https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T17:31:43.494132+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-271125 EUVD-2026-271125 2026-10-03T17:31:43.502136+00:00 EUVD-2026-271125 https://cve.radiocsirt.org/vuln/fkie_cve-2025-14025 fkie_cve-2025-14025 2026-10-03T17:31:43.502172+00:00

A flaw was found in Ansible Automation Platform (AAP). Read-only scoped OAuth2 API Tokens in AAP, are enforced at the Gateway level for Gateway-specific operations. However, this vulnerability allows read-only tokens to perform write operations on backend services (e.g., Controller, Hub, EDA). If this flaw were exploited, an attacker‘s capabilities would only be limited by role based access controls (RBAC).

 https://cve.radiocsirt.org/vuln/ghsa-3j6w-p6vm-g8hg GHSA-3j6w-p6vm-g8hg 2026-10-03T17:31:43.502207+00:00

A flaw was found in Ansible Automation Platform (AAP). Read-only scoped OAuth2 API Tokens in AAP, are enforced at the Gateway level for Gateway-specific operations. However, this vulnerability allows read-only tokens to perform write operations on backend services (e.g., Controller, Hub, EDA). If this flaw were exploited, an attacker‘s capabilities would only be limited by role based access controls (RBAC).

 https://cve.radiocsirt.org/vuln/rhsa-2026:0360 RHSA-2026:0360 — Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.6 Product Security Update 2026-10-03T17:31:43.502225+00:00

ansible-automation-platform/aap-gateway: aap-gateway: Read-only Personal Access Token (PAT) bypasses write restrictions

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0050 WID-SEC-W-2026-0050 — Red Hat Ansible Automation Platform (aap-gateway): Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2026-10-03T17:31:43.502244+00:00

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Red Hat Ansible Automation Platform ausnutzen, um Sicherheitsvorkehrungen zu umgehen.