Most recent entries from all

bdu:2025-10868

EUVD-2026-244235

fkie_cve-2025-22236

Minion event bus authorization bypass. An attacker with access to a minion key can craft a message which may be able to execute a job on other minions (>= 3007.0).

GHSA-jh7c-xh74-h76f — Salt has minion event bus authorization bypass vulnerability

Affected: PyPI: salt

Minion event bus authorization bypass. An attacker with access to a minion key can craft a message which may be able to execute a job on other minions (>= 3007.0).

openSUSE-SU-2025:15295-1 — python311-salt-3006.0-41.1 on GA media

python311-salt-3006.0-41.1 on GA media

PYSEC-2026-1899 — Salt has minion event bus authorization bypass vulnerability

Affected: PyPI: salt

Minion event bus authorization bypass. An attacker with access to a minion key can craft a message which may be able to execute a job on other minions (>= 3007.0).

SUSE-EL-9-CLIENT-TOOLS-2025-2499 — Security update 5.0.5 for Multi-Linux Manager Salt Bundle

Security update 5.0.5 for Multi-Linux Manager Salt Bundle

UBUNTU-CVE-2025-22236

Affected: Ubuntu:Pro:14.04:LTS: salt, Ubuntu:Pro:16.04:LTS: salt, Ubuntu:Pro:18.04:LTS: salt, Ubuntu:22.04:LTS: salt

Minion event bus authorization bypass. An attacker with access to a minion key can craft a message which may be able to execute a job on other minions (>= 3007.0).

WID-SEC-W-2025-1321 — SaltStack Salt: Mehrere Schwachstellen

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in SaltStack Salt ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Dateien zu manipulieren, beliebigen Programmcode auszuführen, einen Denial-of-Service auszulösen oder weitere nicht spezifizierte Auswirkungen zu erzielen.