Theforeman Foreman vulnerabilities
86 published vulnerabilities in Theforeman Foreman. The most were published in 2026 (16), and 16 so far in 2026.
Theforeman Foreman vulnerabilities by year
2012
2013
2014
2015
2016
2017
2018
2019
2020
2021
2022
2023
2024
2025
2026
Most exploited Theforeman Foreman vulnerabilities
- CVE-2018-14643 smart_proxy_dynflow gem authentication bypass in Foreman remote execution feature
- CVE-2026-96659 Foreman: excessive permissions for viewer role on preview
- CVE-2023-0118 Foreman: arbitrary code execution through templates
- CVE-2026-96658 Foreman: foreman: arbitrary code execution via safemode sandbox bypass
- CVE-2026-5136 Foreman: foreman: privilege escalation to administrator-level access via usergroup role assignment manipulation
- CVE-2021-3590 Information disclosure in foreman
- CVE-2018-1097 Information disclosure in foreman
- CVE-2017-7505 Missing authorization in foreman
- CVE-2016-4475 Missing authorization in n/a
- CVE-2016-3728 Code injection in n/a
- CVE-2026-12540 Foreman: command injection in foreman-rake errors:fetch_log via request_id parameter
- CVE-2026-12541 Foreman: command injection in foreman-rake database tasks
Find these in your own software.
Upload an SBOM and sbomify checks it against every vulnerability here, every day.