Lucene search
+L

34 matches found

Tenable Nessus
Tenable Nessus
•added 2026/06/30 12:00 a.m.•27 views

Linux Distros Unpatched Vulnerability : CVE-2026-40941

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior have a package import signature validation bypass allows which...

7.1CVSS6.7AI score0.00265EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/06/26 7:18 a.m.•19 views

CVE-2026-40941

A flaw was found in Cacti, an open-source performance and fault management framework. This vulnerability allows a remote attacker to bypass the package import signature validation. By exploiting this flaw, an attacker can import self-signed packages, potentially leading to the execution of...

8.8CVSS6.8AI score0.00265EPSS
SaveExploits0References6
NVD
NVD
•added 2026/06/25 11:17 p.m.•30 views

CVE-2026-40941

Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior have a package import signature validation bypass allows which allows self-signed packages. This issue has been fixed in version 1.2.31...

7.1CVSS0.00265EPSS
SaveExploits0References3
OSV
OSV
•added 2026/06/25 11:17 p.m.•17 views

DEBIAN-CVE-2026-40941

Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior have a package import signature validation bypass allows which allows self-signed packages. This issue has been fixed in version 1.2.31...

6.5CVSS6.5AI score0.00265EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2026/06/25 11:17 p.m.•18 views

CVE-2026-40941

Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior have a package import signature validation bypass allows which allows self-signed packages. This issue has been fixed in version 1.2.31...

7.1CVSS6.5AI score0.00265EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/06/25 11:01 p.m.•47 views

CVE-2026-40941 Cacti: Package Import Signature Validation Bypass Allows Self-Signed Packages

Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior have a package import signature validation bypass allows which allows self-signed packages. This issue has been fixed in version 1.2.31...

7.1CVSS0.00265EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2026/06/25 11:01 p.m.•19 views

CVE-2026-40941

Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior have a package import signature validation bypass allows which allows self-signed packages. This issue has been fixed in version 1.2.31...

7.1CVSS5.7AI score0.00265EPSS
SaveExploits0References4Affected Software1
EUVD
EUVD
•added 2026/06/25 11:01 p.m.•23 views

EUVD-2026-39589

Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior have a package import signature validation bypass allows which allows self-signed packages. This issue has been fixed in version 1.2.31...

7.1CVSS5.7AI score0.00265EPSS
SaveExploits0References3
Debian CVE
Debian CVE
•added 2026/06/25 11:01 p.m.•21 views

CVE-2026-40941

Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior have a package import signature validation bypass allows which allows self-signed packages. This issue has been fixed in version 1.2.31...

7.1CVSS6.5AI score0.00265EPSS
SaveExploits0
Vulnrichment
Vulnrichment
•added 2026/06/25 11:01 p.m.•13 views

CVE-2026-40941 Cacti: Package Import Signature Validation Bypass Allows Self-Signed Packages

Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior have a package import signature validation bypass allows which allows self-signed packages. This issue has been fixed in version 1.2.31...

7.1CVSS6.5AI score0.00265EPSS
SaveExploits0References3
CVE
CVE
•added 2026/06/25 11:01 p.m.•61 views

CVE-2026-40941

CVE-2026-40941 affects Cacti up to version 1.2.30 and is caused by a package import signature validation bypass that allows the use of self-signed packages. The issue has been fixed in version 1.2.31. Affected software is Cacti (open source performance and fault management framework). Remediation...

7.1CVSS6.5AI score0.00265EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/25 12:00 a.m.•3 views

CVE-2026-40941: Improper Verification of Cryptographic Signature

Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior have a package import signature validation bypass allows which allows self-signed packages. This issue has been fixed in version 1.2.31...

7.1CVSS6.5AI score0.00265EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/01/16 12:00 a.m.•9 views

MiracleLinux 7 : PackageKit-1.1.5-2.0.1.el7.AXS7 (AXSA:2018-3051:01)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2018-3051:01 advisory. PackageKit: authentication bypass allows to install signed packages without administrator privileges CVE-2018-1106 Tenable has extracted the preceding...

5.5CVSS6.2AI score0.00379EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•11 views

EUVD-2018-11753

Malware in sbrugna...

5.5CVSS5.3AI score0.00379EPSS
SaveExploits0References8
SUSE CVE
SUSE CVE
•added 2023/02/15 4:34 a.m.•8 views

SUSE CVE-2018-1106

An authentication bypass flaw has been found in PackageKit before 1.1.10 that allows users without administrator privileges to install signed packages. A local attacker can use this vulnerability to install vulnerable packages to further compromise a system...

5.5CVSS5.7AI score0.00379EPSS
SaveExploits0References6
OpenVAS
OpenVAS
•added 2020/01/23 12:00 a.m.•20 views

Huawei EulerOS: Security Advisory for PackageKit (EulerOS-SA-2019-2700)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS5.5AI score0.00379EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2020/01/23 12:00 a.m.•28 views

Huawei EulerOS: Security Advisory for PackageKit (EulerOS-SA-2018-1183)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS5.5AI score0.00379EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2019/12/23 12:00 a.m.•52 views

EulerOS 2.0 SP5 : PackageKit (EulerOS-SA-2019-2700)

According to the version of the PackageKit packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An authentication bypass flaw has been found in PackageKit before 1.1.10 that allows users without administrator privileges to install signed...

5.5CVSS5.6AI score0.00379EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2019/10/09 11:31 p.m.•28 views

CVE-2018-1106

An authentication bypass flaw has been found in PackageKit that allows users without administrator privileges to install signed packages. A local attacker can use this vulnerability to install vulnerable packages to further compromise a system...

5.5CVSS5.6AI score0.00379EPSS
SaveExploits0References2
Veracode
Veracode
•added 2019/01/15 9:21 a.m.•28 views

Authentication Bypass

packagekit is vulnerable to authentication bypass attacks. The vulnerability exists as an authentication bypass flaw has been found in PackageKit before 1.1.10 that allows users without administrator privileges to install signed packages. A local attacker can use this vulnerability to install...

5.5CVSS5.3AI score0.00379EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder