Security Advisory

CVE-2026-67436

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-07-29 19:43:35

Last updated 2026-07-29 19:43:35

Assigner GitHub_M

CVSS score not scored

State PUBLISHED

Description

Linuxfabrik monitoring-plugins provides Python monitoring plugins for Icinga, Nagios, and related monitoring systems. In 6.0.0 and earlier, the redfish-* plugins built request URLs by concatenating an operator-supplied base URL with response-supplied @odata.id links, allowing a malicious or compromised BMC to redirect authenticated Redfish requests and disclose X-Auth-Token or HTTP Basic credentials.

← Browse all CVEs View on cve.org ↗