https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T15:51:08.289423+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-237380 EUVD-2026-237380 2026-10-02T15:51:08.324757+00:00 EUVD-2026-237380 https://cve.radiocsirt.org/vuln/fkie_cve-2022-22941 fkie_cve-2022-22941 2026-10-02T15:51:08.324805+00:00

An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. When configured as a Master-of-Masters, with a publisher_acl, if a user configured in the publisher_acl targets any minion connected to the Syndic, the Salt Master incorrectly interpreted no valid targets as valid, allowing configured users to target any of the minions connected to the syndic with their configured commands. This requires a syndic master combined with publisher_acl configured on the Master-of-Masters, allowing users specified in the publisher_acl to bypass permissions, publishing authorized commands to any configured minion.

 https://cve.radiocsirt.org/vuln/ghsa-qcr3-hr2f-6557 GHSA-qcr3-hr2f-6557 — SaltStack Salt Permissions Bypass 2026-10-02T15:51:08.324841+00:00

Affected: PyPI: salt

An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. When configured as a Master-of-Masters, with a publisher_acl, if a user configured in the publisher_acl targets any minion connected to the Syndic, the Salt Master incorrectly interpreted no valid targets as valid, allowing configured users to target any of the minions connected to the syndic with their configured commands. This requires a syndic master combined with publisher_acl configured on the Master-of-Masters, allowing users specified in the publisher_acl to bypass permissions, publishing authorized commands to any configured minion.

 https://cve.radiocsirt.org/vuln/gsd-2022-22941 gsd-2022-22941 2026-10-02T15:51:08.324870+00:00 gsd-2022-22941 https://cve.radiocsirt.org/vuln/opensuse-su-2022:1059-1 openSUSE-SU-2022:1059-1 — Security update for salt 2026-10-02T15:51:08.324883+00:00

Security update for salt

 https://cve.radiocsirt.org/vuln/pysec-2022-174 PYSEC-2022-174 2026-10-02T15:51:08.324904+00:00

Affected: PyPI: salt

An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. When configured as a Master-of-Masters, with a publisher_acl, if a user configured in the publisher_acl targets any minion connected to the Syndic, the Salt Master incorrectly interpreted no valid targets as valid, allowing configured users to target any of the minions connected to the syndic with their configured commands. This requires a syndic master combined with publisher_acl configured on the Master-of-Masters, allowing users specified in the publisher_acl to bypass permissions, publishing authorized commands to any configured minion.

 https://cve.radiocsirt.org/vuln/suse-fu-2022:2042-1 SUSE-FU-2022:2042-1 — Feature update for SUSE Manager Salt Bundle 2026-10-02T15:51:08.324927+00:00

Feature update for SUSE Manager Salt Bundle

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-22941 UBUNTU-CVE-2022-22941 2026-10-02T15:51:08.324945+00:00

Affected: Ubuntu:Pro:14.04:LTS: salt, Ubuntu:Pro:16.04:LTS: salt, Ubuntu:Pro:18.04:LTS: salt

An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. When configured as a Master-of-Masters, with a publisher_acl, if a user configured in the publisher_acl targets any minion connected to the Syndic, the Salt Master incorrectly interpreted no valid targets as valid, allowing configured users to target any of the minions connected to the syndic with their configured commands. This requires a syndic master combined with publisher_acl configured on the Master-of-Masters, allowing users specified in the publisher_acl to bypass permissions, publishing authorized commands to any configured minion.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2843 WID-SEC-W-2023-2843 — SaltStack Salt: Mehrere Schwachstellen 2026-10-02T15:51:08.324969+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in SaltStack Salt ausnutzen, um Dateien zu manipulieren, einen Denial of Service Zustand herbeizuführen, Privilegien zu erweitern oder beliebigen Programmcode auszuführen.