https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T19:05:26.476053+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-260408 EUVD-2026-260408 2026-10-04T19:05:26.481186+00:00 EUVD-2026-260408 https://cve.radiocsirt.org/vuln/fkie_cve-2025-5988 fkie_cve-2025-5988 2026-10-04T19:05:26.481235+00:00

A flaw was found in the Ansible aap-gateway. Cross-site request forgery (CSRF) origin checking is not done on requests from the gateway to external components, such as the controller, hub, and eda.

 https://cve.radiocsirt.org/vuln/ghsa-w8g9-rc94-7pq8 GHSA-w8g9-rc94-7pq8 2026-10-04T19:05:26.481329+00:00

A flaw was found in the Ansible aap-gateway. Cross-site request forgery (CSRF) origin checking is not done on requests from the gateway to external components, such as the controller, hub, and eda.

 https://cve.radiocsirt.org/vuln/rhsa-2025:12772 RHSA-2025:12772 — Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update 2026-10-04T19:05:26.481359+00:00

aap-gateway: CSRF origin checking is disabled python3.11-django-ansible-base: Sensitive Authenticator Secrets Returned in Clear Text via API in AAP

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1715 WID-SEC-W-2025-1715 — Red Hat Ansible Automation Platform: Schwachstelle ermöglicht Offenlegung von Informationen 2026-10-04T19:05:26.481393+00:00

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Red Hat Ansible Automation Platform ausnutzen, um Informationen offenzulegen.