https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-15T23:27:59.409422+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/ghsa-pw3r-7vg3-gqch GHSA-pw3r-7vg3-gqch 2026-11-15T23:27:59.410935+00:00

Tactical RMM 0.17.0 through 1.6.1 contains an arbitrary file read in the /reporting/templates/preview/ endpoint because WeasyPrint resolves file:// links in user-supplied template_md and embeds the files in the returned PDF. Users with report management permission can read the Django SECRET_KEY, reused as the NATS password, and publish runscript commands to every managed agent.