The Foreman Foreman

• CVE-2025-9572 Medium 5.0 Foreman: satellite: graphql api permission bypass leads to information disclosure 0.4%
• CVE-2025-10622 High 8.0 Foreman: os command injection via ct_location and fcct_location parameters 0.7%