privilege escalation Archives • Daily CyberSecurity

CVE-2026-64564: SCTP Flaw Enables Container Escape Linux SCTP kernel use-after-free CVE-2026-64564 privilege escalation and container-to-host escape diagram

Linux SCTP kernel use-after-free CVE-2026-64564 privilege escalation and container-to-host escape diagram

CVE-2026-64564: SCTP Flaw Enables Container Escape

Do Son August 10, 2026

TL;DR A Linux kernel use-after-free in SCTP, tracked as CVE-2026-64564, allows local attackers to gain root. Researchers...

CVE-2026-5430: WSO2 Account Takeover Flaws Rated Up to CVSS 10 WSO2 account takeover flaws CVE-2026-5430 and CVE-2026-1728 rated up to CVSS 10

CVE-2026-5430: WSO2 Account Takeover Flaws Rated Up to CVSS 10

Do Son August 7, 2026

TL;DR WSO2 disclosed four critical vulnerabilities across its API and identity products. Several are WSO2 account takeover...

Phoenix Contact CHARX vulnerabilities affecting EV charging controller firmware

Phoenix Contact CHARX Vulnerabilities Expose EV Charging Controllers

Do Son August 6, 2026

TL;DR: Phoenix Contact CHARX vulnerabilities now number 20 across the SEC-3xxx EV charging controllers. Several rate critical,...

Linux suTrap Local Privilege Escalation Flaw PoC Exploit Disclosed Diagram demonstrating the Linux suTrap LPE flaw and the interactive su TIOCSTI bug attack flow

Diagram demonstrating the Linux suTrap LPE flaw and the interactive su TIOCSTI bug attack flow

Linux suTrap Local Privilege Escalation Flaw PoC Exploit Disclosed

Do Son August 5, 2026

TL;DR Security researchers have detailed a critical Linux suTrap local privilege escalation flaw. This interactive su TIOCSTI...

Linux Kernel Flaw CVE-2026-53264 Lets Local Users Execute Arbitrary Code, PoC Published Linux kernel vulnerability CVE-2026-53264 net/sched use-after-free enabling arbitrary code execution

Linux kernel vulnerability CVE-2026-53264 net/sched use-after-free enabling arbitrary code execution

Linux Kernel Flaw CVE-2026-53264 Lets Local Users Execute Arbitrary Code, PoC Published

Do Son August 4, 2026

TL;DR A new Linux kernel vulnerability, tracked as CVE-2026-53264, lets a local user run arbitrary code and...

Public PoC Exploits macOS DesktopServicesHelper for Root With No User Interaction macOS privilege escalation to root via DesktopServicesHelper chown and auth.db hijack with public PoC exploit

macOS privilege escalation to root via DesktopServicesHelper chown and auth.db hijack with public PoC exploit

Public PoC Exploits macOS DesktopServicesHelper for Root With No User Interaction

Do Son August 4, 2026

TL;DR A researcher has published full details and a working proof-of-concept for a macOS privilege escalation bug....

CVE-2026-58048: cPanel Root SQL Execution Flaw Patched cPanel root SQL execution vulnerability CVE-2026-58048 database privilege escalation diagram

cPanel root SQL execution vulnerability CVE-2026-58048 database privilege escalation diagram

CVE-2026-58048: cPanel Root SQL Execution Flaw Patched

Do Son August 4, 2026

TL;DR: cPanel patched a cPanel root SQL execution flaw tracked as CVE-2026-58048, rated CVSS 9.4. A second,...

CVE-2026-39875: Public PoC Lets a Malicious macOS App Gain Root Privileges macOS privilege escalation via CVE-2026-39875 CUPS flaw with public proof-of-concept exploit gaining root

macOS privilege escalation via CVE-2026-39875 CUPS flaw with public proof-of-concept exploit gaining root

CVE-2026-39875: Public PoC Lets a Malicious macOS App Gain Root Privileges

Do Son August 3, 2026

TL;DR Apple has patched a macOS privilege escalation flaw tracked as CVE-2026-39875. A malicious app can chain...

Fraggap Linux kernel vulnerability CVE-2026-53362 enabling local privilege escalation through a UDPv6 out-of-bounds write

Fraggap Linux Kernel Vulnerability: Full Details and PoC Exploit Code Now Public

Do Son July 28, 2026

A researcher has published full technical details and working proof-of-concept code for a Linux kernel vulnerability named...

OVSwrap local root vulnerability CVE-2026-64531 in the Linux kernel Open vSwitch datapath

OVSwrap Local Root Vulnerability (CVE-2026-64531): Exploit Details and PoC Publicly Disclosed

Do Son July 28, 2026

TL;DR The OVSwrap local root flaw lets an unprivileged user gain root on many Linux systems. It...

Kemp LoadMaster vulnerabilities warning covering OS command injection and privilege escalation flaws

Progress Patches Five Kemp LoadMaster Vulnerabilities

Do Son July 28, 2026

TL;DR Progress fixed five Kemp LoadMaster vulnerabilities in a July 2026 bulletin. Three allow OS command injection,...

RefluXFS CVE-2026-64600: XFS Root Privilege Escalation Hits 16.4M Systems RefluXFS CVE-2026-64600 XFS privilege escalation to root diagram showing a reflink direct-I/O race overwriting a protected file across 16.4 million Linux systems

RefluXFS CVE-2026-64600 XFS privilege escalation to root diagram showing a reflink direct-I/O race overwriting a protected file across 16.4 million Linux systems

RefluXFS CVE-2026-64600: XFS Root Privilege Escalation Hits 16.4M Systems

Do Son July 22, 2026

TL;DR Qualys disclosed RefluXFS on July 22, 2026. Tracked as CVE-2026-64600, it is a Linux kernel XFS...

Exim Directory Traversal Flaw Enables Privilege Escalation, Fixed in 4.99.5 Exim vulnerability diagram showing a directory traversal that escapes the spool area and leads to local privilege escalation

Exim vulnerability diagram showing a directory traversal that escapes the spool area and leads to local privilege escalation

Exim Directory Traversal Flaw Enables Privilege Escalation, Fixed in 4.99.5

Do Son July 22, 2026

TL;DR The Exim team published advisory EXIM-Security-2026-06-22.1 on July 22, 2026. It describes an Exim vulnerability that...

SolarWinds Patches 15 Critical Serv-U Vulnerabilities Enabling Root Access SolarWinds Serv-U vulnerabilities enabling privilege escalation and remote code execution as root

SolarWinds Serv-U vulnerabilities enabling privilege escalation and remote code execution as root

SolarWinds Patches 15 Critical Serv-U Vulnerabilities Enabling Root Access

Do Son July 21, 2026

TL;DR SolarWinds fixed 15 critical SolarWinds Serv-U vulnerabilities on July 21, 2026. They allow privilege escalation, account...

snap-confine Flaw CVE-2026-8933 Lets Any User Get Root on Ubuntu CVE-2026-8933 is a snap-confine privilege escalation flaw. It gives any user root on default Ubuntu Desktop 26.04, 25.10, and 24.04. Update snapd now. #snapconfine #CVE20268933 #Ubuntu #PrivilegeEscalation #LPE #Linux #Qualys

CVE-2026-8933 is a snap-confine privilege escalation flaw. It gives any user root on default Ubuntu Desktop 26.04, 25.10, and 24.04. Update snapd now. #snapconfine #CVE20268933 #Ubuntu #PrivilegeEscalation #LPE #Linux #Qualys

snap-confine Flaw CVE-2026-8933 Lets Any User Get Root on Ubuntu

Do Son July 21, 2026

TL;DR Qualys found a snap-confine privilege escalation flaw, tracked as CVE-2026-8933. It lets any local user reach...

CVE-2026-54523 (CVSS 9.6): Public PoC Exploit Enables Kyverno Privilege Escalation to Admin in Any Namespace Kyverno vulnerability CVE-2026-54523 privilege escalation to admin in any namespace including kube-system

Kyverno vulnerability CVE-2026-54523 privilege escalation to admin in any namespace including kube-system

CVE-2026-54523 (CVSS 9.6): Public PoC Exploit Enables Kyverno Privilege Escalation to Admin in Any Namespace

Do Son July 17, 2026

TL;DR A critical Kyverno vulnerability, CVE-2026-54523 (CVSS 9.6), has been publicly disclosed with full technical details and...

Citrix Secure Access vulnerability CVE-2026-53565 privilege escalation illustration

Citrix Secure Access Vulnerability Lets Local Users Gain SYSTEM Privileges

Do Son July 17, 2026

TL;DR Cloud Software Group published bulletin CTX696734 for two flaws in Citrix Windows clients. CVE-2026-53565, a Citrix...

CVE-2026-53412: CVSS 9.8 Zoom Vulnerability Allows Unauthenticated Account Takeover Zoom vulnerability CVE-2026-53412 account takeover flaw in Zoom Workplace for Windows

Zoom vulnerability CVE-2026-53412 account takeover flaw in Zoom Workplace for Windows

CVE-2026-53412: CVSS 9.8 Zoom Vulnerability Allows Unauthenticated Account Takeover

Do Son July 15, 2026

TL;DR Zoom has patched four flaws across its Windows products. The most severe Zoom vulnerability, CVE-2026-53412 (CVSS...

Four Critical Coolify Vulnerabilities Allow Remote Code Execution and Cross-Team Server Access Coolify vulnerabilities enabling remote code execution and cross-tenant server access in the self-hosted PaaS

Coolify vulnerabilities enabling remote code execution and cross-tenant server access in the self-hosted PaaS

Four Critical Coolify Vulnerabilities Allow Remote Code Execution and Cross-Team Server Access

Do Son July 15, 2026

TL;DR Four critical Coolify vulnerabilities now have patches. Three score CVSS 9.9, and they let low-privileged members...

LegacyHive: Exploit Code and Full Details Publicly Disclosed for Unpatched Windows Privilege Escalation Flaw LegacyHive exploit public disclosure Windows privilege escalation flaw by Nightmare-Eclipse

LegacyHive exploit public disclosure Windows privilege escalation flaw by Nightmare-Eclipse

LegacyHive: Exploit Code and Full Details Publicly Disclosed for Unpatched Windows Privilege Escalation Flaw

Do Son July 14, 2026

TL;DR A researcher known as Nightmare-Eclipse has published details and proof-of-concept code for LegacyHive, a Windows User...

Exploited in the Wild? Debian Webhost Rooted as Public PoCs Land for Bad Epoll (CVE-2026-46242) and IPv6 Frag Escape Bad Epoll CVE-2026-46242 Linux kernel privilege escalation use-after-free public PoC exploit

Bad Epoll CVE-2026-46242 Linux kernel privilege escalation use-after-free public PoC exploit

Exploited in the Wild? Debian Webhost Rooted as Public PoCs Land for Bad Epoll (CVE-2026-46242) and IPv6 Frag Escape

Do Son July 14, 2026

TL;DR Two Linux kernel flaws now have public proof-of-concept exploit code and full technical write-ups. Bad Epoll...

Public Exploit and Details Released for Bad Epoll Root Flaw (CVE-2026-46242) Bad Epoll CVE-2026-46242 Linux kernel use-after-free enabling root privilege escalation

Bad Epoll CVE-2026-46242 Linux kernel use-after-free enabling root privilege escalation

Public Exploit and Details Released for Bad Epoll Root Flaw (CVE-2026-46242)

Do Son July 14, 2026

TL;DR Bad Epoll is a Linux kernel use-after-free that turns any unprivileged user into root. It is...