CVE-2026-1961

Highest-risk unexploited with PoCs

Exploit code exists, no confirmed in-the-wild activity, ranked by EPSS

Actively Exploited

Confirmed exploited in the wild, sorted by most recently updated

CVSS 8EPSS 1%

Published 2026-03-26Updated 2026-09-18

PoC

Vulnerability details

A flaw was found in Foreman. A remote attacker could exploit a command injection vulnerability in Foreman's WebSocket proxy implementation. This vulnerability arises from the system's use of unsanitized hostname values from compute resource providers when constructing shell commands. By operating a malicious compute resource server, an attacker could achieve remote code execution on the Foreman server when a user accesses VM VNC console functionality. This could lead to the compromise of sensitive credentials and the entire managed infrastructure.

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

CNAredhat

EPSS score history

Sources

2 links

PoC links are not available for guest users. Login to view them.

CVE Organization RedHat Vuln DB

Vulnerability dashboard

Highest-risk unexploited with PoCs

Actively Exploited

Recently Updated