https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T11:49:32.022712+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-117074 EUVD-2026-117074 2026-10-04T11:49:32.027680+00:00 EUVD-2026-117074 https://cve.radiocsirt.org/vuln/fkie_cve-2011-4953 fkie_cve-2011-4953 2026-10-04T11:49:32.027712+00:00

The set_mgmt_parameters function in item.py in cobbler before 2.2.2 allows context-dependent attackers to execute arbitrary code via vectors related to the use of the yaml.load function instead of the yaml.safe_load function, as demonstrated using Puppet.

 https://cve.radiocsirt.org/vuln/ghsa-hpj3-5p46-g87w GHSA-hpj3-5p46-g87w — Cobbler vulnerable to code injection via unsafe YAML loading 2026-10-04T11:49:32.027742+00:00

Affected: PyPI: cobbler

The `set_mgmt_parameters` function in item.py in cobbler before 2.2.2 allows context-dependent attackers to execute arbitrary code via vectors related to the use of the `yaml.load` function instead of the `yaml.safe_load function`, as demonstrated using Puppet.

 https://cve.radiocsirt.org/vuln/gsd-2011-4953 gsd-2011-4953 2026-10-04T11:49:32.027766+00:00 gsd-2011-4953 https://cve.radiocsirt.org/vuln/opensuse-su-2021:0046-1 openSUSE-SU-2021:0046-1 — Security update for cobbler 2026-10-04T11:49:32.027779+00:00

Security update for cobbler

 https://cve.radiocsirt.org/vuln/pysec-2026-793 PYSEC-2026-793 — Cobbler vulnerable to code injection via unsafe YAML loading 2026-10-04T11:49:32.027796+00:00

Affected: PyPI: cobbler

The `set_mgmt_parameters` function in item.py in cobbler before 2.2.2 allows context-dependent attackers to execute arbitrary code via vectors related to the use of the `yaml.load` function instead of the `yaml.safe_load function`, as demonstrated using Puppet.