vciy

CVE-2026-96659 · Brief

CVEs like CVE-2026-96659

The records whose text reads closest to CVE-2026-96659, in the order Forge ranked them. The number on each row is Forge's similarity score. The reason under each row uses held facts only.

  1. Foreman before 1.11.4 and 1.12.x before 1.12.1 does not properly restrict access to preview provisioning templates…

    Close in meaning. The records share no weakness class, product family or exploited-list entry we hold.

  2. Foreman 1.4.0 before 1.5.0 does not properly restrict access to provisioning template previews, which allows remote…

    Close in meaning. The records share no weakness class, product family or exploited-list entry we hold.

  3. rubygem-hammer_cli_foreman: File /etc/hammer/cli.modules.d/foreman.yml world readable

    Close in meaning. The records share no weakness class, product family or exploited-list entry we hold.

  4. Permission control vulnerability in the file preview module.

    Close in meaning. The records share no weakness class, product family or exploited-list entry we hold.

  5. ownCloud Server before 6.0.1 does not properly check permissions, which allows remote authenticated users to access…

    Close in meaning. The records share no weakness class, product family or exploited-list entry we hold.

  6. Kafo before 0.3.17 and 0.4.x before 0.5.2, as used by Foreman, uses world-readable permissions for default_values.yaml…

    Close in meaning. The records share no weakness class, product family or exploited-list entry we hold.

  7. Foreman before 1.8.4 and 1.9.x before 1.9.1 do not properly apply view_hosts permissions, which allows (1) remote…

    Close in meaning. The records share no weakness class, product family or exploited-list entry we hold.

  8. Foreman before 1.11.4 and 1.12.x before 1.12.1 allow remote authenticated users with the view_hosts permission…

    Close in meaning. The records share no weakness class, product family or exploited-list entry we hold.

  9. Information exposure of template content due to missing check of permissions

    Close in meaning. The records share no weakness class, product family or exploited-list entry we hold.

  10. Foreman before 1.1 allows remote authenticated users to gain privileges via a (1) XMLHttpRequest or (2) AJAX request.

    Close in meaning. The records share no weakness class, product family or exploited-list entry we hold.

computed Similarity is computed, not recorded. Model Forge pro. Drawn from 396,235 records. Fetched 2026-10-31.