CVE-2026-9073

MEDIUM 6.2

Published 2026-06-23 · Last modified 2026-07-15

A flaw was found in foreman-mcp-server. This component utilizes two distinct logging mechanisms that can expose sensitive session and authentication data. One mechanism logs session identifiers, which are treated as authentication credentials, at an informational level. The other, when debug logging is enabled, incompletely sanitizes HTTP request headers, leading to the cleartext logging of sensitive information such as authorization tokens and API keys. This vulnerability can result in a confidentiality breach, as sensitive authentication data is persisted in plain text within container logs, increasing the risk if logs are forwarded to a centralized platform.

NO EXPLOITATION SIGNALS

No known exploitation, public exploit, or elevated probability at this time. Track for changes.

Exploitation likelihood

0.2%chance of exploitation in 30 days · 5th percentile

○ In CISA KEV ○ Public exploit / PoC

Impact if exploited

6.2CVSS 3.1 · MEDIUM

ConfidentialityHigh
IntegrityNone
AvailabilityNone

What an attacker needs

⚠Access: Requires local access to the host
✓Privileges: No account or privileges required
✓User interaction: No user interaction needed
✓Complexity: No special conditions — reliably repeatable

✓ lowers the bar for an attacker · ⚠ raises it

Proof of concept & exploit code

github-search Search GitHub for public PoC repos

Test against your own equipment

curl -s https://vulnpedia.com/cve/CVE-2026-9073/poc.jsonMachine-readable PoC index for this CVE (for automation).

Listed for defensive triage, patch verification, and authorized testing on systems you own. Machine-readable: /cve/CVE-2026-9073/poc.json

Affected

Vendors Red Hat Redhat Theforeman

Products Red Hat Satellite 6.18 Red Hat Satellite 6.19 Satellite Foreman

Weakness (CWE)

CWE-532: Insertion of Sensitive Information into Log File

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Known Affected Software Configurations

Vendor	Product	Version range
Redhat	Satellite	6.19
Theforeman	Foreman	*

All CVSS metrics

MEDIUM 6.2 v3.1 · CNA Primary
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
MEDIUM 6.2 v3.1 · NVD Secondary
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

References

Advisories

https://access.redhat.com/errata/RHSA-2026:28405 vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:28438 vendor-advisoryx_refsource_REDHATVendor Advisory
https://access.redhat.com/security/cve/CVE-2026-9073 vdb-entryx_refsource_REDHATVendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2480151 issue-trackingx_refsource_REDHATVendor Advisory

Sources: NVD · CVE.org · EPSS