https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 15:24:59 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-273718 EUVD-2026-273718 https://cve.radiocsirt.org/vuln/euvd-2026-273718 https://cve.radiocsirt.org/vuln/fkie_cve-2025-9909 <p>A flaw was found in the Red Hat Ansible Automation Platform Gateway route creation component. This vulnerability allows credential theft via the creation of misleading routes using a double-slash (//) prefix in the gateway_path. A malicious or socially engineered administrator can configure a honey-pot route to intercept and exfiltrate user credentials, potentially maintaining persistent access or creating a backdoor even after their permissions are revoked.</p> <p>A flaw was found in the Red Hat Ansible Automation Platform Gateway route creation component. This vulnerability allows credential theft via the creation of misleading routes using a double-slash (//) prefix in the gateway_path. A malicious or socially engineered administrator can configure a honey-pot route to intercept and exfiltrate user credentials, potentially maintaining persistent access or creating a backdoor even after their permissions are revoked.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-9909 https://cve.radiocsirt.org/vuln/ghsa-2fx4-vwf2-pw99 <p>A flaw was found in the Red Hat Ansible Automation Platform Gateway route creation component. This vulnerability allows credential theft via the creation of misleading routes using a double-slash (//) prefix in the gateway_path. A malicious or socially engineered administrator can configure a honey-pot route to intercept and exfiltrate user credentials, potentially maintaining persistent access or creating a backdoor even after their permissions are revoked.</p> <p>A flaw was found in the Red Hat Ansible Automation Platform Gateway route creation component. This vulnerability allows credential theft via the creation of misleading routes using a double-slash (//) prefix in the gateway_path. A malicious or socially engineered administrator can configure a honey-pot route to intercept and exfiltrate user credentials, potentially maintaining persistent access or creating a backdoor even after their permissions are revoked.</p> https://cve.radiocsirt.org/vuln/ghsa-2fx4-vwf2-pw99 https://cve.radiocsirt.org/vuln/rhsa-2025:21768 <p>aap-gateway: Improper Path Validation in Gateway Allows Credential Exfiltration github.com/quic-go/quic-go: quic-go Crash Due to Premature HANDSHAKE_DONE Frame</p> <p>aap-gateway: Improper Path Validation in Gateway Allows Credential Exfiltration github.com/quic-go/quic-go: quic-go Crash Due to Premature HANDSHAKE_DONE Frame</p> https://cve.radiocsirt.org/vuln/rhsa-2025:21768