https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T11:50:24.504846+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-111076 EUVD-2026-111076 2026-10-04T11:50:24.613791+00:00 EUVD-2026-111076 https://cve.radiocsirt.org/vuln/fkie_cve-2012-2395 fkie_cve-2012-2395 2026-10-04T11:50:24.613829+00:00

Incomplete blacklist vulnerability in action_power.py in Cobbler 2.2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) username or (2) password fields to the power_system method in the xmlrpc API.

 https://cve.radiocsirt.org/vuln/ghsa-g34c-mg6m-xvxj GHSA-g34c-mg6m-xvxj — Cobbler subject to Command Injection 2026-10-04T11:50:24.613861+00:00

Affected: PyPI: cobbler

A Command Injection in action_power.py in Cobbler prior to v2.6.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) username or (2) password fields to the power_system method in the xmlrpc API.

 https://cve.radiocsirt.org/vuln/gsd-2012-2395 gsd-2012-2395 2026-10-04T11:50:24.613886+00:00 gsd-2012-2395 https://cve.radiocsirt.org/vuln/opensuse-su-2021:0046-1 openSUSE-SU-2021:0046-1 — Security update for cobbler 2026-10-04T11:50:24.613899+00:00

Security update for cobbler

 https://cve.radiocsirt.org/vuln/pysec-2026-792 PYSEC-2026-792 — Cobbler subject to Command Injection 2026-10-04T11:50:24.613921+00:00

Affected: PyPI: cobbler

A Command Injection in action_power.py in Cobbler prior to v2.6.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) username or (2) password fields to the power_system method in the xmlrpc API.

 https://cve.radiocsirt.org/vuln/rhsa-2012:1060 RHSA-2012:1060 — Red Hat Security Advisory: cobbler security update 2026-10-04T11:50:24.613941+00:00

cobbler: command injection flaw in the power management XML-RPC API

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2012-2395 Withdrawn: UBUNTU-CVE-2012-2395 2026-10-04T11:50:24.613957+00:00

Withdrawn by the publisher.

Affected: Ubuntu:14.04:LTS: cobbler, Ubuntu:16.04:LTS: cobbler

Incomplete blacklist vulnerability in action_power.py in Cobbler 2.2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) username or (2) password fields to the power_system method in the xmlrpc API.