https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 03:56:50 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-341798 EUVD-2026-341798 https://cve.radiocsirt.org/vuln/euvd-2026-341798 https://cve.radiocsirt.org/vuln/fkie_cve-2026-56115 <p>Bootimus through 0.1.70 contains a broken access control vulnerability that allows authenticated low-privileged users to perform administrative actions by exploiting missing role enforcement in the JWTMiddleware function in internal/auth/auth.go, which validates JWT tokens and account status but fails to inspect the is_admin flag. Attackers can send requests to any endpoint under the /api/users path to create new administrator accounts or reset administrator passwords, thereby gaining full control of the server and the ability to modify boot menus and installation scripts served to PXE clients.</p> <p>Bootimus through 0.1.70 contains a broken access control vulnerability that allows authenticated low-privileged users to perform administrative actions by exploiting missing role enforcement in the JWTMiddleware function in internal/auth/auth.go, which validates JWT tokens and account status but fails to inspect the is_admin flag. Attackers can send requests to any endpoint under the /api/users path to create new administrator accounts or reset administrator passwords, thereby gaining full control of the server and the ability to modify boot menus and installation scripts served to PXE clients.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-56115 https://cve.radiocsirt.org/vuln/ghsa-vhmp-9f3g-3f36 <p>dhcpcd through 10.3.2, fixed in commit 2f00c7b, contains a one-byte stack out-of-bounds write vulnerability in dhcp6_makemessage() in src/dhcp6.c that allows unauthenticated same-link attackers to write beyond a fixed local buffer by serializing an oversized RFC6603 OPTION_PD_EXCLUDE option body. Attackers can send a crafted DHCPv6 ADVERTISE message containing an IA_PD IAPREFIX /0 with a valid OPTION_PD_EXCLUDE using an exclude prefix length of /121 through /128 to trigger the out-of-bounds write and potentially corrupt adjacent stack memory.</p> <p>dhcpcd through 10.3.2, fixed in commit 2f00c7b, contains a one-byte stack out-of-bounds write vulnerability in dhcp6_makemessage() in src/dhcp6.c that allows unauthenticated same-link attackers to write beyond a fixed local buffer by serializing an oversized RFC6603 OPTION_PD_EXCLUDE option body. Attackers can send a crafted DHCPv6 ADVERTISE message containing an IA_PD IAPREFIX /0 with a valid OPTION_PD_EXCLUDE using an exclude prefix length of /121 through /128 to trigger the out-of-bounds write and potentially corrupt adjacent stack memory.</p> https://cve.radiocsirt.org/vuln/ghsa-vhmp-9f3g-3f36 https://cve.radiocsirt.org/vuln/msrc_cve-2026-56115 msrc_CVE-2026-56115 https://cve.radiocsirt.org/vuln/msrc_cve-2026-56115 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11473-1 <p>dhcpcd-10.5.0-1.1 on GA media</p> <p>dhcpcd-10.5.0-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:11473-1 https://cve.radiocsirt.org/vuln/suse-su-2026:23400-1 <p>Security update for dhcpcd</p> <p>Security update for dhcpcd</p> https://cve.radiocsirt.org/vuln/suse-su-2026:23400-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-56115 <p><strong>Affected:</strong> Ubuntu:25.10: dhcpcd</p> <p>Bootimus through 0.1.70 contains a broken access control vulnerability that allows authenticated low-privileged users to perform administrative actions by exploiting missing role enforcement in the JWTMiddleware function in internal/auth/auth.go, which validates JWT tokens and account status but fails to inspect the is_admin flag. Attackers can send requests to any endpoint under the /api/users path to create new administrator accounts or reset administrator passwords, thereby gaining full control of the server and the ability to modify boot menus and installation scripts served to PXE clients.</p> <p><strong>Affected:</strong> Ubuntu:25.10: dhcpcd</p> <p>Bootimus through 0.1.70 contains a broken access control vulnerability that allows authenticated low-privileged users to perform administrative actions by exploiting missing role enforcement in the JWTMiddleware function in internal/auth/auth.go, which validates JWT tokens and account status but fails to inspect the is_admin flag. Attackers can send requests to any endpoint under the /api/users path to create new administrator accounts or reset administrator passwords, thereby gaining full control of the server and the ability to modify boot menus and installation scripts served to PXE clients.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-56115 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2046 <p>Ein Angreifer kann mehrere Schwachstellen in dhcpcd ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in dhcpcd ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2046