https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-15T23:25:04.204304+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-129165 CVE-2026-129165 — Tactical RMM 0.17.0 through 1.6.1 Arbitrary File Read via Report Preview 2026-11-15T23:25:04.205098+00:00

Affected: AmidaWare Tactical RMM

Tactical RMM 0.17.0 through 1.6.1 contains an arbitrary file read in the /reporting/templates/preview/ endpoint because WeasyPrint resolves file:// links in user-supplied template_md and embeds the files in the returned PDF. Users with report management permission can read the Django SECRET_KEY, reused as the NATS password, and publish runscript commands to every managed agent.