https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T08:31:47.160844+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2015-09724 bdu:2015-09724 2026-10-03T08:31:47.244319+00:00 bdu:2015-09724 https://cve.radiocsirt.org/vuln/euvd-2026-106036 EUVD-2026-106036 2026-10-03T08:31:47.244354+00:00 EUVD-2026-106036 https://cve.radiocsirt.org/vuln/fkie_cve-2013-2274 fkie_cve-2013-2274 2026-10-03T08:31:47.244369+00:00

Puppet 2.6.x before 2.6.18 and Puppet Enterprise 1.2.x before 1.2.7 allows remote authenticated users to execute arbitrary code on the puppet master, or an agent with puppet kick enabled, via a crafted request for a report.

 https://cve.radiocsirt.org/vuln/ghsa-8wjv-x2mj-6x2c GHSA-8wjv-x2mj-6x2c 2026-10-03T08:31:47.244397+00:00

Puppet 2.6.x before 2.6.18 and Puppet Enterprise 1.2.x before 1.2.7 allows remote authenticated users to execute arbitrary code on the puppet master, or an agent with puppet kick enabled, via a crafted request for a report.

 https://cve.radiocsirt.org/vuln/gsd-2013-2274 gsd-2013-2274 2026-10-03T08:31:47.244413+00:00 gsd-2013-2274 https://cve.radiocsirt.org/vuln/rhsa-2013:0710 RHSA-2013:0710 — Red Hat Security Advisory: puppet security update 2026-10-03T08:31:47.244424+00:00

Puppet: Directory /var/log/puppet is world readable Puppet: catalog request code execution Puppet: HTTP GET request catalog retrieval Puppet: SSL protocol downgrade Puppet: HTTP PUT report saving code execution vulnerability Puppet: default auth.conf allows authenticated node to submit a report for any other node