Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 13:58:25 +0000 EUVD-2026-363627 https://cve.radiocsirt.org/vuln/euvd-2026-363627 EUVD-2026-363627 https://cve.radiocsirt.org/vuln/euvd-2026-363627 fkie_cve-2025-5459 https://cve.radiocsirt.org/vuln/fkie_cve-2025-5459 <p>A user with specific node group editing permissions and a specially crafted class parameter could be used to execute commands as root on the primary host. It affects Puppet Enterprise versions 2018.1.8 through 2023.8.3 and 2025.3 and has been resolved in versions 2023.8.4 and 2025.4.0.</p> <p>A user with specific node group editing permissions and a specially crafted class parameter could be used to execute commands as root on the primary host. It affects Puppet Enterprise versions 2018.1.8 through 2023.8.3 and 2025.3 and has been resolved in versions 2023.8.4 and 2025.4.0.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-5459 GHSA-2q8m-2xcf-6rrj https://cve.radiocsirt.org/vuln/ghsa-2q8m-2xcf-6rrj <p>A user with specific node group editing permissions and a specially crafted class parameter could be used to execute commands as root on the primary host. It affects Puppet Enterprise versions 2018.1.8 through 2023.8.3 and 2025.3 and has been resolved in versions 2023.8.4 and 2025.4.0.</p> <p>A user with specific node group editing permissions and a specially crafted class parameter could be used to execute commands as root on the primary host. It affects Puppet Enterprise versions 2018.1.8 through 2023.8.3 and 2025.3 and has been resolved in versions 2023.8.4 and 2025.4.0.</p> https://cve.radiocsirt.org/vuln/ghsa-2q8m-2xcf-6rrj WID-SEC-W-2025-1401 — Puppet: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit Administratorrechten https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1401 <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Puppet ausnutzen, um beliebigen Programmcode mit Administratorrechten auszuführen.</p> <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Puppet ausnutzen, um beliebigen Programmcode mit Administratorrechten auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1401