Lucene search
+L

63 matches found

OSV
OSV
added 2026/06/25 10:34 p.m.8 views

GO-2026-5632 Pelican Web UI Affected by a Privilege Escalation Attack in github.com/pelicanplatform/pelican

Pelican Web UI Affected by a Privilege Escalation Attack in github.com/pelicanplatform/pelican...

9CVSS5.8AI score0.0032EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/05/12 8:20 a.m.17 views

CVE-2026-42571

Pelican is a platform for creating data federations. From versions 7.21.0 to before 7.21.5, 7.22.0 to before 7.22.3, 7.23.0 to before 7.23.3, and 7.24.0 to before 7.24.2, there is a a privilege escalation vulnerability affecting Pelican's Web User Interface WebUI. This attack allows any user...

9CVSS5.7AI score0.0032EPSS
SaveExploits0References1
NVD
NVD
added 2026/05/09 8:16 p.m.35 views

CVE-2026-42571

Pelican is a platform for creating data federations. From versions 7.21.0 to before 7.21.5, 7.22.0 to before 7.22.3, 7.23.0 to before 7.23.3, and 7.24.0 to before 7.24.2, there is a a privilege escalation vulnerability affecting Pelican's Web User Interface WebUI. This attack allows any user...

9CVSS0.0032EPSS
SaveExploits0References2
CVE
CVE
added 2026/05/09 7:19 p.m.56 views

CVE-2026-42571

Pelican Web UI privilege escalation affects multiple series (7.21.x before 7.21.5, 7.22.x before 7.22.3, 7.23.x before 7.23.3, 7.24.x before 7.24.2). An authenticated WebUI user via OAuth can gain admin privileges under certain configurations. Patches are available in 7.21.5, 7.22.3, 7.23.3, and ...

9CVSS5.7AI score0.0032EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/05/09 7:19 p.m.9 views

CVE-2026-42571 Privilege Escalation Attack affecting Pelican Web UI

Pelican is a platform for creating data federations. From versions 7.21.0 to before 7.21.5, 7.22.0 to before 7.22.3, 7.23.0 to before 7.23.3, and 7.24.0 to before 7.24.2, there is a a privilege escalation vulnerability affecting Pelican's Web User Interface WebUI. This attack allows any user...

9CVSS5.7AI score0.0032EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/05/09 7:19 p.m.61 views

CVE-2026-42571 Privilege Escalation Attack affecting Pelican Web UI

Pelican is a platform for creating data federations. From versions 7.21.0 to before 7.21.5, 7.22.0 to before 7.22.3, 7.23.0 to before 7.23.3, and 7.24.0 to before 7.24.2, there is a a privilege escalation vulnerability affecting Pelican's Web User Interface WebUI. This attack allows any user...

9CVSS0.0032EPSS
SaveExploits0References2
OSV
OSV
added 2026/05/09 7:19 p.m.9 views

CVE-2026-42571 Privilege Escalation Attack affecting Pelican Web UI

Pelican is a platform for creating data federations. From versions 7.21.0 to before 7.21.5, 7.22.0 to before 7.22.3, 7.23.0 to before 7.23.3, and 7.24.0 to before 7.24.2, there is a a privilege escalation vulnerability affecting Pelican's Web User Interface WebUI. This attack allows any user...

9CVSS5.9AI score
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/05/09 7:19 p.m.9 views

CVE-2026-42571

Pelican is a platform for creating data federations. From versions 7.21.0 to before 7.21.5, 7.22.0 to before 7.22.3, 7.23.0 to before 7.23.3, and 7.24.0 to before 7.24.2, there is a a privilege escalation vulnerability affecting Pelican's Web User Interface WebUI. This attack allows any user...

9CVSS5.7AI score0.0032EPSS
SaveExploits0References3Affected Software1
EUVD
EUVD
added 2026/05/09 7:19 p.m.23 views

EUVD-2026-28931

Pelican is a platform for creating data federations. From versions 7.21.0 to before 7.21.5, 7.22.0 to before 7.22.3, 7.23.0 to before 7.23.3, and 7.24.0 to before 7.24.2, there is a a privilege escalation vulnerability affecting Pelican's Web User Interface WebUI. This attack allows any user...

9CVSS5.7AI score0.0032EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/09 12:0 a.m.15 views

Pelican Command Line 安全漏洞

Pelican Command Line is an open-source federal data client and source service tool developed by the Pelican Platform. Security vulnerabilities exist in versions of Pelican Command Line between 7.21.0 and 7.21.5, 7.22.0 and 7.22.3, 7.23.0 and 7.23.3, and 7.24.0 and 7.24.2. These vulnerabilities st...

9CVSS5.8AI score0.0032EPSS
SaveExploits0References1
OSV
OSV
added 2026/05/04 9:24 p.m.31 views

GHSA-RPFR-X88X-XWCW Pelican Web UI Affected by a Privilege Escalation Attack

Background On April 2nd, 2026, a Claude coding agent alerted Pelican PI Brian Bockelman to a privilege escalation vulnerability affecting Pelican's Web User Interface WebUI for various versions between v7.21 and v7.24. Upon further investigation, the Pelican team discovered this attack allows any...

9CVSS5.7AI score0.0032EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2026/05/04 9:24 p.m.26 views

Pelican Web UI Affected by a Privilege Escalation Attack

Background On April 2nd, 2026, a Claude coding agent alerted Pelican PI Brian Bockelman to a privilege escalation vulnerability affecting Pelican's Web User Interface WebUI for various versions between v7.21 and v7.24. Upon further investigation, the Pelican team discovered this attack allows any...

9CVSS5.7AI score0.0032EPSS
SaveExploits0References4Affected Software1
Positive Technologies
Positive Technologies
added 2026/05/04 12:0 a.m.32 views

PT-2026-37203

Name of the Vulnerable Software and Affected Versions Pelican versions 7.21.0 through 7.21.4 Pelican versions 7.22.0 through 7.22.2 Pelican versions 7.23.0 through 7.23.2 Pelican versions 7.24.0 through 7.24.1 Description A privilege escalation issue exists in the Web User Interface WebUI that...

9CVSS5.8AI score0.0032EPSS
SaveExploits0
EUVD
EUVD
added 2025/11/12 3:4 a.m.8 views

EUVD-2025-117012

Malicious code in unusual-fuchsia-pelican npm...

6.6AI score
SaveExploits0
EUVD
EUVD
added 2025/11/12 3:4 a.m.2 views

EUVD-2025-117318

Malicious code in horrible-sapphire-pelican npm...

6.6AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/11/11 8:46 p.m.4 views

Malicious code in mild_pelican_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43571fc2c9560e4b4232be7aafa7a8f4947ab945a2124d85e1a8e60a70ff1d58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.9AI score
SaveExploits0
EUVD
EUVD
added 2025/11/11 3:19 p.m.5 views

EUVD-2025-89470

Malicious code in potentialpelicanz3n npm...

6.6AI score
SaveExploits0
EUVD
EUVD
added 2025/11/11 3:19 p.m.8 views

EUVD-2025-90701

Malicious code in kindpelicanz3n npm...

6.6AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/11/11 3:19 p.m.6 views

Malicious code in potential_pelican_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76c9a3a82e23ecf8dce1d224903c749b87f2902ca4fb8ad0599d2fc4611c45fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.9AI score
SaveExploits0
EUVD
EUVD
added 2025/11/11 7:47 a.m.5 views

EUVD-2025-74806

Malicious code in complicatedpelicanviolet-4 npm...

6.6AI score
SaveExploits0
Rows per page
Query Builder