<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: netdata</title><description>Every new CVE for netdata.</description><link>https://agentprime.io/</link><item><title>CVE-2026-83597: Netdata: Local Privilege Escalation in Netdata Windows Agent installer via MSI Repair Execution</title><link>https://agentprime.io/advisories/CVE-2026-83597/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-83597/</guid><description>CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 22 Sep 2026 17:06:58 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-83600: Netdata: Streaming protocol chart slot guard off-by-one allows ~16 GiB allocation request, crashing parent agent</title><link>https://agentprime.io/advisories/CVE-2026-83600/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-83600/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 22 Sep 2026 17:05:15 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-83598: Netdata: Local Privilege Escalation in Netdata Agent Windows installer via PowerShell Profile Hijack in MSI Repair</title><link>https://agentprime.io/advisories/CVE-2026-83598/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-83598/</guid><description>CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 22 Sep 2026 17:04:21 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-83603: Netdata: Local Root via ndsudo Arbitrary socket_path → fail2ban-client Pickle RCE</title><link>https://agentprime.io/advisories/CVE-2026-83603/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-83603/</guid><description>CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 22 Sep 2026 17:01:56 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-83601: Netdata: Streaming protocol dimension slot has no upper-bound guard, allowing integer overflow and out-of-bounds write</title><link>https://agentprime.io/advisories/CVE-2026-83601/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-83601/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 22 Sep 2026 17:00:51 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-83602: Netdata: Unauthenticated remote PUT to /api/v3/settings bypasses IP allowlist controls via HTTP_ACL_NOCHECK</title><link>https://agentprime.io/advisories/CVE-2026-83602/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-83602/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 22 Sep 2026 16:56:56 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-83599: Netdata: WebSocket Decompression Bomb</title><link>https://agentprime.io/advisories/CVE-2026-83599/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-83599/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 22 Sep 2026 16:54:56 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-71385: Netdata &lt; 2.3.1 - Reflected Cross-Site Scripting via love Parameter in ilove.svg Endpoint</title><link>https://agentprime.io/advisories/CVE-2025-71385/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-71385/</guid><description>CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 02 Jul 2026 19:37:42 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-32019: ndsudo: local privilege escalation via untrusted search path</title><link>https://agentprime.io/advisories/CVE-2024-32019/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-32019/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 12 Apr 2024 20:33:18 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-22497: Netdata is vulnerable to improper authentication</title><link>https://agentprime.io/advisories/CVE-2023-22497/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-22497/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 14 Jan 2023 01:02:12 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-22496: Netdata vulnerable to command injection</title><link>https://agentprime.io/advisories/CVE-2023-22496/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-22496/</guid><description>CVSS 8.1 (High). Critical: CVSS score 8.1 (7.0 or more) and EPSS 0.36 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 14 Jan 2023 00:59:53 GMT</pubDate><category>CVE</category><category>critical</category></item></channel></rss>