https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T03:11:34.306630+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-112096 EUVD-2026-112096 2026-10-05T03:11:34.310315+00:00 EUVD-2026-112096 https://cve.radiocsirt.org/vuln/fkie_cve-2012-3866 fkie_cve-2012-3866 2026-10-05T03:11:34.310353+00:00

lib/puppet/defaults.rb in Puppet 2.7.x before 2.7.18, and Puppet Enterprise before 2.5.2, uses 0644 permissions for last_run_report.yaml, which allows local users to obtain sensitive configuration information by leveraging access to the puppet master server to read this file.

 https://cve.radiocsirt.org/vuln/ghsa-8jxj-9r5f-w3m2 GHSA-8jxj-9r5f-w3m2 — Puppet allows local users to obtain sensitive configuration information 2026-10-05T03:11:34.310387+00:00

Affected: RubyGems: puppet

`lib/puppet/defaults.rb` in Puppet 2.7.x before 2.7.18, and Puppet Enterprise before 2.5.2, uses 0644 permissions for `last_run_report.yaml`, which allows local users to obtain sensitive configuration information by leveraging access to the puppet master server to read this file.

 https://cve.radiocsirt.org/vuln/gsd-2012-3866 gsd-2012-3866 2026-10-05T03:11:34.310412+00:00 gsd-2012-3866 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10581-1 openSUSE-SU-2024:10581-1 — ruby2.2-rubygem-puppet-3.8.7-2.2 on GA media 2026-10-05T03:11:34.310424+00:00

ruby2.2-rubygem-puppet-3.8.7-2.2 on GA media