https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T19:32:12.060875+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2012-10048 CVE-2012-10048 — Zenoss 3.x showDaemonXMLConfig Command Execution 2026-10-15T19:32:12.062017+00:00

Affected: Zenoss, Inc. Zenoss Core

Zenoss Core 3.x contains a command injection vulnerability in the showDaemonXMLConfig endpoint. The daemon parameter is passed directly to a Popen() call in ZenossInfo.py without proper sanitation, allowing authenticated users to execute arbitrary commands on the server as the zenoss user.