netbox v4.7.1

The cornerstone of every automated network NetBox Community | NetBox Cloud | NetBox Enterprise NetBox exists to empower network engineers. Since its release in 2016, it has become the go-to solution for modeling and documenting network infrastructure for thousands of organizations worldwide. As a...

CVE-2026-69694

Deserialization of untrusted data in Windows IP Address Management IPAM Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69694

CVE-2026-69694 affects the Windows IP Address Management (IPAM) Service . The root cause is deserialization of untrusted data , which allows an authorized attacker to escalate privileges locally. The CVSS 3.1 score is 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating tha...

EUVD-2026-73043

Deserialization of untrusted data in Windows IP Address Management IPAM Service allows an authorized attacker to elevate privileges locally...

Windows IP Address Management (IPAM) Service Elevation of Privilege Vulnerability

Deserialization of untrusted data in Windows IP Address Management IPAM Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69694: Deserialization of Untrusted Data

Deserialization of untrusted data in Windows IP Address Management IPAM Service allows an authorized attacker to elevate privileges locally...

PT-2026-87665

Name of the Vulnerable Software and Affected Versions Windows IP Address Management IPAM Service affected versions not specified Description Deserialization of untrusted data in the Windows IP Address Management IPAM Service allows an authorized attacker to elevate privileges locally...

Malicious code in azure-ipam-ui (npm)

Source: ossf-package-analysis 44b5c0e4141f25b2fb25c0fcd206aa203961a4a13336461bab2825b51576f88d The OpenSSF Package Analysis project identified 'azure-ipam-ui' @ 1.0.0 npm as malicious. It is considered malicious because: - The package executes one or more commands associated with malicious...

Missing Authorization

Overview openwisp-ipam is an IP address space administration module of OpenWISP. Affected versions of this package are vulnerable to Missing Authorization via the ExportSubnetView process. An attacker can access sensitive information belonging to other organizations by submitting an export reques...

GHSA-X287-5C68-36WP OpenWISP IPAM has broken object-level authorization: ExportSubnetView lets a member of one organization export another organization's subnet and all its IP addresses

Summary OpenWISP IPAM is multi-tenant: every Subnet belongs to an organization, and API access is scoped to the organizations a user belongs to. The CSV export endpoint, ExportSubnetView, omits the organization-membership check that its import sibling performs, and loads the subnet by primary key...

OpenWISP IPAM has broken object-level authorization: ExportSubnetView lets a member of one organization export another organization's subnet and all its IP addresses

Summary OpenWISP IPAM is multi-tenant: every Subnet belongs to an organization, and API access is scoped to the organizations a user belongs to. The CSV export endpoint, ExportSubnetView, omits the organization-membership check that its import sibling performs, and loads the subnet by primary key...

openwisp-controller (>=1.0.0, <=1.1.2) potentially affected by unknown CVE via openwisp-ipam (>=1.0.0, <=1.1.1)

openwisp-ipam PYPI version =1.0.0, =1.0.0, =1.1.2 Source cves: unknown CVE Source advisory: GHSA-X287-5C68-36WP...

openwisp-controller (>=1.0.0, <=1.1.2) potentially affected by unknown CVE via openwisp-ipam (>=1.0.0, <=1.1.1)

openwisp-ipam PYPI version =1.0.0, =1.0.0, =1.1.2 Source cves: unknown CVE Source advisory: OSV:GHSA-X287-5C68-36WP...

openwisp-controller (>=1.0.0, <=1.1.2) potentially affected by unknown CVE via openwisp-ipam (>=1.0.0, <=1.1.1)

openwisp-ipam PYPI version =1.0.0, =1.0.0, =1.1.2 Source cves: unknown CVE Source advisory: SNYK:PYTHON-OPENWISPIPAM-19427353...

netbox v4.6.9

The cornerstone of every automated network NetBox Community | NetBox Cloud | NetBox Enterprise NetBox exists to empower network engineers. Since its release in 2016, it has become the go-to solution for modeling and documenting network infrastructure for thousands of organizations worldwide. As a...

PT-2026-86431

Summary OpenWISP IPAM is multi-tenant: every Subnet belongs to an organization, and API access is scoped to the organizations a user belongs to. The CSV export endpoint, ExportSubnetView, omits the organization-membership check that its import sibling performs, and loads the subnet by primary key...

GO-2026-6094 vulnerabilities

Vulnerabilities for packages: external-secrets-operator, kyverno-notation-aws, hubble-ui, grafana, kapp-controller, kyverno, openbao, k3s, rancher-system-agent, pulumi-kubernetes-operator, cluster-api-azure-controller, flux-kustomize-controller, kubescape, gitlab-kas, spqr, caddy,...

GO-2025-4222 vulnerabilities

Vulnerabilities for packages: buildah, nerdctl, datadog-agent, azure-ipam, istio, podman, kuma, calico, k3s, flannel, rootlesskit, buildkitd, containerd, docker, multus-cni...

netbox v4.6.8

The cornerstone of every automated network NetBox Community | NetBox Cloud | NetBox Enterprise NetBox exists to empower network engineers. Since its release in 2016, it has become the go-to solution for modeling and documenting network infrastructure for thousands of organizations worldwide. As a...

netbox v4.6.7

The cornerstone of every automated network NetBox Community | NetBox Cloud | NetBox Enterprise NetBox exists to empower network engineers. Since its release in 2016, it has become the go-to solution for modeling and documenting network infrastructure for thousands of organizations worldwide. As a...