The Foreman
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Foreman | 2 | – | Feb 27, 2026 |
Exploited and recent CVEs
- CVE-2025-9572 Foreman: satellite: graphql api permission bypass leads to information disclosure 0.4%
- CVE-2025-10622 Foreman: os command injection via ct_location and fcct_location parameters 0.7%