{"action":"Upgrade cobbler to 3.2.3 or later.","affected":[{"fixed":"3.2.3","introduced":"3.0.0"},{"fixed":"3.3.7","introduced":"3.3.0"}],"component":"cobbler","cve_ids":["CVE-2024-47533"],"ecosystem":"PyPI","epss":0.04003,"exploited":false,"fixed_versions":["3.2.3","3.3.7"],"ghsa_id":"GHSA-m26c-fcgh-cp6h","id":"tcs_01M5KH3RH23N1BH8MDK3WY98HW","modified_at":"2026-07-02T13:00:07.833965265Z","published_at":"2026-06-29T11:50:40.621509Z","references":["https://osv.dev/vulnerability/PYSEC-2026-316","https://github.com/cobbler/cobbler/security/advisories/GHSA-m26c-fcgh-cp6h","https://nvd.nist.gov/vuln/detail/CVE-2024-47533","https://github.com/cobbler/cobbler/commit/32c5cada013dc8daa7320a8eda9932c2814742b0","https://github.com/cobbler/cobbler/commit/e19717623c10b29e7466ed4ab23515a94beb2dda","https://github.com/cobbler/cobbler","https://pypi.org/project/cobbler","https://github.com/advisories/GHSA-m26c-fcgh-cp6h"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"PYSEC-2026-316","url":"https://osv.dev/vulnerability/PYSEC-2026-316"}],"summary":"cobbler allows anyone to connect to cobbler XML-RPC server with known password and make changes"}