.1.el9pc	0:4.2.28-0.1.el9pc
`python-django` Red Hat:satellite:6.16::el9 From an advisory covering 11 CVEs	before 0:4.2.28-0.1.el9pc	0:4.2.28-0.1.el9pc
`python3.11-django` Red Hat:satellite:6.16::el9 From an advisory covering 11 CVEs	before 0:4.2.28-0.1.el9pc	0:4.2.28-0.1.el9pc
`yggdrasil-worker-forwarder` Red Hat:satellite:6.16::el8 From an advisory covering 11 CVEs	before 0:0.0.3-4.el8sat	0:0.0.3-4.el8sat
`yggdrasil-worker-forwarder` Red Hat:satellite:6.16::el9 From an advisory covering 11 CVEs	before 0:0.0.3-4.el9sat	0:0.0.3-4.el9sat
`rubygem-rubyipmi` Red Hat:satellite_capsule:6.16::el8 From an advisory covering 11 CVEs	before 0:0.13.0-0.1.el8sat	0:0.13.0-0.1.el8sat
`rubygem-rubyipmi` Red Hat:satellite:6.16::el8 From an advisory covering 11 CVEs	before 0:0.13.0-0.1.el8sat	0:0.13.0-0.1.el8sat
`rubygem-rubyipmi` Red Hat:satellite_capsule:6.16::el9 From an advisory covering 11 CVEs	before 0:0.13.0-0.1.el9sat	0:0.13.0-0.1.el9sat
`rubygem-rubyipmi` Red Hat:satellite:6.16::el9 From an advisory covering 11 CVEs	before 0:0.13.0-0.1.el9sat	0:0.13.0-0.1.el9sat
`rubygem-fog-kubevirt` Red Hat:satellite:6.16::el8 From an advisory covering 11 CVEs	before 0:1.5.1-1.el8sat	0:1.5.1-1.el8sat
`rubygem-fog-kubevirt` Red Hat:satellite:6.16::el9 From an advisory covering 11 CVEs	before 0:1.5.1-1.el9sat	0:1.5.1-1.el9sat
`rubygem-foreman_kubevirt` Red Hat:satellite:6.16::el8 From an advisory covering 11 CVEs	before 0:0.2.0-2.el8sat	0:0.2.0-2.el8sat
`rubygem-foreman_kubevirt` Red Hat:satellite:6.16::el9 From an advisory covering 11 CVEs	before 0:0.2.0-2.el9sat	0:0.2.0-2.el9sat
`foreman` Red Hat:satellite_capsule:6.16::el8 From an advisory covering 11 CVEs	before 0:3.12.0.14-1.el8sat	0:3.12.0.14-1.el8sat
`foreman-debug` Red Hat:satellite_capsule:6.16::el8 From an advisory covering 11 CVEs	before 0:3.12.0.14-1.el8sat	0:3.12.0.14-1.el8sat
`foreman-pcp` Red Hat:satellite_capsule:6.16::el8 From an advisory covering 11 CVEs	before 0:3.12.0.14-1.el8sat	0:3.12.0.14-1.el8sat
`foreman` Red Hat:satellite_utils:6.16::el8 From an advisory covering 11 CVEs	before 0:3.12.0.14-1.el8sat	0:3.12.0.14-1.el8sat
`foreman-cli` Red Hat:satellite_utils:6.16::el8 From an advisory covering 11 CVEs	before 0:3.12.0.14-1.el8sat	0:3.12.0.14-1.el8sat
`foreman` Red Hat:satellite:6.16::el8 From an advisory covering 11 CVEs	before 0:3.12.0.14-1.el8sat	0:3.12.0.14-1.el8sat
`foreman-cli` Red Hat:satellite:6.16::el8 From an advisory covering 11 CVEs	before 0:3.12.0.14-1.el8sat	0:3.12.0.14-1.el8sat
`foreman-debug` Red Hat:satellite:6.16::el8 From an advisory covering 11 CVEs	before 0:3.12.0.14-1.el8sat	0:3.12.0.14-1.el8sat
`foreman-dynflow-sidekiq` Red Hat:satellite:6.16::el8 From an advisory covering 11 CVEs	before 0:3.12.0.14-1.el8sat	0:3.12.0.14-1.el8sat
`foreman-ec2` Red Hat:satellite:6.16::el8 From an advisory covering 11 CVEs	before 0:3.12.0.14-1.el8sat	0:3.12.0.14-1.el8sat
`foreman-journald` Red Hat:satellite:6.16::el8 From an advisory covering 11 CVEs	before 0:3.12.0.14-1.el8sat	0:3.12.0.14-1.el8sat
`foreman-libvirt` Red Hat:satellite:6.16::el8 From an advisory covering 11 CVEs	before 0:3.12.0.14-1.el8sat	0:3.12.0.14-1.el8sat
`foreman-openstack` Red Hat:satellite:6.16::el8 From an advisory covering 11 CVEs	before 0:3.12.0.14-1.el8sat	0:3.12.0.14-1.el8sat
`foreman-ovirt` Red Hat:satellite:6.16::el8 From an advisory covering 11 CVEs	before 0:3.12.0.14-1.el8sat	0:3.12.0.14-1.el8sat
`foreman-pcp` Red Hat:satellite:6.16::el8 From an advisory covering 11 CVEs	before 0:3.12.0.14-1.el8sat	0:3.12.0.14-1.el8sat
`foreman-postgresql` Red Hat:satellite:6.16::el8 From an advisory covering 11 CVEs	before 0:3.12.0.14-1.el8sat	0:3.12.0.14-1.el8sat
`foreman-redis` Red Hat:satellite:6.16::el8 From an advisory covering 11 CVEs	before 0:3.12.0.14-1.el8sat	0:3.12.0.14-1.el8sat
`foreman-service` Red Hat:satellite:6.16::el8 From an advisory covering 11 CVEs	before 0:3.12.0.14-1.el8sat	0:3.12.0.14-1.el8sat
`foreman-telemetry` Red Hat:satellite:6.16::el8 From an advisory covering 11 CVEs	before 0:3.12.0.14-1.el8sat	0:3.12.0.14-1.el8sat
`foreman-vmware` Red Hat:satellite:6.16::el8 From an advisory covering 11 CVEs	before 0:3.12.0.14-1.el8sat	0:3.12.0.14-1.el8sat
`foreman` Red Hat:satellite_capsule:6.16::el9 From an advisory covering 11 CVEs	before 0:3.12.0.14-1.el9sat	0:3.12.0.14-1.el9sat
`foreman-debug` Red Hat:satellite_capsule:6.16::el9 From an advisory covering 11 CVEs	before 0:3.12.0.14-1.el9sat	0:3.12.0.14-1.el9sat
`foreman-pcp` Red Hat:satellite_capsule:6.16::el9 From an advisory covering 11 CVEs	before 0:3.12.0.14-1.el9sat	0:3.12.0.14-1.el9sat
`foreman` Red Hat:satellite_utils:6.16::el9 From an advisory covering 11 CVEs	before 0:3.12.0.14-1.el9sat	0:3.12.0.14-1.el9sat
`foreman-cli` Red Hat:satellite_utils:6.16::el9 From an advisory covering 11 CVEs	before 0:3.12.0.14-1.el9sat	0:3.12.0.14-1.el9sat
`foreman` Red Hat:satellite:6.16::el9 From an advisory covering 11 CVEs	before 0:3.12.0.14-1.el9sat	0:3.12.0.14-1.el9sat
`foreman-cli` Red Hat:satellite:6.16::el9 From an advisory covering 11 CVEs	before 0:3.12.0.14-1.el9sat	0:3.12.0.14-1.el9sat
`foreman-debug` Red Hat:satellite:6.16::el9 From an advisory covering 11 CVEs	before 0:3.12.0.14-1.el9sat	0:3.12.0.14-1.el9sat
`foreman-dynflow-sidekiq` Red Hat:satellite:6.16::el9 From an advisory covering 11 CVEs	before 0:3.12.0.14-1.el9sat	0:3.12.0.14-1.el9sat
`foreman-ec2` Red Hat:satellite:6.16::el9 From an advisory covering 11 CVEs	before 0:3.12.0.14-1.el9sat	0:3.12.0.14-1.el9sat
`foreman-journald` Red Hat:satellite:6.16::el9 From an advisory covering 11 CVEs	before 0:3.12.0.14-1.el9sat	0:3.12.0.14-1.el9sat
`foreman-libvirt` Red Hat:satellite:6.16::el9 From an advisory covering 11 CVEs	before 0:3.12.0.14-1.el9sat	0:3.12.0.14-1.el9sat
`foreman-openstack` Red Hat:satellite:6.16::el9 From an advisory covering 11 CVEs	before 0:3.12.0.14-1.el9sat	0:3.12.0.14-1.el9sat
`foreman-ovirt` Red Hat:satellite:6.16::el9 From an advisory covering 11 CVEs	before 0:3.12.0.14-1.el9sat	0:3.12.0.14-1.el9sat
`foreman-pcp` Red Hat:satellite:6.16::el9 From an advisory covering 11 CVEs	before 0:3.12.0.14-1.el9sat	0:3.12.0.14-1.el9sat
`foreman-postgresql` Red Hat:satellite:6.16::el9 From an advisory covering 11 CVEs	before 0:3.12.0.14-1.el9sat	0:3.12.0.14-1.el9sat
`foreman-redis` Red Hat:satellite:6.16::el9 From an advisory covering 11 CVEs	before 0:3.12.0.14-1.el9sat	0:3.12.0.14-1.el9sat
`foreman-service` Red Hat:satellite:6.16::el9 From an advisory covering 11 CVEs	before 0:3.12.0.14-1.el9sat	0:3.12.0.14-1.el9sat
`foreman-telemetry` Red Hat:satellite:6.16::el9 From an advisory covering 11 CVEs	before 0:3.12.0.14-1.el9sat	0:3.12.0.14-1.el9sat
`foreman-vmware` Red Hat:satellite:6.16::el9 From an advisory covering 11 CVEs	before 0:3.12.0.14-1.el9sat	0:3.12.0.14-1.el9sat

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
PoC in GitHub	kalnux/CVE-2026-1961-foreman-poc	2026-09-17

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 4, 2026	facts	CVE List, EUVD, OSV
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-1961 is a high vulnerability (CVSS 8.0) in Theforeman Foreman, published March 26, 2026. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 1.92%, the 80th percentile. No source names a fixed version.

References

Show 101 moreShow less