https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T19:38:59.742248+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-09015 bdu:2025-09015 2026-10-02T19:39:00.345439+00:00 bdu:2025-09015 https://cve.radiocsirt.org/vuln/brew-ansible-cve-2024-11079 BREW-ansible-CVE-2024-11079 — Ansible-core: unsafe tagging bypass via hostvars object in ansible-core 2026-10-02T19:39:00.345471+00:00

Affected: Homebrew: ansible

A flaw was found in Ansible-Core. This vulnerability allows attackers to bypass unsafe content protections using the hostvars object to reference and execute templated content. This issue can lead to arbitrary code execution if remote data or module outputs are improperly templated within playbooks.

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0627 certfr-2026-avi-0627 — De multiples vulnérabilités ont été découvertes dans les produits Splunk. Certaines d'entre elles permettent à un attaq… 2026-10-02T19:39:00.345503+00:00 certfr-2026-avi-0627 https://cve.radiocsirt.org/vuln/euvd-2026-331239 EUVD-2026-331239 2026-10-02T19:39:00.345534+00:00 EUVD-2026-331239 https://cve.radiocsirt.org/vuln/fkie_cve-2024-11079 fkie_cve-2024-11079 2026-10-02T19:39:00.345547+00:00

A flaw was found in Ansible-Core. This vulnerability allows attackers to bypass unsafe content protections using the hostvars object to reference and execute templated content. This issue can lead to arbitrary code execution if remote data or module outputs are improperly templated within playbooks.

 https://cve.radiocsirt.org/vuln/ghsa-99w6-3xph-cx78 GHSA-99w6-3xph-cx78 — Ansible-Core vulnerable to content protections bypass 2026-10-02T19:39:00.345569+00:00

Affected: PyPI: ansible-core

A flaw was found in Ansible-Core. This vulnerability allows attackers to bypass unsafe content protections using the hostvars object to reference and execute templated content. This issue can lead to arbitrary code execution if remote data or module outputs are improperly templated within playbooks.

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:14545-1 openSUSE-SU-2024:14545-1 — ansible-core-2.18.1-1.1 on GA media 2026-10-02T19:39:00.345591+00:00

ansible-core-2.18.1-1.1 on GA media

 https://cve.radiocsirt.org/vuln/pysec-2026-1123 PYSEC-2026-1123 — Ansible-Core vulnerable to content protections bypass 2026-10-02T19:39:00.345608+00:00

Affected: PyPI: ansible-core

A flaw was found in Ansible-Core. This vulnerability allows attackers to bypass unsafe content protections using the hostvars object to reference and execute templated content. This issue can lead to arbitrary code execution if remote data or module outputs are improperly templated within playbooks.

 https://cve.radiocsirt.org/vuln/rhsa-2024:10770 RHSA-2024:10770 — Red Hat Security Advisory: Red Hat Ansible Automation Platform Execution Environments Container Release Update 2026-10-02T19:39:00.345626+00:00

ansible-core: Unsafe Tagging Bypass via hostvars Object in Ansible-Core

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-11079 UBUNTU-CVE-2024-11079 2026-10-02T19:39:00.345642+00:00

Affected: Ubuntu:Pro:14.04:LTS: ansible, Ubuntu:Pro:16.04:LTS: ansible, Ubuntu:Pro:18.04:LTS: ansible, Ubuntu:Pro:20.04:LTS: ansible, Ubuntu:22.04:LTS: ansible-core, Ubuntu:Pro:22.04:LTS: ansible, Ubuntu:24.04:LTS: ansible, Ubuntu:24.04:LTS: ansible-core, Ubuntu:25.10: ansible, Ubuntu:25.10: ansible-core and 2 more

A flaw was found in Ansible-Core. This vulnerability allows attackers to bypass unsafe content protections using the hostvars object to reference and execute templated content. This issue can lead to arbitrary code execution if remote data or module outputs are improperly templated within playbooks.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3404 WID-SEC-W-2024-3404 — Ansible-Core: Schwachstelle ermöglicht Codeausführung 2026-10-02T19:39:00.345678+00:00

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Ansible, Red Hat Ansible Automation Platform und Red Hat Enterprise Linux ausnutzen, um beliebigen Code auszuführen oder um Sicherheitsmaßnahmen zu umgehen.