CVE-2018-1000226

Cobbler version Verified as present in Cobbler versions 2.6.11+, but code inspection suggests at least 2.0.0+ or possibly even older versions may be vulnerable contains a Incorrect Access Control vulnerability in XMLRPC API (/cobbler_api) that can result in Privilege escalation, data manipulation or exfiltration, LDAP credential harvesting. This attack appear to be exploitable via "network connectivity". Taking advantage of improper validation of security tokens in API endpoints. Please note this is a different issue than CVE-2018-10931.

• CWE-732

• https://github.com/cobbler/cobbler/issues/1916Issue Tracking, Vendor Advisory
• https://movermeyer.com/2018-08-02-privilege-escalation-exploits-in-cobblers-api/Third Party Advisory
• https://github.com/cobbler/cobbler/issues/1916Issue Tracking, Vendor Advisory
• https://movermeyer.com/2018-08-02-privilege-escalation-exploits-in-cobblers-api/Third Party Advisory

Published

Aug 20, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-1000220Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2018-1000221pkgconf version 1.5.0 to 1.5.2 contains a Buffer Overflow vu…
• CVE-2018-1000222Libgd version 2.2.5 contains a Double Free Vulnerability vul…
• CVE-2018-1000223soundtouch version up to and including 2.0.0 contains a Buff…
• CVE-2018-1000224Godot Engine version All versions prior to 2.1.5, all 3.0 ve…
• CVE-2018-1000225Cobbler version Verified as present in Cobbler versions 2.6.…
• CVE-2018-1000300curl version curl 7.54.1 to and including curl 7.59.0 contai…
• CVE-2018-1000301curl version curl 7.20.0 to and including curl 7.59.0 contai…9.1
• CVE-2018-1000400Kubernetes CRI-O version prior to 1.9 contains a Privilege C…
• CVE-2018-1000401Jenkins project Jenkins AWS CodePipeline Plugin version 0.36…
• CVE-2018-1000402Jenkins project Jenkins AWS CodeDeploy Plugin version 1.19 a…
• CVE-2018-1000403Jenkins project Jenkins AWS CodeDeploy Plugin version 1.19 a…