https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T02:26:46.047176+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-119241 EUVD-2026-119241 2026-10-03T02:26:46.051780+00:00 EUVD-2026-119241 https://cve.radiocsirt.org/vuln/fkie_cve-2010-2496 fkie_cve-2010-2496 2026-10-03T02:26:46.051815+00:00

stonith-ng in pacemaker and cluster-glue passed passwords as commandline parameters, making it possible for local attackers to gain access to passwords of the HA stack and potentially influence its operations. This is fixed in cluster-glue 1.0.6 and newer, and pacemaker 1.1.3 and newer.

 https://cve.radiocsirt.org/vuln/ghsa-4643-vgh5-4r2c GHSA-4643-vgh5-4r2c 2026-10-03T02:26:46.051873+00:00

stonith-ng in pacemaker and cluster-glue passed passwords as commandline parameters, making it possible for local attackers to gain access to passwords of the HA stack and potentially influence its operations. This is fixed in cluster-glue 1.0.6 and newer, and pacemaker 1.1.3 and newer.

 https://cve.radiocsirt.org/vuln/gsd-2010-2496 gsd-2010-2496 2026-10-03T02:26:46.051916+00:00 gsd-2010-2496 https://cve.radiocsirt.org/vuln/ubuntu-cve-2010-2496 Withdrawn: UBUNTU-CVE-2010-2496 2026-10-03T02:26:46.051935+00:00

Withdrawn by the publisher.

Affected: Ubuntu:18.04:LTS: cluster-glue, Ubuntu:18.04:LTS: pacemaker

stonith-ng in pacemaker and cluster-glue passed passwords as commandline parameters, making it possible for local attackers to gain access to passwords of the HA stack and potentially influence its operations. This is fixed in cluster-glue 1.0.6 and newer, and pacemaker 1.1.3 and newer.