migration toolkit virtualization records
2 published records for vendor migration toolkit virtualization.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 100%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-88 Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')1
- CWE-94 Improper Control of Generation of Code ('Code Injection')1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
2 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
32Monitor | CVE-2026-1615No exploit | Versions of the package jsonpath before 1.3.0 are vulnerable to Arbitrary Code Injection via unsafe evaluation of user-supplied JSON Path exCWE-94 | High8.2 | — | 1.1% | Feb 9, 2026 |
31Monitor | CVE-2026-11332No exploit | Ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code executionred hat · red hat ansible automation platform 2.5 for rhel 8 · CWE-88 | High7.8 | — | 0.2% | Jun 5, 2026 |
- CVE-2026-161532Monitor
Versions of the package jsonpath before 1.3.0 are vulnerable to Arbitrary Code Injection via unsafe evaluation of user-supplied JSON Path ex
HighCVSS 8.2No exploitEPSS 1%Feb 9, 2026
- CVE-2026-1133231Monitor
Ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution
HighCVSS 7.8No exploitEPSS 0%red hat · red hat ansible automation platform 2.5 for rhel 8Jun 5, 2026