https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T23:30:23.899076+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2022:6313 ALSA-2022:6313 — Important: pcs security update 2026-10-02T23:30:23.907963+00:00

Affected: AlmaLinux:9: pcs, AlmaLinux:9: pcs-snmp

The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities.

Security Fix(es):

* pcs: obtaining an authentication token for hacluster user could lead to privilege escalation (CVE-2022-2735)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2022-05554 bdu:2022-05554 2026-10-02T23:30:23.908017+00:00 bdu:2022-05554 https://cve.radiocsirt.org/vuln/euvd-2026-12484 EUVD-2026-12484 2026-10-02T23:30:23.908034+00:00 EUVD-2026-12484 https://cve.radiocsirt.org/vuln/fkie_cve-2022-2735 fkie_cve-2022-2735 2026-10-02T23:30:23.908045+00:00

A vulnerability was found in the PCS project. This issue occurs due to incorrect permissions on a Unix socket used for internal communication between PCS daemons. A privilege escalation could happen by obtaining an authentication token for a hacluster user. With the "hacluster" token, this flaw allows an attacker to have complete control over the cluster managed by PCS.

 https://cve.radiocsirt.org/vuln/ghsa-7xr9-rmm4-cq6v GHSA-7xr9-rmm4-cq6v 2026-10-02T23:30:23.908068+00:00

A vulnerability was found in the PCS project. This issue occurs due to incorrect permissions on a Unix socket used for internal communication between PCS daemons. A privilege escalation could happen by obtaining an authentication token for a hacluster user. With the "hacluster" token, this flaw allows an attacker to have complete control over the cluster managed by PCS.

 https://cve.radiocsirt.org/vuln/gsd-2022-2735 gsd-2022-2735 2026-10-02T23:30:23.908084+00:00 gsd-2022-2735 https://cve.radiocsirt.org/vuln/oesa-2022-1961 OESA-2022-1961 — pcs security update 2026-10-02T23:30:23.908093+00:00

Affected: openEuler:20.03-LTS-SP1: pcs, openEuler:20.03-LTS-SP3: pcs, openEuler:22.03-LTS: pcs

Security Fix(es): A vulnerability was found in the PCS project. This issue occurs due to incorrect permissions on a Unix socket used for internal communication between PCS daemons. A privilege escalation could happen by obtaining an authentication token for a hacluster user. With the "hacluster" token, this flaw allows an attacker to have complete control over the cluster managed by PCS.(CVE-2022-2735)

 https://cve.radiocsirt.org/vuln/rhsa-2022:6312 RHSA-2022:6312 — Red Hat Security Advisory: pcs security update 2026-10-02T23:30:23.908118+00:00

pcs: obtaining an authentication token for hacluster user could lead to privilege escalation

 https://cve.radiocsirt.org/vuln/rhsa-2022:6313 RHSA-2022:6313 — Red Hat Security Advisory: pcs security update 2026-10-02T23:30:23.908135+00:00

pcs: obtaining an authentication token for hacluster user could lead to privilege escalation

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-2735 UBUNTU-CVE-2022-2735 2026-10-02T23:30:23.908149+00:00

Affected: Ubuntu:Pro:16.04:LTS: pcs, Ubuntu:Pro:22.04:LTS: pcs

A vulnerability was found in the PCS project. This issue occurs due to incorrect permissions on a Unix socket used for internal communication between PCS daemons. A privilege escalation could happen by obtaining an authentication token for a hacluster user. With the "hacluster" token, this flaw allows an attacker to have complete control over the cluster managed by PCS.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1255 WID-SEC-W-2022-1255 — Red Hat Enterprise Linux (pcs): Schwachstelle ermöglicht Privilegieneskalation 2026-10-02T23:30:23.908169+00:00

Ein lokaler Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um seine Privilegien zu erhöhen.