https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T02:20:15.664825+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2022-18329 cnvd-2022-18329 2026-10-05T02:20:15.677530+00:00 cnvd-2022-18329 https://cve.radiocsirt.org/vuln/euvd-2026-31131 EUVD-2026-31131 2026-10-05T02:20:15.677589+00:00 EUVD-2026-31131 https://cve.radiocsirt.org/vuln/fkie_cve-2021-40323 fkie_cve-2021-40323 2026-10-05T02:20:15.677618+00:00

Cobbler before 3.3.0 allows log poisoning, and resultant Remote Code Execution, via an XMLRPC method that logs to the logfile for template injection.

 https://cve.radiocsirt.org/vuln/ghsa-cpqf-3c3r-c9g2 GHSA-cpqf-3c3r-c9g2 — Cobbler before 3.3.0 allows log poisoning 2026-10-05T02:20:15.677668+00:00

Affected: PyPI: cobbler

Cobbler before 3.3.0 allows log poisoning, and resultant Remote Code Execution, via an XMLRPC method that logs to the logfile for template injection.

 https://cve.radiocsirt.org/vuln/gsd-2021-40323 gsd-2021-40323 2026-10-05T02:20:15.677712+00:00 gsd-2021-40323 https://cve.radiocsirt.org/vuln/oesa-2025-1467 OESA-2025-1467 — cobbler security update 2026-10-05T02:20:15.677737+00:00

Affected: openEuler:22.03-LTS-SP3: cobbler

Cobbler is a network install server. Cobbler supports PXE, ISO virtualized installs, and re-installing existing Linux machines. The last two modes use a helper tool, 'koan', that integrates with cobbler. Cobbler's advanced features include importing distributions from DVDs and rsync mirrors, kickstart templating, integrated yum mirroring, and built-in DHCP/DNS Management. Cobbler has a XML-RPC API for integration with other applications. Security Fix(es):

Cobbler before 3.3.0 allows log poisoning, and resultant Remote Code Execution, via an XMLRPC method that logs to the logfile for template injection.(CVE-2021-40323)

Cobbler before 3.3.0 allows arbitrary file write operations via upload_log_data.(CVE-2021-40324)

An issue was discovered in Cobbler through 3.3.1. Routines in several files use the HTTP protocol instead of the more secure HTTPS.(CVE-2021-45081)

An issue was discovered in Cobbler before 3.3.1. In the templar.py file, the function check_for_invalid_imports can allow Cheetah code to import Python modules via the "#from MODULE import" substring. (Only lines beginning with #import are blocked.)(CVE-2021-45082)

An issue was discovered in Cobbler before 3.3.1. Files in /etc/cobbler are world readable. Two of those files contain some sensitive information that can be exposed to a local user who has non-privileged access to the server. The users.digest file contains the sha2-512 digest of users in a Cobbler local installation…

 https://cve.radiocsirt.org/vuln/pysec-2021-373 PYSEC-2021-373 2026-10-05T02:20:15.677818+00:00

Affected: PyPI: cobbler

Cobbler before 3.3.0 allows log poisoning, and resultant Remote Code Execution, via an XMLRPC method that logs to the logfile for template injection.

 https://cve.radiocsirt.org/vuln/suse-ru-2021:3162-1 SUSE-RU-2021:3162-1 — Recommended update for SUSE Manager 4.2.2 Release Notes 2026-10-05T02:20:15.677858+00:00

Recommended update for SUSE Manager 4.2.2 Release Notes

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-40323 UBUNTU-CVE-2021-40323 2026-10-05T02:20:15.677895+00:00

Affected: Ubuntu:Pro:16.04:LTS: cobbler

Cobbler before 3.3.0 allows log poisoning, and resultant Remote Code Execution, via an XMLRPC method that logs to the logfile for template injection.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2927 WID-SEC-W-2023-2927 — cobbler: Mehrere Schwachstellen 2026-10-05T02:20:15.677942+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in cobbler ausnutzen, um beliebigen Programmcode mit Administratorrechten auszuführen, vertrauliche Informationen offenzulegen und Sicherheitsmaßnahmen zu umgehen.