https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T12:48:50.520036+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2017-35323 cnvd-2017-35323 2026-10-06T12:48:50.526689+00:00 cnvd-2017-35323 https://cve.radiocsirt.org/vuln/euvd-2026-74818 EUVD-2026-74818 2026-10-06T12:48:50.526721+00:00 EUVD-2026-74818 https://cve.radiocsirt.org/vuln/fkie_cve-2017-7549 fkie_cve-2017-7549 2026-10-06T12:48:50.526736+00:00

A flaw was found in instack-undercloud 7.2.0 as packaged in Red Hat OpenStack Platform Pike, 6.1.0 as packaged in Red Hat OpenStack Platform Oacta, 5.3.0 as packaged in Red Hat OpenStack Newton, where pre-install and security policy scripts used insecure temporary files. A local user could exploit this flaw to conduct a symbolic-link attack, allowing them to overwrite the contents of arbitrary files.

 https://cve.radiocsirt.org/vuln/ghsa-53wm-97p6-582f GHSA-53wm-97p6-582f — instack-undercloud vulnerable to symlink attack on tmp files 2026-10-06T12:48:50.526765+00:00

Affected: PyPI: instack-undercloud

A flaw was found in instack-undercloud 7.2.0 as packaged in Red Hat OpenStack Platform Pike, 6.1.0 as packaged in Red Hat OpenStack Platform Oacta, 5.3.0 as packaged in Red Hat OpenStack Newton, where pre-install and security policy scripts used insecure temporary files. A local user could exploit this flaw to conduct a symbolic-link attack, allowing them to overwrite the contents of arbitrary files.

 https://cve.radiocsirt.org/vuln/gsd-2017-7549 gsd-2017-7549 2026-10-06T12:48:50.526789+00:00 gsd-2017-7549 https://cve.radiocsirt.org/vuln/pysec-2017-152 PYSEC-2017-152 2026-10-06T12:48:50.526801+00:00

Affected: PyPI: instack

A flaw was found in instack-undercloud 7.2.0 as packaged in Red Hat OpenStack Platform Pike, 6.1.0 as packaged in Red Hat OpenStack Platform Oacta, 5.3.0 as packaged in Red Hat OpenStack Newton, where pre-install and security policy scripts used insecure temporary files. A local user could exploit this flaw to conduct a symbolic-link attack, allowing them to overwrite the contents of arbitrary files.

 https://cve.radiocsirt.org/vuln/rhsa-2017:2557 RHSA-2017:2557 — Red Hat Security Advisory: instack-undercloud security update 2026-10-06T12:48:50.526820+00:00

instack-undercloud: uses hardcoded /tmp paths