CVE-2026-13316

Name of the Vulnerable Software and Affected Versions Foreman (affected versions not specified)

Description A flaw in the http proxies controller and http proxy files allows attackers to perform a Server-Side Request Forgery (SSRF) attack. SSRF is a technique where an attacker induces a server-side application to make requests to an unintended location. This issue can be exploited by modifying HTTP parameters to steal cloud metadata service information within AWS, GCP, or Azure environments.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.