https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T04:43:06.751946+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2022-00281 bdu:2022-00281 2026-10-05T04:43:07.071922+00:00 bdu:2022-00281 https://cve.radiocsirt.org/vuln/brew-ansible-cve-2020-14365 BREW-ansible-CVE-2020-14365 2026-10-05T04:43:07.071977+00:00

Affected: Homebrew: ansible

A flaw was found in the Ansible Engine, in ansible-engine 2.8.x before 2.8.15 and ansible-engine 2.9.x before 2.9.13, when installing packages using the dnf module. GPG signatures are ignored during installation even when disable_gpg_check is set to False, which is the default behavior. This flaw leads to malicious packages being installed on the system and arbitrary code executed via package installation scripts. The highest threat from this vulnerability is to integrity and system availability.

 https://cve.radiocsirt.org/vuln/euvd-2026-42400 EUVD-2026-42400 2026-10-05T04:43:07.072032+00:00 EUVD-2026-42400 https://cve.radiocsirt.org/vuln/fkie_cve-2020-14365 fkie_cve-2020-14365 2026-10-05T04:43:07.072047+00:00

A flaw was found in the Ansible Engine, in ansible-engine 2.8.x before 2.8.15 and ansible-engine 2.9.x before 2.9.13, when installing packages using the dnf module. GPG signatures are ignored during installation even when disable_gpg_check is set to False, which is the default behavior. This flaw leads to malicious packages being installed on the system and arbitrary code executed via package installation scripts. The highest threat from this vulnerability is to integrity and system availability.

 https://cve.radiocsirt.org/vuln/ghsa-m429-fhmv-c6q2 GHSA-m429-fhmv-c6q2 — Improper Verification of Cryptographic Signature in ansible 2026-10-05T04:43:07.072072+00:00

Affected: PyPI: ansible

A flaw was found in the Ansible Engine, in ansible-engine 2.8.x before 2.8.15 and ansible-engine 2.9.x before 2.9.13, when installing packages using the dnf module. GPG signatures are ignored during installation even when `disable_gpg_check` is set to `False`, which is the default behavior. This flaw leads to malicious packages being installed on the system and arbitrary code executed via package installation scripts. The highest threat from this vulnerability is to integrity and system availability.

 https://cve.radiocsirt.org/vuln/gsd-2020-14365 gsd-2020-14365 2026-10-05T04:43:07.072097+00:00 gsd-2020-14365 https://cve.radiocsirt.org/vuln/pysec-2020-209 PYSEC-2020-209 2026-10-05T04:43:07.072109+00:00

Affected: PyPI: ansible

A flaw was found in the Ansible Engine, in ansible-engine 2.8.x before 2.8.15 and ansible-engine 2.9.x before 2.9.13, when installing packages using the dnf module. GPG signatures are ignored during installation even when disable_gpg_check is set to False, which is the default behavior. This flaw leads to malicious packages being installed on the system and arbitrary code executed via package installation scripts. The highest threat from this vulnerability is to integrity and system availability.

 https://cve.radiocsirt.org/vuln/rhsa-2020:3600 RHSA-2020:3600 — Red Hat Security Advisory: Ansible security and bug fix update (2.8.15) 2026-10-05T04:43:07.072129+00:00

ansible: atomic_move primitive sets permissive permissions Ansible: masked keys for uri module are exposed into content and json output Ansible: module_args does not censor properly in --check mode ansible: dnf module install packages with no GPG signature

 https://cve.radiocsirt.org/vuln/suse-su-2024:1427-1 SUSE-SU-2024:1427-1 — Security Beta update for SUSE Manager Client Tools and Salt 2026-10-05T04:43:07.072173+00:00

Security Beta update for SUSE Manager Client Tools and Salt

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-14365 UBUNTU-CVE-2020-14365 2026-10-05T04:43:07.072217+00:00

Affected: Ubuntu:Pro:14.04:LTS: ansible, Ubuntu:Pro:16.04:LTS: ansible, Ubuntu:Pro:18.04:LTS: ansible, Ubuntu:Pro:20.04:LTS: ansible, Ubuntu:Pro:22.04:LTS: ansible, Ubuntu:24.04:LTS: ansible, Ubuntu:25.10: ansible, Ubuntu:26.04:LTS: ansible

A flaw was found in the Ansible Engine, in ansible-engine 2.8.x before 2.8.15 and ansible-engine 2.9.x before 2.9.13, when installing packages using the dnf module. GPG signatures are ignored during installation even when disable_gpg_check is set to False, which is the default behavior. This flaw leads to malicious packages being installed on the system and arbitrary code executed via package installation scripts. The highest threat from this vulnerability is to integrity and system availability.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2469 WID-SEC-W-2023-2469 — Ansible: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2026-10-05T04:43:07.072279+00:00

Ein lokaler Angreifer kann eine Schwachstelle in Ansible und Ansible Tower ausnutzen, um Sicherheitsvorkehrungen zu umgehen.