Is CVE-2026-5136 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-5136 being exploited in the wild.

How severe is CVE-2026-5136?

High severity, with a CVSS score of 8.8, published 1 July 2026.

Is there a fix for CVE-2026-5136?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-5136 attacked?

It is attacked over the network, in a network appliance.

Am I affected by CVE-2026-5136?

Check whether you run Foreman at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-5136: Foreman privilege escalation in Usergroup model

CVE-2026-5136 · Severity: high · CVSS 8.8 · Published 2026-07-01

A security flaw in Foreman, a tool used for managing physical and virtual servers, allows users with limited management rights to grant themselves full administrative control. By exploiting a weakness in how the system handles user groups, an attacker can assign high-level permissions to themselves that they should not have access to. This could result in a complete takeover of the server management infrastructure, potentially leading to unauthorized data access or service disruption across the entire network.

Technologies: Foreman. Vendors: Foreman.

Quick answers

Is CVE-2026-5136 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-5136 being exploited in the wild.
How severe is CVE-2026-5136?: High severity, with a CVSS score of 8.8, published 1 July 2026.
Which products and versions are affected?: Foreman unspecified.
Is there a fix for CVE-2026-5136?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-5136 attacked?: It is attacked over the network, in a network appliance.
Am I affected by CVE-2026-5136?: Check whether you run Foreman at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A privilege escalation vulnerability exists in Foreman due to improper validation in the Usergroup model. Unlike the User model, the Usergroup model fails to verify if the calling user has the authority to assign specific roles. An authenticated attacker with 'create_usergroups' or 'edit_usergroups' permissions can submit a crafted API request to attach arbitrary roles (including administrative ones) to a user group and then add themselves as a member. This bypasses standard escalation checks, granting the attacker full administrator-level access to the Foreman instance.

Affected products

Foreman Foreman unspecified
Red Hat Red Hat Satellite 6 6

Timeline

2026-03-30: disclosed: Initial report in Red Hat Bugzilla
2026-07-01: advisory: NVD publication date

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.