https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T23:50:40.492015+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2022:7447 ALSA-2022:7447 — Moderate: pcs security, bug fix, and enhancement update 2026-10-02T23:50:40.622128+00:00

Affected: AlmaLinux:8: pcs, AlmaLinux:8: pcs-snmp

The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities.

Security Fix(es):

* pcs: improper authentication via PAM (CVE-2022-1049)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2022-05543 bdu:2022-05543 2026-10-02T23:50:40.622189+00:00 bdu:2022-05543 https://cve.radiocsirt.org/vuln/euvd-2026-11423 EUVD-2026-11423 2026-10-02T23:50:40.622206+00:00 EUVD-2026-11423 https://cve.radiocsirt.org/vuln/fkie_cve-2022-1049 fkie_cve-2022-1049 2026-10-02T23:50:40.622218+00:00

A flaw was found in the Pacemaker configuration tool (pcs). The pcs daemon was allowing expired accounts, and accounts with expired passwords to login when using PAM authentication. Therefore, unprivileged expired accounts that have been denied access could still login.

 https://cve.radiocsirt.org/vuln/ghsa-hhh9-rwf2-2pp5 GHSA-hhh9-rwf2-2pp5 2026-10-02T23:50:40.622240+00:00

A flaw was found in the Pacemaker configuration tool (pcs). The pcs daemon was allowing expired accounts, and accounts with expired passwords to login when using PAM authentication. Therefore, unprivileged expired accounts that have been denied access could still login.

 https://cve.radiocsirt.org/vuln/gsd-2022-1049 gsd-2022-1049 2026-10-02T23:50:40.622255+00:00 gsd-2022-1049 https://cve.radiocsirt.org/vuln/oesa-2022-1886 OESA-2022-1886 — pcs security update 2026-10-02T23:50:40.622265+00:00

Affected: openEuler:20.03-LTS-SP1: pcs, openEuler:20.03-LTS-SP3: pcs, openEuler:22.03-LTS: pcs

pcs is a corosync and pacemaker configuration tool. It permits users to easily view, modify and create pacemaker based clusters. Security Fix(es): A flaw was found in the Pacemaker configuration tool (pcs). The pcs daemon was allowing expired accounts, and accounts with expired passwords to login when using PAM authentication. Therefore, unprivileged expired accounts that have been denied access could still login.(CVE-2022-1049)

 https://cve.radiocsirt.org/vuln/rhsa-2022:7447 RHSA-2022:7447 — Red Hat Security Advisory: pcs security, bug fix, and enhancement update 2026-10-02T23:50:40.622290+00:00

pcs: improper authentication via PAM

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-1049 UBUNTU-CVE-2022-1049 2026-10-02T23:50:40.622308+00:00

Affected: Ubuntu:Pro:22.04:LTS: pcs

A flaw was found in the Pacemaker configuration tool (pcs). The pcs daemon was allowing expired accounts, and accounts with expired passwords to login when using PAM authentication. Therefore, unprivileged expired accounts that have been denied access could still login.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-2044 WID-SEC-W-2022-2044 — Red Hat Enterprise Linux: Mehrere Schwachstellen 2026-10-02T23:50:40.622326+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um beliebigen Programmcode auszuführen, Dateien zu manipulieren, Informationen offenzulegen oder einen Denial of Service Zustand herbeizuführen.