CVE-2021-40323: Cobbler Project Cobbler

Critical severity, CVSS 9.8. EPSS: 86.8% chance of exploitation in the next 30 days.

Cobbler before 3.3.0 allows log poisoning, and resultant Remote Code Execution, via an XMLRPC method that logs to the logfile for template injection.

Affected products

• Cobbler Project Cobbler: up to and including 3.3.0

Published 2021-10-04. Last modified 2026-06-17.