https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T23:28:01.990293+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2016-05108 cnvd-2016-05108 2026-10-17T23:28:01.996358+00:00 cnvd-2016-05108 https://cve.radiocsirt.org/vuln/euvd-2026-83471 EUVD-2026-83471 2026-10-17T23:28:01.996397+00:00 EUVD-2026-83471 https://cve.radiocsirt.org/vuln/fkie_cve-2016-3176 fkie_cve-2016-3176 2026-10-17T23:28:01.996412+00:00

Salt before 2015.5.10 and 2015.8.x before 2015.8.8, when PAM external authentication is enabled, allows attackers to bypass the configured authentication service by passing an alternate service with a command sent to LocalClient.

 https://cve.radiocsirt.org/vuln/ghsa-v2rp-9cpj-pfw2 GHSA-v2rp-9cpj-pfw2 — Salt Insecure configuration of PAM external authentication service 2026-10-17T23:28:01.996442+00:00

Affected: PyPI: salt

Salt before 2015.5.10 and 2015.8.x before 2015.8.8, when PAM external authentication is enabled, allows attackers to bypass the configured authentication service by passing an alternate service with a command sent to LocalClient.

 https://cve.radiocsirt.org/vuln/gsd-2016-3176 gsd-2016-3176 2026-10-17T23:28:01.996467+00:00 gsd-2016-3176 https://cve.radiocsirt.org/vuln/pysec-2017-33 PYSEC-2017-33 2026-10-17T23:28:01.996478+00:00

Affected: PyPI: salt

Salt before 2015.5.10 and 2015.8.x before 2015.8.8, when PAM external authentication is enabled, allows attackers to bypass the configured authentication service by passing an alternate service with a command sent to LocalClient.

 https://cve.radiocsirt.org/vuln/suse-su-2016:0970-1 SUSE-SU-2016:0970-1 — Security update for salt 2026-10-17T23:28:01.996496+00:00

Security update for salt

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-3176 UBUNTU-CVE-2016-3176 2026-10-17T23:28:01.996513+00:00

Affected: Ubuntu:Pro:14.04:LTS: salt

Salt before 2015.5.10 and 2015.8.x before 2015.8.8, when PAM external authentication is enabled, allows attackers to bypass the configured authentication service by passing an alternate service with a command sent to LocalClient.