Netbox-CVE-2023-37625

Netbox-CVE-2023-37625 描述 一个存储在Netbox alert1' 3. 添加一个新模型，在此示例中添加一个“制造商”模型。 4. 以任何经过身份验证的用户身份打开新创建的模型，并观察提示框已执行。...

netbox

每一个自动化网络的基石 NetBox 社区 | NetBox Cloud | NetBox Enterprise NetBox 的存在是为了赋能网络工程师。自 2016 年发布以来，它已成为全球数千家组织建模和记录网络基础设施的首选解决方案。作为传统 IPAM 和 DCIM 应用的继任者，NetBox 为一切网络相关的事物提供了一个连贯、广泛且易于访问的数据模型。通过为从线缆映射到设备配置等一切提供单一健壮的用户界面和可编程 API，NetBox 充当了现代网络的中心真实来源。 NetBox 的角色 | 为什么选择 NetBox？ | 开始使用 | 参与贡献 | 截图 NetBox 的角...

CVE-2024-23780

Exploit de CVE-2024-23780 para Netbox Este script explota CVE-2024-23780, que permite la ejecución remota de código RCE en instancias de Netbox. Uso python netboxexploit.py --url --username --password Parámetros --url: URL de la instancia de Netbox. --username: Nombre de usuario para la...

CVE-2025-69848-security-advisories

Reflected XSS in NetBox ProtectedError Handling CVE-2025-69848 Overview NetBox is an open-source infrastructure resource modeling and IP address management platform. A reflected cross-site scripting XSS vulnerability exists in the ProtectedError exception handling logic. When a delete operation...

CVE-2026-86175

NetBox through 4.7.0 fails to redact sensitive data source backend credentials in REST and GraphQL API responses. Authenticated users with only view permission can retrieve plaintext passwords and secret keys for Git and Amazon S3 backends through API endpoints, gaining unauthorized access to...

CVE-2026-86176

NetBox through 4.7.0 fails to properly scope user-private records in REST and GraphQL API endpoints for Notifications, Subscriptions, and Bookmarks. Authenticated users with view permissions can access all users' private records through unscoped querysets, disclosing which users watch or bookmark...

EUVD-2026-71975

NetBox through 4.7.0 fails to properly scope user-private records in REST and GraphQL API endpoints for Notifications, Subscriptions, and Bookmarks. Authenticated users with view permissions can access all users' private records through unscoped querysets, disclosing which users watch or bookmark...

CVE-2026-86176 NetBox through 4.7.0 Information Disclosure via REST and GraphQL APIs

NetBox through 4.7.0 fails to properly scope user-private records in REST and GraphQL API endpoints for Notifications, Subscriptions, and Bookmarks. Authenticated users with view permissions can access all users' private records through unscoped querysets, disclosing which users watch or bookmark...

CVE-2026-86176

NetBox through 4.7.0 fails to properly scope user-private records in its REST and GraphQL API endpoints for Notifications, Subscriptions, and Bookmarks . The root cause is the use of unscoped querysets , which allows any authenticated user with view permissions to access all users' private record...

CVE-2026-86175 NetBox through 4.7.0 Credential Disclosure via REST and GraphQL APIs

NetBox through 4.7.0 fails to redact sensitive data source backend credentials in REST and GraphQL API responses. Authenticated users with only view permission can retrieve plaintext passwords and secret keys for Git and Amazon S3 backends through API endpoints, gaining unauthorized access to...

CVE-2026-86175

NetBox through 4.7.0 fails to redact sensitive data source backend credentials in REST and GraphQL API responses . Authenticated users with only view permission can retrieve plaintext passwords and secret keys for Git and Amazon S3 backends through API endpoints, enabling unauthorized access to e...

EUVD-2026-71974

NetBox through 4.7.0 fails to redact sensitive data source backend credentials in REST and GraphQL API responses. Authenticated users with only view permission can retrieve plaintext passwords and secret keys for Git and Amazon S3 backends through API endpoints, gaining unauthorized access to...

CVE-2026-86175 NetBox through 4.7.0 Credential Disclosure via REST and GraphQL APIs

NetBox through 4.7.0 fails to redact sensitive data source backend credentials in REST and GraphQL API responses. Authenticated users with only view permission can retrieve plaintext passwords and secret keys for Git and Amazon S3 backends through API endpoints, gaining unauthorized access to...

CVE-2026-73229 vulnerabilities

Vulnerabilities for packages: authentik, netbox-fips, authentik-fips, netbox, awx...

GHSA-2M8G-3CMR-WG3W vulnerabilities

Vulnerabilities for packages: authentik, netbox-fips, authentik-fips, netbox, awx...

GHSA-G47C-3XMW-Q6M2 vulnerabilities

Vulnerabilities for packages: authentik, netbox-fips, authentik-fips, netbox, awx...

CVE-2026-73228 vulnerabilities

Vulnerabilities for packages: authentik, netbox-fips, authentik-fips, netbox, awx...

CVE-2026-59893 vulnerabilities

Vulnerabilities for packages: openstack-placement-2025.1, authentik, openstack-keystone-2026.1-fips, dbt-core, openstack-glance-2026.1-fips, openstack-keystone-2025.2, openstack-glance-2025.1-fips, airflow, openstack-horizon-2025.2-fips, openstack-placement-2025.1-fips, openstack-nova-2025.1,...

CVE-2026-54284 vulnerabilities

Vulnerabilities for packages: openstack-placement-2025.1, authentik, openstack-keystone-2026.1-fips, dbt-core, openstack-glance-2026.1-fips, openstack-keystone-2025.2, openstack-glance-2025.1-fips, airflow, openstack-horizon-2025.2-fips, openstack-placement-2025.1-fips, openstack-nova-2025.1,...

GHSA-PWGV-4X5Q-6M9F vulnerabilities

Vulnerabilities for packages: openstack-placement-2025.1, authentik, openstack-keystone-2026.1-fips, dbt-core, openstack-glance-2026.1-fips, openstack-keystone-2025.2, openstack-glance-2025.1-fips, airflow, openstack-horizon-2025.2-fips, openstack-placement-2025.1-fips, openstack-nova-2025.1,...