https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T13:58:38.928284+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-363627 EUVD-2026-363627 2026-10-02T13:58:38.931039+00:00 EUVD-2026-363627 https://cve.radiocsirt.org/vuln/fkie_cve-2025-5459 fkie_cve-2025-5459 2026-10-02T13:58:38.931070+00:00

A user with specific node group editing permissions and a specially crafted class parameter could be used to execute commands as root on the primary host. It affects Puppet Enterprise versions 2018.1.8 through 2023.8.3 and 2025.3 and has been resolved in versions 2023.8.4 and 2025.4.0.

 https://cve.radiocsirt.org/vuln/ghsa-2q8m-2xcf-6rrj GHSA-2q8m-2xcf-6rrj 2026-10-02T13:58:38.931101+00:00

A user with specific node group editing permissions and a specially crafted class parameter could be used to execute commands as root on the primary host. It affects Puppet Enterprise versions 2018.1.8 through 2023.8.3 and 2025.3 and has been resolved in versions 2023.8.4 and 2025.4.0.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1401 WID-SEC-W-2025-1401 — Puppet: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit Administratorrechten 2026-10-02T13:58:38.931118+00:00

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Puppet ausnutzen, um beliebigen Programmcode mit Administratorrechten auszuführen.