8.2

CVE-2026-12540

Foreman: command injection in foreman-rake errors:fetch_log via request_id parameter

A flaw was found in Foreman. A command injection vulnerability exists in the foreman-rake errors:fetch_log task. The request_id parameter is passed to an underlying system command (typically grep) without adequate shell neutralization. While the task is intended to fetch specific log entries, an attacker with sudo permissions to execute this rake task can inject shell metacharacters (such as ;, ", or |) to break out of the intended command and execute arbitrary code.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerRed Hat
≫
Produkt Red Hat Satellite 6.16 for RHEL 8
Default Statusaffected
Version 0:3.12.0.23-1.el8sat
Version < *
Status unaffected
HerstellerRed Hat
≫
Produkt Red Hat Satellite 6.16 for RHEL 9
Default Statusaffected
Version 0:3.12.0.23-1.el9sat
Version < *
Status unaffected
HerstellerRed Hat
≫
Produkt Red Hat Satellite 6.17 for RHEL 9
Default Statusaffected
Version 0:3.14.0.22-1.el9sat
Version < *
Status unaffected
HerstellerRed Hat
≫
Produkt Red Hat Satellite 6.18 for RHEL 9
Default Statusaffected
Version 0:3.16.0.25-1.el9sat
Version < *
Status unaffected
HerstellerRed Hat
≫
Produkt Red Hat Satellite 6.19 for RHEL 9
Default Statusaffected
Version 0:3.18.0.14-1.el9sat
Version < *
Status unaffected
HerstellerRed Hat
≫
Produkt Red Hat Satellite 6
Default Statusaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.31% 0.696
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
RedHat 8.2 1.5 6
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

https://access.redhat.com/errata/RHSA-2026:74503
https://access.redhat.com/security/cve/CVE-2026-12540
https://bugzilla.redhat.com/show_bug.cgi?id=2489969
https://access.redhat.com/errata/RHSA-2026:74504
https://access.redhat.com/errata/RHSA-2026:74506
https://access.redhat.com/errata/RHSA-2026:74505
http://www.openwall.com/lists/oss-security/2026/10/07/9