https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T05:34:59.239075+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2022-18328 cnvd-2022-18328 2026-10-05T05:34:59.446193+00:00 cnvd-2022-18328 https://cve.radiocsirt.org/vuln/euvd-2026-31148 EUVD-2026-31148 2026-10-05T05:34:59.446236+00:00 EUVD-2026-31148 https://cve.radiocsirt.org/vuln/fkie_cve-2021-40324 fkie_cve-2021-40324 2026-10-05T05:34:59.446251+00:00

Cobbler before 3.3.0 allows arbitrary file write operations via upload_log_data.

 https://cve.radiocsirt.org/vuln/ghsa-4cfr-gjfx-fj3x GHSA-4cfr-gjfx-fj3x — Cobbler before 3.3.0 allows arbitrary file write operations via upload_log_data. 2026-10-05T05:34:59.446280+00:00

Affected: PyPI: cobbler

Cobbler before 3.3.0 allows arbitrary file write operations via upload_log_data.

 https://cve.radiocsirt.org/vuln/gsd-2021-40324 gsd-2021-40324 2026-10-05T05:34:59.446304+00:00 gsd-2021-40324 https://cve.radiocsirt.org/vuln/oesa-2025-1467 OESA-2025-1467 — cobbler security update 2026-10-05T05:34:59.446316+00:00

Affected: openEuler:22.03-LTS-SP3: cobbler

Cobbler is a network install server. Cobbler supports PXE, ISO virtualized installs, and re-installing existing Linux machines. The last two modes use a helper tool, 'koan', that integrates with cobbler. Cobbler's advanced features include importing distributions from DVDs and rsync mirrors, kickstart templating, integrated yum mirroring, and built-in DHCP/DNS Management. Cobbler has a XML-RPC API for integration with other applications. Security Fix(es):

Cobbler before 3.3.0 allows log poisoning, and resultant Remote Code Execution, via an XMLRPC method that logs to the logfile for template injection.(CVE-2021-40323)

Cobbler before 3.3.0 allows arbitrary file write operations via upload_log_data.(CVE-2021-40324)

An issue was discovered in Cobbler through 3.3.1. Routines in several files use the HTTP protocol instead of the more secure HTTPS.(CVE-2021-45081)

An issue was discovered in Cobbler before 3.3.1. In the templar.py file, the function check_for_invalid_imports can allow Cheetah code to import Python modules via the "#from MODULE import" substring. (Only lines beginning with #import are blocked.)(CVE-2021-45082)

An issue was discovered in Cobbler before 3.3.1. Files in /etc/cobbler are world readable. Two of those files contain some sensitive information that can be exposed to a local user who has non-privileged access to the server. The users.digest file contains the sha2-512 digest of users in a Cobbler local installation…

 https://cve.radiocsirt.org/vuln/pysec-2021-374 PYSEC-2021-374 2026-10-05T05:34:59.446354+00:00

Affected: PyPI: cobbler

Cobbler before 3.3.0 allows arbitrary file write operations via upload_log_data.

 https://cve.radiocsirt.org/vuln/suse-ru-2021:3162-1 SUSE-RU-2021:3162-1 — Recommended update for SUSE Manager 4.2.2 Release Notes 2026-10-05T05:34:59.446372+00:00

Recommended update for SUSE Manager 4.2.2 Release Notes

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-40324 UBUNTU-CVE-2021-40324 2026-10-05T05:34:59.446390+00:00

Affected: Ubuntu:Pro:16.04:LTS: cobbler

Cobbler before 3.3.0 allows arbitrary file write operations via upload_log_data.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2927 WID-SEC-W-2023-2927 — cobbler: Mehrere Schwachstellen 2026-10-05T05:34:59.446405+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in cobbler ausnutzen, um beliebigen Programmcode mit Administratorrechten auszuführen, vertrauliche Informationen offenzulegen und Sicherheitsmaßnahmen zu umgehen.