CVE-2026-86322 | Red Hat Satellite Personal Access Token Api::V2::PersonalAccessTokensController.rb UserAware#find_user user_id improper authorization

A vulnerability described as very critical has been identified in Red Hat Satellite. This affects the function Foreman::Controller::UserAware#find_user of the file Api::V2::PersonalAccessTokensController.rb of the component Personal Access Token. Such manipulation of the argument user_id leads to improper authorization.

This vulnerability is uniquely identified as CVE-2026-86322. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More