CVE-2026-107443
HIGH
NVD
CVSS Score
7.7
Severity
HIGH
Published
Nov 12, 2026
Vendor
unknown
Description
A flaw was found in Foreman. An authenticated user with view_hosts privileges can retrieve rendered provisioning template content for a host via the hosts template API endpoint, disclosing sensitive data such as the host root password. This is an incomplete fix of CVE-2026-96659, which hardened the web UI preview path but left the API host-template render path authorized for Viewer-level users.