Ansible AWX Detection

Detects Ansible AWX Instance !/usr/bin/env python3 -- coding: utf-8 -- """Detects Ansible AWX Instance.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Ansible AWX Detection', 'description': 'Detects Ansible AWX...

CVE-2026-12726

A flaw was found in the AWX GitHub webhook integration. When processing GitHub pullrequest webhooks, the controller stores the pullrequest.statusesurl value from the webhook payload without validating that it points to a trusted GitHub API endpoint. If a job template is configured with a GitHub...

CVE-2026-12726

A flaw was found in the AWX GitHub webhook integration. When processing GitHub pullrequest webhooks, the controller stores the pullrequest.statusesurl value from the webhook payload without validating that it points to a trusted GitHub API endpoint. If a job template is configured with a GitHub...

CVE-2026-12726 Awx: automation-controller: awx: github webhook second-order ssrf via unvalidated statuses_url exfiltrates pat credential

A flaw was found in the AWX GitHub webhook integration. When processing GitHub pullrequest webhooks, the controller stores the pullrequest.statusesurl value from the webhook payload without validating that it points to a trusted GitHub API endpoint. If a job template is configured with a GitHub...

CVE-2025-69227 vulnerabilities

Vulnerabilities for packages: awx, checkov, kubeflow-pipelines-visualization-server, kserve, dask-kubernetes, request-1276, py3-vllm-cuda-12.4, airflow, open-webui, py3-cassandra-medusa, py3.13-scanner-test-libraries-aiohttp, apache-beam-python-3.11-sdk, authentik...

Ansible AWX Installed (Linux/UNIX)

Binary data ansibleawxnixinstalled.nbin...

Ansible AWX WebUI Detection

Binary data ansibleawxdetect.nbin...

WS-2018-0166

Ansible awx versions 1.0.5 and 1.0.6 is vulnerable to cross-site request forgery CSRF in awx/api/authentication.py. An attacker could exploit this by tricking already authenticated users into visiting a malicious site and hijacking the authtoken cookie...