7.7Alta
CVE-2026-12544Foreman: ssti and insecure deserialization in foreman-rake configuration
Descripción
A flaw was found in Foreman. The foreman-rake initialization logic in /usr/share/foreman/config/settings.rb contains a vulnerable code pattern where configuration data is processed through two distinct executable layers. This creates a multi-stage execution chain that allows for both Server-Side Template Injection (SSTI) and insecure deserialization. This vulnerability can lead to remote code execution, total infrastructure compromise and supply chain risk.
Debilidad (CWE):
CWE-502
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
| Fabricante | Producto | Versiones | |
|---|---|---|---|
| Red Hat | Red Hat Satellite 6 | all versions | |
| Red Hat | Red Hat Satellite 6.16 for RHEL 8 | all versions | |
| Red Hat | Red Hat Satellite 6.16 for RHEL 9 | all versions | |
| Red Hat | Red Hat Satellite 6.17 for RHEL 9 | all versions | |
| Red Hat | Red Hat Satellite 6.18 for RHEL 9 | all versions | |
| Red Hat | Red Hat Satellite 6.19 for RHEL 9 | all versions | |
| redhat | satellite | 6.0 | |
| satellite | 6.16 | — | |
| satellite | 6.17 | — | |
| satellite | 6.18 | — | |
| satellite | 6.19 | — | |
| satellite capsule | 6.16 | — | |
| satellite capsule | 6.17 | — | |
| satellite capsule | 6.18 | — | |
| satellite capsule | 6.19 | — | |
| satellite utils | 6.16 | — | |
| satellite utils | 6.17 | — | |
| satellite utils | 6.18 | — | |
| satellite utils | 6.19 | — | |
| theforeman | foreman | — |
Referencias y parches
- RHSA-2026:74503 vendor-advisoryVendor Advisory
- RHSA-2026:74504 vendor-advisoryVendor Advisory
- RHSA-2026:74505 vendor-advisoryVendor Advisory
- RHSA-2026:74506 vendor-advisoryVendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-12544 vdb-entryVendor Advisory
- RHBZ#2489992 issue-trackingIssue TrackingVendor Advisory
- http://www.openwall.com/lists/oss-security/2026/10/07/6 Third Party Advisory
Coincidencias CPE (NVD) (6)
cpe:2.3:a:redhat:satellite:6.0:*:*:*:*:*:*:*cpe:2.3:a:redhat:satellite:*:*:*:*:*:*:*:*≥ 6.16 < 6.16.4cpe:2.3:a:redhat:satellite:*:*:*:*:*:*:*:*≥ 6.17 < 6.17.12cpe:2.3:a:redhat:satellite:*:*:*:*:*:*:*:*≥ 6.19 < 6.19.5cpe:2.3:a:theforeman:foreman:-:*:*:*:*:*:*:*cpe:2.3:a:redhat:satellite:*:*:*:*:*:*:*:*≥ 6.18 < 6.18.10