VDB

CVE-2026-12544

CVE-2026-12544 PUBLISHED CVSS 7.7 HIGH

Reported by redhat · Published October 1, 2026

A flaw was found in Foreman. The foreman-rake initialization logic in /usr/share/foreman/config/settings.rb contains a vulnerable code pattern where configuration data is processed through two distinct executable layers. This creates a multi-stage execution chain that allows for both Server-Side Template Injection (SSTI) and insecure deserialization. This vulnerability can lead to remote code execution, total infrastructure compromise and supply chain risk.

Risk Scores

CVSS 3.1
7.7
CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H

Affected Products

VendorProductVersions
Red HatRed Hat Satellite 6.16 for RHEL 80:3.12.0.23-1.el8sat
Red HatRed Hat Satellite 6.16 for RHEL 90:3.12.0.23-1.el9sat
Red HatRed Hat Satellite 6.17 for RHEL 90:3.14.0.22-1.el9sat
Red HatRed Hat Satellite 6.18 for RHEL 90:3.16.0.25-1.el9sat
Red HatRed Hat Satellite 6.19 for RHEL 90:3.18.0.14-1.el9sat
Red HatRed Hat Satellite 6
Red HatRed Hat Satellite 6
Red HatRed Hat Satellite 6.16 for RHEL 80:3.12.0.23-1.el8sat, 0:3.12.0.23-1.el8sat, 0:3.12.0.23-1.el8sat
Red HatRed Hat Satellite 6.16 for RHEL 90:3.12.0.23-1.el9sat, 0:3.12.0.23-1.el9sat, 0:3.12.0.23-1.el9sat
Red HatRed Hat Satellite 6.19 for RHEL 90:3.18.0.14-1.el9sat, 0:3.18.0.14-1.el9sat, 0:3.18.0.14-1.el9sat
Red HatRed Hat Satellite 6.18 for RHEL 90:3.16.0.25-1.el9sat, 0:3.16.0.25-1.el9sat, 0:3.16.0.25-1.el9sat
Red HatRed Hat Satellite 6.17 for RHEL 90:3.14.0.22-1.el9sat, 0:3.14.0.22-1.el9sat

Timeline

  • Oct 1, 2026 Coalition ESS Score
  • Oct 1, 2026 CVE Published
  • Oct 1, 2026 Distribution Patch
  • Oct 1, 2026 Security Advisory
  • Oct 2, 2026 EPSS Score
  • Oct 3, 2026 EPSS Score
  • Oct 4, 2026 Distribution Patch
  • Oct 4, 2026 Security Advisory
  • Oct 4, 2026 Distribution Patch
  • Oct 4, 2026 Security Advisory
  • Oct 4, 2026 Distribution Patch
  • Oct 4, 2026 Security Advisory

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›