<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://cve.radiocsirt.org/rss/recent/all/10</id>
  <title>Most recent entries from all</title>
  <updated>2026-10-04T05:21:02.210746+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>csirt@opendfir.org</email>
  </author>
  <link href="https://cve.radiocsirt.org" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent entries.</subtitle>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/brew-ansible-cve-2018-16859</id>
    <title>BREW-ansible-CVE-2018-16859</title>
    <updated>2026-10-04T05:21:02.227122+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> Homebrew: ansible</p>
<p>Execution of Ansible playbooks on Windows platforms with PowerShell ScriptBlock logging and Module logging enabled can allow for 'become' passwords to appear in EventLogs in plaintext. A local user with administrator privileges on the machine can view these logs and discover the plaintext password. Ansible Engine 2.8 and older are believed to be vulnerable.</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/brew-ansible-cve-2018-16859"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/cnvd-2018-24495</id>
    <title>cnvd-2018-24495</title>
    <updated>2026-10-04T05:21:02.227178+00:00</updated>
    <content>cnvd-2018-24495</content>
    <link href="https://cve.radiocsirt.org/vuln/cnvd-2018-24495"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/euvd-2026-68414</id>
    <title>EUVD-2026-68414</title>
    <updated>2026-10-04T05:21:02.227197+00:00</updated>
    <content>EUVD-2026-68414</content>
    <link href="https://cve.radiocsirt.org/vuln/euvd-2026-68414"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/fkie_cve-2018-16859</id>
    <title>fkie_cve-2018-16859</title>
    <updated>2026-10-04T05:21:02.227208+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>Execution of Ansible playbooks on Windows platforms with PowerShell ScriptBlock logging and Module logging enabled can allow for 'become' passwords to appear in EventLogs in plaintext. A local user with administrator privileges on the machine can view these logs and discover the plaintext password. Ansible Engine 2.8 and older are believed to be vulnerable.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/fkie_cve-2018-16859"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/ghsa-v735-2pp6-h86r</id>
    <title>GHSA-v735-2pp6-h86r — Ansible Logs Passwords If PowerShell ScriptBlock is Enabled</title>
    <updated>2026-10-04T05:21:02.227245+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> PyPI: ansible</p>
<p>Execution of Ansible playbooks on Windows platforms with PowerShell ScriptBlock logging and Module logging enabled can allow for 'become' passwords to appear in EventLogs in plaintext. A local user with administrator privileges on the machine can view these logs and discover the plaintext password. Ansible Engine 2.8 and older are believed to be vulnerable.</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/ghsa-v735-2pp6-h86r"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/gsd-2018-16859</id>
    <title>gsd-2018-16859</title>
    <updated>2026-10-04T05:21:02.227268+00:00</updated>
    <content>gsd-2018-16859</content>
    <link href="https://cve.radiocsirt.org/vuln/gsd-2018-16859"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/opensuse-su-2019:0238-1</id>
    <title>openSUSE-SU-2019:0238-1 — Security update for ansible</title>
    <updated>2026-10-04T05:21:02.227279+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>Security update for ansible</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/opensuse-su-2019:0238-1"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/pysec-2018-60</id>
    <title>PYSEC-2018-60</title>
    <updated>2026-10-04T05:21:02.227297+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> PyPI: ansible</p>
<p>Execution of Ansible playbooks on Windows platforms with PowerShell ScriptBlock logging and Module logging enabled can allow for 'become' passwords to appear in EventLogs in plaintext. A local user with administrator privileges on the machine can view these logs and discover the plaintext password. Ansible Engine 2.8 and older are believed to be vulnerable.</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/pysec-2018-60"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/rhsa-2018:3770</id>
    <title>RHSA-2018:3770 — Red Hat Security Advisory: ansible security and bug fix update</title>
    <updated>2026-10-04T05:21:02.227314+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>ansible: become password logged in plaintext when used with PowerShell on Windows</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/rhsa-2018:3770"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3598</id>
    <title>WID-SEC-W-2024-3598 — Ansible: Schwachstelle ermöglicht Offenlegung von Informationen</title>
    <updated>2026-10-04T05:21:02.227329+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>Ein lokaler Angreifer kann eine Schwachstelle in Ansible ausnutzen, um Informationen offenzulegen.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3598"/>
  </entry>
</feed>
