247 matches found
CLEANSTART-2026-TK35937 Security fix for CVE-2024-10006 applied in: opentofu-fips 1.10.9-r0, opentofu-fips 1.7.10-r1, opentofu-fips 1.8.11-r1, rundeck 6.0.0-r0
CVE-2024-10006 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-AW78522 Security fix for CVE-2024-10005 applied in: opentofu-fips 1.10.9-r0, opentofu-fips 1.7.10-r1, opentofu-fips 1.8.11-r1, rundeck 6.0.0-r0
CVE-2024-10005 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-GO18294 Security fix for CVE-2026-22746 applied in: apache-nifi 2.7.2-r7, cloud-config-server 4.1.7-r2, cloud-config-server 4.2.4-r0, cloud-config-server 4.3.2-r2, cloud-config-server 4.3.4-r0, kafka-ui 1.4.2-r6, rundeck 6.0.0-r0
CVE-2026-22746 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-WO51602 Security fix for CVE-2026-22751 applied in: apache-nifi 2.7.2-r7, cloud-config-server 4.1.7-r2, cloud-config-server 4.2.4-r0, cloud-config-server 4.3.2-r2, cloud-config-server 4.3.4-r0, kafka-ui 1.4.2-r6, rundeck 6.0.0-r0
CVE-2026-22751 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-DV00457 Security fix for CVE-2026-41854 applied in: apache-nifi 2.6.0-r3, apache-nifi-registry 2.9.0-r3, rundeck 6.0.0-r0
CVE-2026-41854 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-FS83824 Security fix for CVE-2026-41851 applied in: activemq 5.19.8-r3, apache-hive 4.1.0-r5, apache-nifi 2.6.0-r3, apache-nifi-registry 2.9.0-r3, rundeck 6.0.0-r0, spring-boot 3.4.13-r2
CVE-2026-41851 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-ZS92015 Security fix for CVE-2026-5795 applied in: rundeck 6.0.0-r0
Security vulnerability affects the rundeck package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-JD53485 Security fix for CVE-2026-41841 applied in: activemq 5.19.8-r3, apache-nifi-registry 2.9.0-r3, rundeck 6.0.0-r0
CVE-2026-41841 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-LH44323 Security fix for CVE-2026-41001 applied in: apache-nifi-registry 2.9.0-r3, rundeck 6.0.0-r0
CVE-2026-41001 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-CZ64223 Security fix for CVE-2026-40992 applied in: apache-nifi-registry 2.9.0-r3, rundeck 6.0.0-r0
CVE-2026-40992 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-XR11055 Security fix for CVE-2026-55153 applied in: rundeck 6.0.0-r0
Security vulnerability affects the rundeck package. This issue is resolved in later releases. See references for vulnerability details...
CVE-2026-92763
Rundeck through 6.2.1 fails to properly authorize the importConfig and importNodesSources parameters in the project archive import endpoint. Attackers with only the import action can replace project configuration files including security-relevant settings like node executors and SSH key paths tha...
CVE-2026-92763
Rundeck through 6.2.1 contains an authorization bypass in the project archive import endpoint. The importConfig and importNodesSources parameters are not properly authorized, allowing an attacker with only the import action to replace project configuration files, including security-relevant setti...
CVE-2026-92763 Rundeck through 6.2.1 Authorization Bypass via Project Import
Rundeck through 6.2.1 fails to properly authorize the importConfig and importNodesSources parameters in the project archive import endpoint. Attackers with only the import action can replace project configuration files including security-relevant settings like node executors and SSH key paths tha...
CVE-2026-92763 Rundeck through 6.2.1 Authorization Bypass via Project Import
Rundeck through 6.2.1 fails to properly authorize the importConfig and importNodesSources parameters in the project archive import endpoint. Attackers with only the import action can replace project configuration files including security-relevant settings like node executors and SSH key paths tha...
CVE-2026-92763 Rundeck through 6.2.1 Authorization Bypass via Project Import
Rundeck through 6.2.1 fails to properly authorize the importConfig and importNodesSources parameters in the project archive import endpoint. Attackers with only the import action can replace project configuration files including security-relevant settings like node executors and SSH key paths tha...
EUVD-2026-81031
Rundeck through 6.2.1 fails to properly authorize the importConfig and importNodesSources parameters in the project archive import endpoint. Attackers with only the import action can replace project configuration files including security-relevant settings like node executors and SSH key paths tha...
CVE-2026-92763: Missing Authorization
Rundeck through 6.2.1 fails to properly authorize the importConfig and importNodesSources parameters in the project archive import endpoint. Attackers with only the import action can replace project configuration files including security-relevant settings like node executors and SSH key paths tha...