https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T14:27:06.476187+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2017-28782 cnvd-2017-28782 2026-10-07T14:27:06.482640+00:00 cnvd-2017-28782 https://cve.radiocsirt.org/vuln/euvd-2026-74761 EUVD-2026-74761 2026-10-07T14:27:06.482676+00:00 EUVD-2026-74761 https://cve.radiocsirt.org/vuln/fkie_cve-2017-7530 fkie_cve-2017-7530 2026-10-07T14:27:06.482691+00:00

In CloudForms Management Engine (cfme) before 5.7.3 and 5.8.x before 5.8.1, it was found that privilege check is missing when invoking arbitrary methods via filtering on VMs that MiqExpression will execute that is triggerable by API users. An attacker could use this to execute actions they should not be allowed to (e.g. destroying VMs).

 https://cve.radiocsirt.org/vuln/ghsa-hvp5-xq7g-8w42 GHSA-hvp5-xq7g-8w42 2026-10-07T14:27:06.482721+00:00

In CloudForms Management Engine (cfme) before 5.7.3 and 5.8.x before 5.8.1, it was found that privilege check is missing when invoking arbitrary methods via filtering on VMs that MiqExpression will execute that is triggerable by API users. An attacker could use this to execute actions they should not be allowed to (e.g. destroying VMs).

 https://cve.radiocsirt.org/vuln/gsd-2017-7530 gsd-2017-7530 2026-10-07T14:27:06.482739+00:00 gsd-2017-7530 https://cve.radiocsirt.org/vuln/rhsa-2017:1758 RHSA-2017:1758 — Red Hat Security Advisory: Red Hat CloudForms security, bug fix, and enhancement update 2026-10-07T14:27:06.482750+00:00

cfme: API leaks any MiqReportResult CloudForms: lack of RBAC on various methods in web UI CFME: Dialog for creating cloud volumes does not filter cloud tenants CVE-2017-7497 cfme: Execution of arbitrary methods through filter param