Lucene search
+L

9 matches found

RedHat Linux
RedHat Linux
•added 2026/09/23 10:13 p.m.•26 views

automation-controller: automation-controller: SystemJob extra_vars.days argument injection into uncontainerized control-plane awx-manage process

An argument-injection flaw was found in the Ansible Automation Platform automation-controller system-job subsystem. The system-job template launch endpoint stores a user-supplied "days" variable without running the integer validation defined elsewhere for that field, and the dispatcher flattens t...

6.6CVSS6.1AI score0.0029EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2026/09/23 9:13 p.m.•23 views

automation-controller: automation-controller: SystemJob extra_vars.days argument injection into uncontainerized control-plane awx-manage process

An argument-injection flaw was found in the Ansible Automation Platform automation-controller system-job subsystem. The system-job template launch endpoint stores a user-supplied "days" variable without running the integer validation defined elsewhere for that field, and the dispatcher flattens t...

6.6CVSS6.1AI score0.0029EPSS
SaveExploits0References4
NVD
NVD
•added 2026/09/23 8:17 p.m.•24 views

CVE-2026-84724

An argument-injection flaw was found in the Ansible Automation Platform automation-controller system-job subsystem. The system-job template launch endpoint stores a user-supplied "days" variable without running the integer validation defined elsewhere for that field, and the dispatcher flattens t...

6.6CVSS0.0029EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/09/23 7:40 p.m.•14 views

CVE-2026-84724 Automation-controller: automation-controller: systemjob extra_vars.days argument injection into uncontainerized control-plane awx-manage process

An argument-injection flaw was found in the Ansible Automation Platform automation-controller system-job subsystem. The system-job template launch endpoint stores a user-supplied "days" variable without running the integer validation defined elsewhere for that field, and the dispatcher flattens t...

6.6CVSS6.1AI score0.0029EPSS
SaveExploits0References6
CVE
CVE
•added 2026/09/23 7:40 p.m.•46 views

CVE-2026-84724

An argument-injection flaw exists in the Ansible Automation Platform automation-controller system-job subsystem. The issue occurs because the system-job template launch endpoint fails to perform integer validation on a user-supplied "days" variable . Consequently, the dispatcher flattens the mana...

6.6CVSS6.1AI score0.0029EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/09/23 7:40 p.m.•54 views

CVE-2026-84724 Automation-controller: automation-controller: systemjob extra_vars.days argument injection into uncontainerized control-plane awx-manage process

An argument-injection flaw was found in the Ansible Automation Platform automation-controller system-job subsystem. The system-job template launch endpoint stores a user-supplied "days" variable without running the integer validation defined elsewhere for that field, and the dispatcher flattens t...

6.6CVSS0.0029EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
•added 2026/09/23 7:15 p.m.•21 views

CVE-2026-84724

An argument-injection flaw was found in the Ansible Automation Platform automation-controller system-job subsystem. The system-job template launch endpoint stores a user-supplied "days" variable without running the integer validation defined elsewhere for that field, and the dispatcher flattens t...

6.6CVSS6.3AI score0.0029EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/23 12:00 a.m.•11 views

PT-2026-97550

Name of the Vulnerable Software and Affected Versions Ansible Automation Platform automation-controller affected versions not specified Description An argument-injection flaw exists in the system-job subsystem. The system-job template launch endpoint fails to perform integer validation on the...

6.6CVSS6.2AI score0.0029EPSS
SaveExploits0References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/23 12:00 a.m.•18 views

CVE-2026-84724: Improper Neutralization of Argument Delimiters in a Command

An argument-injection flaw was found in the Ansible Automation Platform automation-controller system-job subsystem. The system-job template launch endpoint stores a user-supplied "days" variable without running the integer validation defined elsewhere for that field, and the dispatcher flattens t...

6.6CVSS6.1AI score0.0029EPSS
SaveExploits0References2
Rows per page
Query Builder