https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T19:39:16.833435+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-131804 EUVD-2026-131804 2026-10-07T19:39:16.836451+00:00 EUVD-2026-131804 https://cve.radiocsirt.org/vuln/fkie_cve-2008-6954 fkie_cve-2008-6954 2026-10-07T19:39:16.836484+00:00

The web interface (CobblerWeb) in Cobbler before 1.2.9 allows remote authenticated users to execute arbitrary Python code in cobblerd by editing a Cheetah kickstart template to import arbitrary Python modules.

 https://cve.radiocsirt.org/vuln/ghsa-p8w2-f44p-fmcj GHSA-p8w2-f44p-fmcj — Cobbler Web Interface Kickstart Template Remote Privilege Escalation Vulnerability 2026-10-07T19:39:16.836514+00:00

Affected: PyPI: cobbler

The web interface (CobblerWeb) in Cobbler before 1.2.9 allows remote authenticated users to execute arbitrary Python code with the root privileges in cobblerd by editing a Cheetah kickstart template to import arbitrary Python modules.

 https://cve.radiocsirt.org/vuln/gsd-2008-6954 gsd-2008-6954 2026-10-07T19:39:16.836538+00:00 gsd-2008-6954 https://cve.radiocsirt.org/vuln/pysec-2026-795 PYSEC-2026-795 — Cobbler Web Interface Kickstart Template Remote Privilege Escalation Vulnerability 2026-10-07T19:39:16.836550+00:00

Affected: PyPI: cobbler

The web interface (CobblerWeb) in Cobbler before 1.2.9 allows remote authenticated users to execute arbitrary Python code with the root privileges in cobblerd by editing a Cheetah kickstart template to import arbitrary Python modules.