https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T12:06:59.440578+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2016-11008 cnvd-2016-11008 2026-10-17T12:06:59.445277+00:00 cnvd-2016-11008 https://cve.radiocsirt.org/vuln/euvd-2026-86440 EUVD-2026-86440 2026-10-17T12:06:59.445321+00:00 EUVD-2026-86440 https://cve.radiocsirt.org/vuln/fkie_cve-2016-7071 fkie_cve-2016-7071 2026-10-17T12:06:59.445344+00:00

It was found that the CloudForms before 5.6.2.2, and 5.7.0.7 did not properly apply permissions controls to VM IDs passed by users. A remote, authenticated attacker could use this flaw to execute arbitrary VMs on systems managed by CloudForms if they know the ID of the VM.

 https://cve.radiocsirt.org/vuln/ghsa-82ph-q482-5fhg GHSA-82ph-q482-5fhg 2026-10-17T12:06:59.445383+00:00

It was found that the CloudForms before 5.6.2.2, and 5.7.0.7 did not properly apply permissions controls to VM IDs passed by users. A remote, authenticated attacker could use this flaw to execute arbitrary VMs on systems managed by CloudForms if they know the ID of the VM.

 https://cve.radiocsirt.org/vuln/gsd-2016-7071 gsd-2016-7071 2026-10-17T12:06:59.445409+00:00 gsd-2016-7071 https://cve.radiocsirt.org/vuln/rhsa-2016:2091 RHSA-2016:2091 — Red Hat Security Advisory: CFME 5.6.2.2 security, and bug fix update 2026-10-17T12:06:59.445437+00:00

CFME: bypass authorization by altering VM ID