Puppet Node Manager Detection

Detects Puppet Node Manager. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Puppet Node Manager.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Puppet Node Manager Detection', 'description': 'Detects Puppet No...

Puppet Server/PuppetDB - Sensitive Information Disclosure Detection

Puppet Server and PuppetDB provide useful performance and debugging information via their metrics API endpoints, which may contain sensitive information when left exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Puppet Server and PuppetDB provide useful performance and debugging information...

Puppet Node Manager - Unauthorized Access Detection

Pupper Node Manager is exposed to external users. !/usr/bin/env python3 -- coding: utf-8 -- """Pupper Node Manager is exposed to external users.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Puppet Node Manager -...

aidoc (>=0.1.0, <=0.1.5), astrohack (>=0.0.1, <=0.1.6) +115 more potentially affected by CVE-2026-59890 via setuptools (65.6.3)

setuptools PYPI version 65.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - aidoc =0.1.0, =0.0.1, =0.96.0, =0.209.0, =1.1.31, =0.0.1a0, =0.1.1, =5.1.0, =0.1.4, =0.7.0, =0.1.0a1, =0.1.0, =0.2.4 - certifikadas8 0.1.1...

graal (0.4.3rc3), perceval (0.21.2rc3) +5 more potentially affected by CVE-2026-59890 via setuptools (66.1.0)

setuptools PYPI version 66.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - graal 0.4.3rc3 - perceval 0.21.2rc3 - perceval-mozilla 0.3.6rc3 - perceval-opnfv 0.2.6rc3 - perceval-puppet 0.2.6rc3 - perceval-weblate...

graal (0.4.3rc3), perceval (0.21.2rc3) +5 more potentially affected by CVE-2026-59890 via setuptools (66.1.0)

setuptools PYPI version 66.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - graal 0.4.3rc3 - perceval 0.21.2rc3 - perceval-mozilla 0.3.6rc3 - perceval-opnfv 0.2.6rc3 - perceval-puppet 0.2.6rc3 - perceval-weblate...

graal (0.4.3rc3), perceval (0.21.2rc3) +5 more potentially affected by CVE-2024-6345 via setuptools (66.1.0)

setuptools PYPI version 66.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - graal 0.4.3rc3 - perceval 0.21.2rc3 - perceval-mozilla 0.3.6rc3 - perceval-opnfv 0.2.6rc3 - perceval-puppet 0.2.6rc3 - perceval-weblate...

Cobbler vulnerable to code injection via unsafe YAML loading

The setmgmtparameters function in item.py in cobbler before 2.2.2 allows context-dependent attackers to execute arbitrary code via vectors related to the use of the yaml.load function instead of the yaml.safeload function, as demonstrated using Puppet...

Linux Distros Unpatched Vulnerability : CVE-2026-8804

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Puppet resourceapi shipped in Puppet Core 8.x and Puppet Enterprise 2023.8.x and 2025.x does not preserve the sensitive flag on parameters defined via the...

CVE-2026-8804

Puppet resourceapi shipped in Puppet Core 8.x and Puppet Enterprise 2023.8.x and 2025.x does not preserve the sensitive flag on parameters defined via the resource-api, causing values such as passwords to be stored in cleartext in the agent's local transaction state cache. Affected versions of th...

CVE-2026-8804

Puppet resourceapi shipped in Puppet Core 8.x and Puppet Enterprise 2023.8.x and 2025.x does not preserve the sensitive flag on parameters defined via the resource-api, causing values such as passwords to be stored in cleartext in the agent's local transaction state cache. Affected versions of th...

UBUNTU-CVE-2026-8804

Puppet resourceapi shipped in Puppet Core 8.x and Puppet Enterprise 2023.8.x and 2025.x does not preserve the sensitive flag on parameters defined via the resource-api, causing values such as passwords to be stored in cleartext in the agent's local transaction state cache. Affected versions of th...

EUVD-2026-41516

Puppet resourceapi shipped in Puppet Core 8.x and Puppet Enterprise 2023.8.x and 2025.x does not preserve the sensitive flag on parameters defined via the resource-api, causing values such as passwords to be stored in cleartext in the agent's local transaction state cache. Affected versions of th...

CVE-2026-8804 Cleartext Storage of Sensitive Information for Puppet Resource API

Puppet resourceapi shipped in Puppet Core 8.x and Puppet Enterprise 2023.8.x and 2025.x does not preserve the sensitive flag on parameters defined via the resource-api, causing values such as passwords to be stored in cleartext in the agent's local transaction state cache. Affected versions of th...

CVE-2026-8804

The CVE concerns Puppet’s resource_api (bundled with Puppet Core 8.x and Puppet Enterprise 2023.8.x and 2025.x). A vulnerability exists where the sensitive flag on parameters defined via the resource-api is not preserved, causing values such as passwords to be stored in cleartext in the agent’s l...

CVE-2026-8804 Cleartext Storage of Sensitive Information for Puppet Resource API

Puppet resourceapi shipped in Puppet Core 8.x and Puppet Enterprise 2023.8.x and 2025.x does not preserve the sensitive flag on parameters defined via the resource-api, causing values such as passwords to be stored in cleartext in the agent's local transaction state cache. Affected versions of th...

CVE-2026-8804

Puppet resourceapi shipped in Puppet Core 8.x and Puppet Enterprise 2023.8.x and 2025.x does not preserve the sensitive flag on parameters defined via the resource-api, causing values such as passwords to be stored in cleartext in the agent's local transaction state cache. Affected versions of th...

PT-2026-55507

Name of the Vulnerable Software and Affected Versions resource api versions 1.5.0 through 1.9.1 resource api version 2.0.0 Puppet Core versions prior to 8.20.0 Puppet Enterprise 2023.8 versions prior to 2023.8.10 Puppet Enterprise 2025 versions prior to 2025.11.0 Description The resource api does...

CVE-2026-8804: Cleartext Storage in a File or on Disk

Puppet resourceapi shipped in Puppet Core 8.x and Puppet Enterprise 2023.8.x and 2025.x does not preserve the sensitive flag on parameters defined via the resource-api, causing values such as passwords to be stored in cleartext in the agent's local transaction state cache. Affected versions of th...

com.arkea.satd:xlrelease-var-setter (>=0.2, <=0.4), io.jenkins.blueocean:blueocean (>=1.0.0-b02, <=1.0.0-b12) +3 more potentially affected by CVE-2026-57280 via org.jenkins-ci.plugins:script-security (1.22)

org.jenkins-ci.plugins:script-security MAVEN version 1.22 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - com.arkea.satd:xlrelease-var-setter =0.2, =1.0.0-b02, =1.2.1, =2.0, =0.1, =0.5 Sourc...