Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Advisory: Red Hat Ansible Automation Platform 2.5 for RHEL 8, Red Hat Ansible Automation Platform 2.5 for RHEL 9 and 3 more products — RHSA-2026:59155 Clear all filters
TI-2026-50013 CVE-2026-71366 · GHSA-8vqh-rjh4-52qh

Awx: notification backends allow ssrf and credential leakage

Priority LOW 34

A server-side request forgery (SSRF) vulnerability was found in multiple AWX notification backends.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.00562 Published 2026-08-24 Fixed in 4.6.32-1.el8ap, 4.6.32-1.el9ap +3 CWE-918
TI-2026-50012 CVE-2026-71365 · GHSA-89hq-rjv2-rxvp

Awx: webhook status callback ssrf leaks the git pat

Priority LOW 34

A server-side request forgery (SSRF) vulnerability was found in AWX's webhook status callback mechanism.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.00493 Published 2026-08-18 Fixed in 4.6.32-1.el8ap, 4.6.32-1.el9ap +3 CWE-918