Skip to content
Threat Feed
Subscribe

Vendor

Ansible

4 briefs RSS
high advisory

Authorization Bypass in AWX CopyAPIView

CVE-2026-76648 is an authorization bypass vulnerability in the AWX CopyAPIView component where improper object-level RBAC checks allow attackers to perform copy operations on Job Templates without necessary read permissions.

AWX
1t 1c
high advisory

Remote Code Execution in Ansible community.general Memcached Plugin

An insecure deserialization vulnerability in the community.general Ansible collection's memcached cache plugin allows unauthenticated attackers to achieve remote code execution via pickle payload injection.

community.general
1t 1c
high advisory

SSRF and Credential Leakage in AWX Notification Backends

CVE-2026-71366 allows authenticated AWX notification administrators to perform SSRF and exfiltrate credentials by leveraging insufficient validation of notification template targets.

AWX web-vulnerability ssrf credential-leakage path-traversal arbitrary-file-write remote-code-execution cve-2026-71364
3t 1c
high advisory

Ansible jailexec Plugin Jail Escape via Symlink Following

The ansible_jailexec connection plugin performs file operations with host-side root privileges while following symlinks, allowing an attacker to escape a FreeBSD jail and gain root access on the host.

ansible_jailexec
1t