CVE-2026-16544

A flaw was found in AWX. The websocket event consumer performs RBAC authorization checks only for event groups that are mapped in the consumeraccess function jobevents, workflowevents, adhoccommandevents. Three event groups - inventoryupdateevents, projectupdateevents, and systemjobevents — are n...

EUVD-2020-3129

Malware in sbrugna...

CVE-2020-10698

Ansible Tower is affected. The vulnerability allows an attacker to read the stdout of jobs executed from other organizations, enabling partial data disclosure. Affected versions: before 3.6.4, before 3.5.6, and before 3.4.6. Root cause involves exposure of run-time job output via the websocket in...