HIGH🇵🇱 Wersja polska

CVE-2026-5136

CVSS 8.8v3.1pub. 2026-07-01upd. 2026-07-09

A flaw was found in Foreman. The Usergroup model in Foreman does not properly validate role assignments against the calling user's permissions. This allows an authenticated user with usergroup management permissions to attach arbitrary roles, including administrative roles, to a user group and then add themselves as a member. Successful exploitation of this vulnerability leads to full privilege escalation, granting the attacker administrator-level access.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

  • Red Hat Enterprise Linux

    OS
    Redhat
    8.09.0

  • Red Hat Satellite

    APP
    Redhat
    6.18 – 6.18.7 (excl.)6.19 – 6.19.2 (excl.)6.16 – 6.16.10 (excl.)6.17 – 6.17.9 (excl.)

  • Theforeman Foreman

    APP
    Theforeman
    < 3.18.23.19.0 – 3.19.1 (excl.)
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
LPE
CWE
References

Related vulnerabilities

CVE-2025-32463CRITICAL9.3⚠ KEVPL ✓same product

Sudo: eskalacja uprawnień do root poprzez opcję --chroot (CVE-2025-32463)

CVE-2021-40438CRITICAL9.0⚠ KEVPL ✓same product

SSRF w mod_proxy Apache HTTP Server — przekierowanie żądań przez atakującego

CVE-2018-14667CRITICAL9.8⚠ KEVPL ✓same product

RCE przez EL injection w RichFaces Framework 3.X — brak uwierzytelnienia

CVE-2016-3427CRITICAL9.8⚠ KEVPL ✓same product

Krytyczna podatność RCE w Oracle Java SE i JRockit — komponent JMX

CVE-2015-2590CRITICAL9.8⚠ KEVPL ✓same product

Krytyczna podatność RCE w Oracle Java SE — komponent Libraries