Lucene search
+L

7 matches found

NVD
NVD
•added 2026/09/23 8:17 p.m.•20 views

CVE-2026-84691

A flaw was found in Red Hat Ansible Automation Platform's automation- controller. The setting that formats the log message emitted for API 4XX errors is an administrator-controlled Python format-string template that is rendered with a live user object as an argument. Because Python string...

8.7CVSS0.002EPSS
SaveExploits0References6
CVE
CVE
•added 2026/09/23 7:02 p.m.•44 views

CVE-2026-84691

A format-string injection vulnerability exists in the automation-controller component of Red Hat Ansible Automation Platform . The flaw arises because a setting for formatting API 4XX error log messages uses an administrator-controlled Python format-string template rendered with a live user objec...

8.7CVSS5.7AI score0.002EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/09/23 7:02 p.m.•17 views

EUVD-2026-85572

A flaw was found in Red Hat Ansible Automation Platform's automation- controller. The setting that formats the log message emitted for API 4XX errors is an administrator-controlled Python format-string template that is rendered with a live user object as an argument. Because Python string...

8.7CVSS5.7AI score0.002EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/09/23 6:58 p.m.•17 views

CVE-2026-84691

A flaw was found in Red Hat Ansible Automation Platform's automation- controller. The setting that formats the log message emitted for API 4XX errors is an administrator-controlled Python format-string template that is rendered with a live user object as an argument. Because Python string...

8.7CVSS5.7AI score0.002EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/23 12:00 a.m.•10 views

PT-2026-97528

Name of the Vulnerable Software and Affected Versions Red Hat Ansible Automation Platform automation-controller affected versions not specified Description A flaw exists in the automation-controller where the log message formatting for API 4XX errors uses an administrator-controlled Python...

8.7CVSS5.7AI score0.002EPSS
SaveExploits0References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/23 12:00 a.m.•14 views

CVE-2026-84691: Use of Externally-Controlled Format String

A flaw was found in Red Hat Ansible Automation Platform's automation- controller. The setting that formats the log message emitted for API 4XX errors is an administrator-controlled Python format-string template that is rendered with a live user object as an argument. Because Python string...

8.7CVSS5.7AI score0.002EPSS
SaveExploits0References2
Hacker One
Hacker One
•added 2021/01/21 8:18 p.m.•61 views

Mail.ru: Debug Mode Leak Critical Information [ AWS Keys , SMTP , Database , Django Secret Key ( RCE ) , Dodoc , Telegram , Twilio .. ]

Debug mode was enabled in legium-back.corp.mail.ru leaking some potenitially sensitive information Debug mode was enabled in legium-back.corp.mail.ru leaking some potenitially sensitive information...

2.6AI score
SaveExploits0
Rows per page
Query Builder