monitoring-plugins

Every one of the 8 is a mark on the map. Named now: 1 to 8, most at risk first.

1. linuxfabrik-lib: fetch() forwards credential headers across a cross-origin redirectCVE-2026-67435Linuxfabrik · CVSS 6 · 0.5% likely

   CWE-200

2. Linuxfabrik monitoring-plugins: SSRF and auth-token disclosure via unvalidated @odata.id link in redfish-* pluginsCVE-2026-67436Linuxfabrik · CVSS 8.3 · 0.4% likely

   CWE-200

3. Linuxfabrik Monitoring Plugins: Arbitrary root file disclosure via unconfined --filename in logfile plugin (sudoers LPE)CVE-2026-73973Linuxfabrik · CVSS 5.5 · 0.3% likely

   CWE-22

4. linuxfabrik-lib: Local privilege escalation using embedded commandCVE-2026-55426Linuxfabrik · CVSS 7.8 · 0.2% likely

   CWE-78

5. linuxfabrik-lib: Insecure creation of SQLite databasesCVE-2026-53759Linuxfabrik · CVSS 2 · 0.2% likely

   CWE-377

6. Linuxfabrik Monitoring Plugins Sudoers: /usr/bin/apt-get arguments allow privilege escalationCVE-2026-52817Linuxfabrik · CVSS 7 · 0.2% likely

   CWE-88

7. linuxfabrik-lib: Arbitrary root file read via live --test argument (lib.lftest) across sudoers-whitelisted plugins (LPE)CVE-2026-73974Linuxfabrik · CVSS 5.5 · 0.2% likely

   CWE-22

8. Linuxfabrik monitoring-plugins: Symlink following in logfile legacy database migrationCVE-2026-67433Linuxfabrik · CVSS 5.8 · 0.1% likely

   CWE-59

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.