Lucene search
+L

35 matches found

OSV
OSV
•added 2026/09/09 5:17 p.m.•11 views

DEBIAN-CVE-2026-87874

A flaw was found in the memcached cache plugin of the community.general Ansible collection. Although its documentation states that records are stored in JSON format, the plugin performs no explicit serialization and relies on python-memcached, which pickles values on write and unpickles them on...

8.1CVSS6.1AI score0.00721EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/09 5:17 p.m.•23 views

CVE-2026-87874

A flaw was found in the memcached cache plugin of the community.general Ansible collection. Although its documentation states that records are stored in JSON format, the plugin performs no explicit serialization and relies on python-memcached, which pickles values on write and unpickles them on...

8.1CVSS0.00721EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/09 5:17 p.m.•18 views

CVE-2026-87872

A flaw was found in the OCAPI modules ocapicommand, ocapiinfo of the community.general Ansible collection. The shared OCAPI request helper disables TLS certificate validation on every request and the modules expose no parameter to re-enable it, while sending HTTP Basic-Auth credentials to an http...

6.8CVSS0.00137EPSS
SaveExploits0References2
OSV
OSV
•added 2026/09/09 5:17 p.m.•12 views

DEBIAN-CVE-2026-87872

A flaw was found in the OCAPI modules ocapicommand, ocapiinfo of the community.general Ansible collection. The shared OCAPI request helper disables TLS certificate validation on every request and the modules expose no parameter to re-enable it, while sending HTTP Basic-Auth credentials to an http...

6.8CVSS5.7AI score0.00137EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2026/09/09 5:17 p.m.•13 views

CVE-2026-87874

A flaw was found in the memcached cache plugin of the community.general Ansible collection. Although its documentation states that records are stored in JSON format, the plugin performs no explicit serialization and relies on python-memcached, which pickles values on write and unpickles them on...

8.1CVSS6.1AI score0.00721EPSS
SaveExploits0References2
OSV
OSV
•added 2026/09/09 5:17 p.m.•8 views

UBUNTU-CVE-2026-87874

A flaw was found in the memcached cache plugin of the community.general Ansible collection. Although its documentation states that records are stored in JSON format, the plugin performs no explicit serialization and relies on python-memcached, which pickles values on write and unpickles them on...

8.1CVSS6.1AI score0.00721EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/09/09 4:06 p.m.•14 views

EUVD-2026-75086

A flaw was found in the OCAPI modules ocapicommand, ocapiinfo of the community.general Ansible collection. The shared OCAPI request helper disables TLS certificate validation on every request and the modules expose no parameter to re-enable it, while sending HTTP Basic-Auth credentials to an http...

6.8CVSS5.6AI score0.00137EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/09/09 4:06 p.m.•7 views

CVE-2026-87872 Community.general: community.general: ocapi module_utils (ocapi_command, ocapi_info) hardcode validate_certs=false with no override, enabling tls man-in-the-middle and credential disclosure

A flaw was found in the OCAPI modules ocapicommand, ocapiinfo of the community.general Ansible collection. The shared OCAPI request helper disables TLS certificate validation on every request and the modules expose no parameter to re-enable it, while sending HTTP Basic-Auth credentials to an http...

6.8CVSS5.6AI score0.00137EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/09/09 4:06 p.m.•47 views

CVE-2026-87872 Community.general: community.general: ocapi module_utils (ocapi_command, ocapi_info) hardcode validate_certs=false with no override, enabling tls man-in-the-middle and credential disclosure

A flaw was found in the OCAPI modules ocapicommand, ocapiinfo of the community.general Ansible collection. The shared OCAPI request helper disables TLS certificate validation on every request and the modules expose no parameter to re-enable it, while sending HTTP Basic-Auth credentials to an http...

6.8CVSS0.00137EPSS
SaveExploits0References2
CVE
CVE
•added 2026/09/09 4:06 p.m.•30 views

CVE-2026-87872

A flaw in the OCAPI modules (ocapi_command, ocapi_info) of the community.general Ansible collection hardcodes validate_certs=false in the shared request helper with no parameter to re-enable it. Because the modules send HTTP Basic-Auth credentials over HTTPS, an attacker positioned on the network...

6.8CVSS5.6AI score0.00137EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/09/09 4:06 p.m.•16 views

CVE-2026-87872

A flaw was found in the OCAPI modules ocapicommand, ocapiinfo of the community.general Ansible collection. The shared OCAPI request helper disables TLS certificate validation on every request and the modules expose no parameter to re-enable it, while sending HTTP Basic-Auth credentials to an http...

6.8CVSS5.8AI score0.00137EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/09/09 4:06 p.m.•14 views

CVE-2026-87874 Community.general: community.general: memcached cache plugin deserializes untrusted pickle data from memcached, enabling cache-poisoning remote code execution on the ansible controller

A flaw was found in the memcached cache plugin of the community.general Ansible collection. Although its documentation states that records are stored in JSON format, the plugin performs no explicit serialization and relies on python-memcached, which pickles values on write and unpickles them on...

8.1CVSS6.1AI score0.00721EPSS
SaveExploits0References2
CVE
CVE
•added 2026/09/09 4:06 p.m.•33 views

CVE-2026-87874

The memcached cache plugin in the community.general Ansible collection contains a deserialization flaw. Although its documentation states records are stored in JSON, the plugin performs no explicit serialization and relies on python-memcached , which pickles values on write and unpickles them on ...

8.1CVSS6.1AI score0.00721EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/09/09 4:06 p.m.•37 views

CVE-2026-87874 Community.general: community.general: memcached cache plugin deserializes untrusted pickle data from memcached, enabling cache-poisoning remote code execution on the ansible controller

A flaw was found in the memcached cache plugin of the community.general Ansible collection. Although its documentation states that records are stored in JSON format, the plugin performs no explicit serialization and relies on python-memcached, which pickles values on write and unpickles them on...

8.1CVSS0.00721EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/09 4:06 p.m.•14 views

EUVD-2026-75115

A flaw was found in the memcached cache plugin of the community.general Ansible collection. Although its documentation states that records are stored in JSON format, the plugin performs no explicit serialization and relies on python-memcached, which pickles values on write and unpickles them on...

8.1CVSS6.1AI score0.00721EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/09/09 12:00 a.m.•9 views

Linux Distros Unpatched Vulnerability : CVE-2026-87874

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the memcached cache plugin of the community.general Ansible collection. Although its documentation states that records are stored in JSON...

8.1CVSS5.8AI score0.00721EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/09 12:00 a.m.•4 views

CVE-2026-87872: Improper Certificate Validation

A flaw was found in the OCAPI modules ocapicommand, ocapiinfo of the community.general Ansible collection. The shared OCAPI request helper disables TLS certificate validation on every request and the modules expose no parameter to re-enable it, while sending HTTP Basic-Auth credentials to an http...

6.8CVSS5.7AI score0.00137EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/09 12:00 a.m.•3 views

CVE-2026-87874: Deserialization of Untrusted Data

A flaw was found in the memcached cache plugin of the community.general Ansible collection. Although its documentation states that records are stored in JSON format, the plugin performs no explicit serialization and relies on python-memcached, which pickles values on write and unpickles them on...

8.1CVSS6.1AI score0.00721EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/09 12:00 a.m.•17 views

PT-2026-89098

A flaw was found in the memcached cache plugin of the community.general Ansible collection. Although its documentation states that records are stored in JSON format, the plugin performs no explicit serialization and relies on python-memcached, which pickles values on write and unpickles them on...

8.1CVSS6.1AI score0.00721EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/09 12:00 a.m.•18 views

PT-2026-89097

A flaw was found in the OCAPI modules ocapi command, ocapi info of the community.general Ansible collection. The shared OCAPI request helper disables TLS certificate validation on every request and the modules expose no parameter to re-enable it, while sending HTTP Basic-Auth credentials to an...

6.8CVSS5.6AI score0.00137EPSS
SaveExploits0References2
Rows per page
Query Builder