https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T01:40:33.755502+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2023:4706 ALSA-2023:4706 — Important: subscription-manager security update 2026-10-03T01:40:33.930243+00:00

Affected: AlmaLinux:8: dnf-plugin-subscription-manager, AlmaLinux:8: python3-cloud-what, AlmaLinux:8: python3-subscription-manager-rhsm, AlmaLinux:8: python3-syspurpose, AlmaLinux:8: subscription-manager, AlmaLinux:8: subscription-manager-migration, AlmaLinux:8: subscription-manager-plugin-ostree, AlmaLinux:8: subscription-manager-rhsm-certificates

The subscription-manager packages provide programs and libraries to allow users to manage subscriptions and yum repositories from the AlmaLinux entitlement platform.

Security Fix(es):

* subscription-manager: inadequate authorization of com.AlmaLinux.RHSM1 D-Bus interface allows local users to modify configuration (CVE-2023-3899)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2023-04878 bdu:2023-04878 2026-10-03T01:40:33.930311+00:00 bdu:2023-04878 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0950 certfr-2023-avi-0950 — De multiples vulnérabilités ont été découvertes dans <span class="textit">Juniper Secure Analytics</span>. Certaines d'… 2026-10-03T01:40:33.930328+00:00 certfr-2023-avi-0950 https://cve.radiocsirt.org/vuln/euvd-2026-261415 EUVD-2026-261415 2026-10-03T01:40:33.930344+00:00 EUVD-2026-261415 https://cve.radiocsirt.org/vuln/fkie_cve-2023-3899 fkie_cve-2023-3899 2026-10-03T01:40:33.930354+00:00

A vulnerability was found in subscription-manager that allows local privilege escalation due to inadequate authorization. The D-Bus interface com.redhat.RHSM1 exposes a significant number of methods to all users that could change the state of the registration. By using the com.redhat.RHSM1.Config.SetAll() method, a low-privileged local user could tamper with the state of the registration, by unregistering the system or by changing the current entitlements. This flaw allows an attacker to set arbitrary configuration directives for /etc/rhsm/rhsm.conf, which can be abused to cause a local privilege escalation to an unconfined root.

 https://cve.radiocsirt.org/vuln/ghsa-wp8h-m67c-cxpw GHSA-wp8h-m67c-cxpw 2026-10-03T01:40:33.930377+00:00

A vulnerability was found in subscription-manager that allows local privilege escalation due to inadequate authorization. The D-Bus interface com.redhat.RHSM1 exposes a significant number of methods to all users that could change the state of the registration. By using the com.redhat.RHSM1.Config.SetAll() method, a low-privileged local user could tamper with the state of the registration, by unregistering the system or by changing the current entitlements. This flaw allows an attacker to set arbitrary configuration directives for /etc/rhsm/rhsm.conf, which can be abused to cause a local privilege escalation to an unconfined root.

 https://cve.radiocsirt.org/vuln/gsd-2023-3899 gsd-2023-3899 2026-10-03T01:40:33.930394+00:00 gsd-2023-3899 https://cve.radiocsirt.org/vuln/rhsa-2023:4701 RHSA-2023:4701 — Red Hat Security Advisory: subscription-manager security update 2026-10-03T01:40:33.930404+00:00

subscription-manager: inadequate authorization of com.redhat.RHSM1 D-Bus interface allows local users to modify configuration

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2118 WID-SEC-W-2023-2118 — Red Hat Enterprise Linux (subscription-manager): Schwachstelle ermöglicht Privilegieneskalation 2026-10-03T01:40:33.930421+00:00

Ein lokaler Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um seine Privilegien zu erhöhen.