Description
Cobbler version Verified as present in Cobbler versions 2.6.11+, but code inspection suggests at least 2.0.0+ or possibly even older versions may be vulnerable contains a Incorrect Access Control vulnerability in XMLRPC API (/cobbler_api) that can result in Privilege escalation, data manipulation or exfiltration, LDAP credential harvesting. This attack appear to be exploitable via "network connectivity". Taking advantage of improper validation of security tokens in API endpoints. Please note this is a different issue than CVE-2018-10931.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 16.04 LTS | cobbler | 2.4.1-0ubuntu2+esm1 | USN-6475-1 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SUSE Package Hub 15 SP2 | cobbler | 3.1.2-bp152.4.3.1 | openSUSE-SU-2021:0058-1 |
| SUSE OpenStack Cloud 8 | cobbler | 2.6.6-49.14.1 | SUSE-SU-2018:2561-1 |
| SUSE Manager Server 3.2 | cobbler | 2.6.6-6.7.1 | SUSE-SU-2018:2551-1 |
Show 5 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SUSE Manager Server 3.1 | cobbler | 2.6.6-5.17.1 | SUSE-SU-2018:2608-1 |
| SUSE Manager Server 3.1 | release-notes-susemanager | 3.1.8-5.38.1 | SUSE-RU-2018:2639-1 |
| SUSE Manager Server 3.0 | cobbler | 2.6.6-49.14.1 | SUSE-SU-2018:2561-1 |
| SUSE Manager Proxy 3.1 | release-notes-susemanager-proxy | 3.1.8-0.15.29.1 | SUSE-RU-2018:2639-1 |
| SUSE Manager Client Tools 12 | cobbler | 2.6.6-49.14.1 | SUSE-SU-2018:2561-1 |
| SUSE HPE Helion OpenStack 8 | cobbler | 2.6.6-49.14.1 | SUSE-SU-2018:2561-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | cobbler | 3.2.1.336+git.5639a3af-1.1 | openSUSE-SU-2024:10690-1 |
| openSUSE Leap 15.2 | cobbler | 3.1.2-lp152.6.3.1 | openSUSE-SU-2021:0046-1 |
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- Cobbler - Authentication Bypass http/cves/2018/CVE-2018-1000226.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | cobbler | < 3.0.0 | 3.0.0 | GHSA-f88q-22g8-frcg |
Advisories 9
- USN-6475-1 cobbler vulnerabilities Ubuntu Security Notices (USN) · Jun 25, 2026
- SUSE-SU-2018:2561-1 Security update for cobbler SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-RU-2018:2639-1 Recommended update for SUSE Manager 3.1 Release Notes SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2021:0058-1 Security update for cobbler SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2018:2551-1 Security update for cobbler SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2021:0046-1 Security update for cobbler SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2018:2608-1 Security update for cobbler SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:10690-1 cobbler-3.2.1.336+git.5639a3af-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- WID-SEC-2023-2928 Cobbler: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 14, 2023