https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 22:45:53 +0000 https://cve.radiocsirt.org/vuln/cve-2026-41861 <p><strong>Affected:</strong> CloudFoundry Foundation BOSH</p> <p>Path Traversal in BOSH-Ecosystem / BOSH allows an IaaS-metadata attacker to make the agent write a root-owned file with partially attacker-controlled body to any path ending in .network, and create any missing parent directories with mode 0777 via network Alias on Ubuntu.</p> <p>Affected versions: BOSH agent &lt; v2.847.0 (jammy &lt;= v1.1202, or noble &lt;= v1.364). Lower bound unspecified in advisory (&#34;All bosh agent versions&#34;).</p> <p><strong>Affected:</strong> CloudFoundry Foundation BOSH</p> <p>Path Traversal in BOSH-Ecosystem / BOSH allows an IaaS-metadata attacker to make the agent write a root-owned file with partially attacker-controlled body to any path ending in .network, and create any missing parent directories with mode 0777 via network Alias on Ubuntu.</p> <p>Affected versions: BOSH agent &lt; v2.847.0 (jammy &lt;= v1.1202, or noble &lt;= v1.364). Lower bound unspecified in advisory (&#34;All bosh agent versions&#34;).</p> https://cve.radiocsirt.org/vuln/cve-2026-41861