https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T02:36:52.786120+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2021-25315 CVE-2021-25315 — salt-api unauthenticated remote code execution 2026-10-03T02:36:52.818362+00:00

Affected: SUSE Linux Enterprise Server 15 SP 3, openSUSE Tumbleweed

CWE - CWE-287: Improper Authentication vulnerability in SUSE Linux Enterprise Server 15 SP 3; openSUSE Tumbleweed allows local attackers to execute arbitrary code via salt without the need to specify valid credentials. This issue affects: SUSE Linux Enterprise Server 15 SP 3 salt versions prior to 3002.2-3. openSUSE Tumbleweed salt version 3002.2-2.1 and prior versions. This issue affects: SUSE Linux Enterprise Server 15 SP 3 salt versions prior to 3002.2-3. openSUSE Tumbleweed salt version 3002.2-2.1 and prior versions.

 https://cve.radiocsirt.org/vuln/ghsa-pmj6-9f8c-8g2m GHSA-pmj6-9f8c-8g2m — Saltstack Salt Unauthenticated Arbitrary Code Execution 2026-10-03T02:36:52.818424+00:00

Affected: PyPI: salt

A Incorrect Implementation of Authentication Algorithm vulnerability in of SUSE SUSE Linux Enterprise Server 15 SP 3; openSUSE Tumbleweed allows local attackers to execute arbitrary code via salt without the need to specify valid credentials. This issue affects: SUSE SUSE Linux Enterprise Server 15 SP 3 salt versions prior to 3002.2-3. openSUSE Tumbleweed salt version 3002.2-2.1 and prior versions.