https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2011-4954.htmlhttps://patchthecve.com/cve/CVE-2011-4954.htmlTue, 16 Jun 2026 23:35:43 +0000HIGH 7.8: cobbler has local privilege escalation via the use of insecure location for PYTHON_EGG_CACHEhttps://patchthecve.com/cve/CVE-2011-4952.htmlhttps://patchthecve.com/cve/CVE-2011-4952.htmlTue, 16 Jun 2026 23:35:42 +0000HIGH 8.8: cobbler: Web interface lacks CSRF protection when using Django frameworkhttps://patchthecve.com/cve/CVE-2018-1000226.htmlhttps://patchthecve.com/cve/CVE-2018-1000226.htmlWed, 17 Jun 2026 01:32:43 +0000CRITICAL 9.8: Cobbler version Verified as present in Cobbler versions 2.6.11+, but code inspection suggests at least 2.0.0+ or possibly even older versions may be vulnerable contains a Incorrect Access Control vulnerability in XMLRPC API (/cobbler_api) that can result in Privilege escalation, data manipulation orhttps://patchthecve.com/cve/CVE-2018-1000225.htmlhttps://patchthecve.com/cve/CVE-2018-1000225.htmlWed, 17 Jun 2026 01:32:42 +0000MEDIUM 6.1: Cobbler version Verified as present in Cobbler versions 2.6.11+, but code inspection suggests at least 2.0.0+ or possibly even older versions may be vulnerable contains a Cross Site Scripting (XSS) vulnerability in cobbler-web that can result in Privilege escalation to admin.. This attack appear to