https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T03:40:16.497097+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2022-03971 bdu:2022-03971 2026-10-04T03:40:16.618787+00:00 bdu:2022-03971 https://cve.radiocsirt.org/vuln/brew-ansible-cve-2019-14905 BREW-ansible-CVE-2019-14905 2026-10-04T03:40:16.618830+00:00

Affected: Homebrew: ansible

A vulnerability was found in Ansible Engine versions 2.9.x before 2.9.3, 2.8.x before 2.8.8, 2.7.x before 2.7.16 and earlier, where in Ansible's nxos_file_copy module can be used to copy files to a flash or bootflash on NXOS devices. Malicious code could craft the filename parameter to perform OS command injections. This could result in a loss of confidentiality of the system among other issues.

 https://cve.radiocsirt.org/vuln/cnvd-2020-03863 cnvd-2020-03863 2026-10-04T03:40:16.618864+00:00 cnvd-2020-03863 https://cve.radiocsirt.org/vuln/euvd-2026-56719 EUVD-2026-56719 2026-10-04T03:40:16.618878+00:00 EUVD-2026-56719 https://cve.radiocsirt.org/vuln/fkie_cve-2019-14905 fkie_cve-2019-14905 2026-10-04T03:40:16.618889+00:00

A vulnerability was found in Ansible Engine versions 2.9.x before 2.9.3, 2.8.x before 2.8.8, 2.7.x before 2.7.16 and earlier, where in Ansible's nxos_file_copy module can be used to copy files to a flash or bootflash on NXOS devices. Malicious code could craft the filename parameter to perform OS command injections. This could result in a loss of confidentiality of the system among other issues.

 https://cve.radiocsirt.org/vuln/ghsa-frxj-5j27-f8rf GHSA-frxj-5j27-f8rf — Externally Controlled Reference to a Resource in Another Sphere, Improper Input Validation, and External Control of Fil… 2026-10-04T03:40:16.618912+00:00

Affected: PyPI: ansible

A vulnerability was found in Ansible Engine versions 2.9.x before 2.9.3, 2.8.x before 2.8.8, 2.7.x before 2.7.16 and earlier, where in Ansible's nxos_file_copy module can be used to copy files to a flash or bootflash on NXOS devices. Malicious code could craft the filename parameter to perform OS command injections. This could result in a loss of confidentiality of the system among other issues.

 https://cve.radiocsirt.org/vuln/gsd-2019-14905 gsd-2019-14905 2026-10-04T03:40:16.618936+00:00 gsd-2019-14905 https://cve.radiocsirt.org/vuln/opensuse-su-2020:0513-1 openSUSE-SU-2020:0513-1 — Security update for ansible 2026-10-04T03:40:16.618947+00:00

Security update for ansible

 https://cve.radiocsirt.org/vuln/pysec-2020-206 PYSEC-2020-206 2026-10-04T03:40:16.618967+00:00

Affected: PyPI: ansible

A vulnerability was found in Ansible Engine versions 2.9.x before 2.9.3, 2.8.x before 2.8.8, 2.7.x before 2.7.16 and earlier, where in Ansible's nxos_file_copy module can be used to copy files to a flash or bootflash on NXOS devices. Malicious code could craft the filename parameter to perform OS command injections. This could result in a loss of confidentiality of the system among other issues.

 https://cve.radiocsirt.org/vuln/rhsa-2020:0215 RHSA-2020:0215 — Red Hat Security Advisory: Ansible security and bug fix update (2.9.4) 2026-10-04T03:40:16.618986+00:00

Ansible: vulnerability in solaris_zone module via crafted solaris zone Ansible: malicious code could craft filename in nxos_file_copy module

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-14905 UBUNTU-CVE-2019-14905 2026-10-04T03:40:16.619003+00:00

Affected: Ubuntu:Pro:18.04:LTS: ansible

A vulnerability was found in Ansible Engine versions 2.9.x before 2.9.3, 2.8.x before 2.8.8, 2.7.x before 2.7.16 and earlier, where in Ansible's nxos_file_copy module can be used to copy files to a flash or bootflash on NXOS devices. Malicious code could craft the filename parameter to perform OS command injections. This could result in a loss of confidentiality of the system among other issues.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2482 WID-SEC-W-2023-2482 — Ansible: Mehrere Schwachstellen ermöglichen Ausführen von beliebigem Programmcode 2026-10-04T03:40:16.619021+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Ansible ausnutzen, um beliebigen Programmcode auszuführen.