Executive brief
cobbler allows anyone to connect to cobbler XML-RPC server with known password and make changes
Affected products
- PyPI cobbler
Junglewise Threat Intelligence
CVE-2024-47533: PYSEC-2026-316 - cobbler allows anyone to connect to cobbler XML-RPC server with known password and make changes
CVE-2024-47533 · Severity: low · CVSS 3.1 · Published 2026-06-29
Technologies: cobbler (PyPI). Vendors: PyPI.
Related threats
- PYSEC-2026-794 - Cobbler is vulnerable to code injection
- PYSEC-2026-792 - Cobbler subject to Command Injection
- PYSEC-2026-793 - Cobbler vulnerable to code injection via unsafe YAML loading
- PYSEC-2026-795 - Cobbler Web Interface Kickstart Template Remote Privilege Escalation Vulnerability
- PYSEC-2026-797 - Cobbler Path Traversal vulnerability