https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 02:41:49 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-277086 EUVD-2026-277086 https://cve.radiocsirt.org/vuln/euvd-2026-277086 https://cve.radiocsirt.org/vuln/fkie_cve-2025-9572 <p>n authorization flaw in Foreman&#39;s GraphQL API allows low-privileged users to access metadata beyond their assigned permissions. Unlike the REST API, which correctly enforces access controls, the GraphQL endpoint does not apply proper filtering, leading to an authorization bypass.</p> <p>n authorization flaw in Foreman&#39;s GraphQL API allows low-privileged users to access metadata beyond their assigned permissions. Unlike the REST API, which correctly enforces access controls, the GraphQL endpoint does not apply proper filtering, leading to an authorization bypass.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-9572 https://cve.radiocsirt.org/vuln/ghsa-gvvp-xfg4-2fr6 <p>n authorization flaw in Foreman&#39;s GraphQL API allows low-privileged users to access metadata beyond their assigned permissions. Unlike the REST API, which correctly enforces access controls, the GraphQL endpoint does not apply proper filtering, leading to an authorization bypass.</p> <p>n authorization flaw in Foreman&#39;s GraphQL API allows low-privileged users to access metadata beyond their assigned permissions. Unlike the REST API, which correctly enforces access controls, the GraphQL endpoint does not apply proper filtering, leading to an authorization bypass.</p> https://cve.radiocsirt.org/vuln/ghsa-gvvp-xfg4-2fr6 https://cve.radiocsirt.org/vuln/rhsa-2025:21886 <p>foreman: Satellite: GraphQL API permission bypass leads to information disclosure</p> <p>foreman: Satellite: GraphQL API permission bypass leads to information disclosure</p> https://cve.radiocsirt.org/vuln/rhsa-2025:21886 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-9572 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: ruby-foreman, Ubuntu:18.04:LTS: ruby-foreman, Ubuntu:20.04:LTS: ruby-foreman, Ubuntu:22.04:LTS: ruby-foreman, Ubuntu:24.04:LTS: ruby-foreman, Ubuntu:25.10: ruby-foreman, Ubuntu:26.04:LTS: ruby-foreman</p> <p>n authorization flaw in Foreman&#39;s GraphQL API allows low-privileged users to access metadata beyond their assigned permissions. Unlike the REST API, which correctly enforces access controls, the GraphQL endpoint does not apply proper filtering, leading to an authorization bypass.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: ruby-foreman, Ubuntu:18.04:LTS: ruby-foreman, Ubuntu:20.04:LTS: ruby-foreman, Ubuntu:22.04:LTS: ruby-foreman, Ubuntu:24.04:LTS: ruby-foreman, Ubuntu:25.10: ruby-foreman, Ubuntu:26.04:LTS: ruby-foreman</p> <p>n authorization flaw in Foreman&#39;s GraphQL API allows low-privileged users to access metadata beyond their assigned permissions. Unlike the REST API, which correctly enforces access controls, the GraphQL endpoint does not apply proper filtering, leading to an authorization bypass.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-9572 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2652 <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Red Hat Satellite für Red Hat Enterprise Linux ausnutzen, um Sicherheitsmaßnahmen zu umgehen und so vertrauliche Informationen offenzulegen.</p> <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Red Hat Satellite für Red Hat Enterprise Linux ausnutzen, um Sicherheitsmaßnahmen zu umgehen und so vertrauliche Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2652