privilege escalation Archives • Daily CyberSecurity

CVE-2026-72137 (CVSS 9.8): Linux Kernel Flaw Enables Root Privilege Escalation, PoC Public Linux kernel CVE-2026-72137 double-free vulnerability enabling root privilege escalation with public PoC exploit code

Linux kernel CVE-2026-72137 double-free vulnerability enabling root privilege escalation with public PoC exploit code

CVE-2026-72137 (CVSS 9.8): Linux Kernel Flaw Enables Root Privilege Escalation, PoC Public

Do Son August 27, 2026

TL;DR A double-free flaw in the Linux kernel, tracked as CVE-2026-72137, carries a CVSS score of 9.8....

FreeBSD Patches Eight Kernel Vulnerabilities FreeBSD security advisories patching eight kernel vulnerabilities including use-after-free local privilege escalation flaws CVE-2026-58090

FreeBSD security advisories patching eight kernel vulnerabilities including use-after-free local privilege escalation flaws CVE-2026-58090

FreeBSD Patches Eight Kernel Vulnerabilities

Do Son August 26, 2026

TL;DR The FreeBSD Project released six security advisories on August 25, 2026. Together they fix eight vulnerabilities...

Public PoC for CVE-2026-52923 Allows Attackers to Escalate to Root Privilege Linux kernel flaw CVE-2026-52923 root privilege escalation diagram

Linux kernel flaw CVE-2026-52923 root privilege escalation diagram

Public PoC for CVE-2026-52923 Allows Attackers to Escalate to Root Privilege

Do Son August 25, 2026

Security researchers publicly disclosed a proof-of-concept exploit for CVE-2026-52923. This Linux kernel flaw carries a CVSS score...

CVE-2026-53365: VsockDrop PoC Enables Unprivileged Local Privilege Escalation CVE-2026-53365 VsockDrop unprivileged local privilege escalation Linux kernel vsock io_uring zerocopy proof-of-concept exploit to root

CVE-2026-53365 VsockDrop unprivileged local privilege escalation Linux kernel vsock io_uring zerocopy proof-of-concept exploit to root

CVE-2026-53365: VsockDrop PoC Enables Unprivileged Local Privilege Escalation

Do Son August 25, 2026

TL;DR A researcher released VsockDrop, a proof-of-concept exploit for CVE-2026-53365 in the Linux kernel. The flaw enables...

CVE-2026-74480 (CVSS 9.8): Linux Kernel Privilege Escalation PoC Public Linux kernel CVE-2026-74480 privilege escalation vulnerability with public proof-of-concept exploit code in the network bridge module

Linux kernel CVE-2026-74480 privilege escalation vulnerability with public proof-of-concept exploit code in the network bridge module

CVE-2026-74480 (CVSS 9.8): Linux Kernel Privilege Escalation PoC Public

Do Son August 24, 2026

A newly disclosed flaw in the Linux kernel enables local Linux kernel privilege escalation. Tracked as CVE-2026-74480...

CVE-2026-52912: Linux Kernel Root Exploit PoC Disclosed CVE-2026-52912 Linux kernel privilege escalation use-after-free flaw in netfilter nf_queue with public root exploit PoC

CVE-2026-52912 Linux kernel privilege escalation use-after-free flaw in netfilter nf_queue with public root exploit PoC

CVE-2026-52912: Linux Kernel Root Exploit PoC Disclosed

Do Son August 24, 2026

TL;DR CVE-2026-52912 is a use-after-free flaw in the Linux kernel’s netfilter nf_queue code. It carries a CVSS...

Spring Data REST and Spring AI Vulnerabilities: Four High-Severity Flaws Patched Spring vulnerabilities advisory covering Spring Data REST and Spring AI four high severity flaws CVE-2026-47849

Spring vulnerabilities advisory covering Spring Data REST and Spring AI four high severity flaws CVE-2026-47849

Spring Data REST and Spring AI Vulnerabilities: Four High-Severity Flaws Patched

Do Son August 21, 2026

TL;DR VMware disclosed four Spring vulnerabilities on August 20, 2026. All rate as HIGH severity. One hits...

CVE-2026-19598: Pods Plugin Flaw Enables Complete Site Takeover, Attacks Seen in the Wild Pods WordPress plugin CVE-2026-19598 privilege escalation vulnerability enabling complete site takeover attacks in the wild

Pods WordPress plugin CVE-2026-19598 privilege escalation vulnerability enabling complete site takeover attacks in the wild

CVE-2026-19598: Pods Plugin Flaw Enables Complete Site Takeover, Attacks Seen in the Wild

Do Son August 21, 2026

TL;DR CVE-2026-19598 is a CVSS 9.8 privilege escalation flaw in the Pods WordPress plugin. It lets unauthenticated...

uutils coreutils stdbuf Flaw Lets Local Users Execute Arbitrary Code uutils coreutils vulnerability stdbuf LD_PRELOAD world-writable library flaw diagram

uutils coreutils vulnerability stdbuf LD_PRELOAD world-writable library flaw diagram

uutils coreutils stdbuf Flaw Lets Local Users Execute Arbitrary Code

Do Son August 21, 2026

TL;DR A uutils coreutils vulnerability affects the stdbuf tool in the Rust rewrite of GNU coreutils. By...

CVE-2026-67567 (CVSS 9.9): Red Hat Flaws Enable Privilege Escalation in ACM and FreeIPA Red Hat privilege escalation vulnerabilities CVE-2026-67567 ACM and FreeIPA CVE-2026-11861 CVE-2026-13097 advisory

Red Hat privilege escalation vulnerabilities CVE-2026-67567 ACM and FreeIPA CVE-2026-11861 CVE-2026-13097 advisory

CVE-2026-67567 (CVSS 9.9): Red Hat Flaws Enable Privilege Escalation in ACM and FreeIPA

Do Son August 21, 2026

TL;DR Red Hat disclosed three high-severity flaws that enable privilege escalation. The worst, CVE-2026-67567 (CVSS 9.9), hits...

CVE-2026-52929: PoC Exploit Published for Linux SCTP Privilege Escalation Linux kernel CVE-2026-52929 SCTP privilege escalation proof-of-concept exploit code demonstration on Ubuntu

Linux kernel CVE-2026-52929 SCTP privilege escalation proof-of-concept exploit code demonstration on Ubuntu

CVE-2026-52929: PoC Exploit Published for Linux SCTP Privilege Escalation

Do Son August 21, 2026

TL;DR A researcher published proof-of-concept exploit code for CVE-2026-52929, a Linux kernel SCTP flaw rated CVSS 7.5....

CVE-2026-70496 & CVE-2026-66794: Privilege Escalation in Red Hat ACM Hits CVSS 9.9 Red Hat ACM Kubernetes privilege escalation vulnerability CVE-2026-70496 CVE-2026-66794 CVSS 9.9 cluster control advisory

Red Hat ACM Kubernetes privilege escalation vulnerability CVE-2026-70496 CVE-2026-66794 CVSS 9.9 cluster control advisory

CVE-2026-70496 & CVE-2026-66794: Privilege Escalation in Red Hat ACM Hits CVSS 9.9

Do Son August 20, 2026

TL;DR Red Hat disclosed three high-severity flaws in its Advanced Cluster Management and Multicluster Engine for Kubernetes....

CVE-2026-20315 & CVE-2026-20317: Cisco Secure Workload Auth Bypass, Privilege Escalation Hit CVSS 10 Cisco Secure Workload authentication bypass and privilege escalation vulnerability CVE-2026-20315 CVE-2026-20317 CVSS 10 advisory

Cisco Secure Workload authentication bypass and privilege escalation vulnerability CVE-2026-20315 CVE-2026-20317 CVSS 10 advisory

CVE-2026-20315 & CVE-2026-20317: Cisco Secure Workload Auth Bypass, Privilege Escalation Hit CVSS 10

Do Son August 20, 2026

TL;DR Cisco released hardening updates for Secure Workload on August 19, 2026. The Cisco Secure Workload authentication...

Vault Secrets Operator Flaw CVE-2026-8715 Enables Privilege Escalation Vault Secrets Operator vulnerability CVE-2026-8715 privilege escalation diagram

Vault Secrets Operator vulnerability CVE-2026-8715 privilege escalation diagram

Vault Secrets Operator Flaw CVE-2026-8715 Enables Privilege Escalation

Do Son August 19, 2026

HashiCorp disclosed a Vault Secrets Operator vulnerability this week. Then, the bug, tracked as CVE-2026-8715, scores a...

CVE-2026-66792 (CVSS 9.9): Red Hat ACM Flaw Allows Full Compromise of the Managed Cluster CVE-2026-66792 Red Hat Advanced Cluster Management privilege escalation full compromise managed cluster CVE-2026-66795 CVE-2026-71472

CVE-2026-66792 Red Hat Advanced Cluster Management privilege escalation full compromise managed cluster CVE-2026-66795 CVE-2026-71472

CVE-2026-66792 (CVSS 9.9): Red Hat ACM Flaw Allows Full Compromise of the Managed Cluster

Do Son August 19, 2026

TL;DR Red Hat disclosed three critical flaws in its multicluster Kubernetes products. The most severe, CVE-2026-66792, scores...

BeyondTrust EPM Flaws Allow Windows Privilege Escalation BeyondTrust vulnerability CVE-2026-40144 local privilege escalation flaw in Endpoint Privilege Management for Windows

BeyondTrust vulnerability CVE-2026-40144 local privilege escalation flaw in Endpoint Privilege Management for Windows

BeyondTrust EPM Flaws Allow Windows Privilege Escalation

Do Son August 19, 2026

TL;DR BeyondTrust patched two high-severity flaws in Endpoint Privilege Management for Windows. This BeyondTrust vulnerability pair can...

CVE-2026-68138: PoC Exploit Enables Linux Kernel Privilege Escalation CVE-2026-68138 Linux kernel privilege escalation qdisc rate-table race condition use-after-free proof-of-concept exploit to root

CVE-2026-68138 Linux kernel privilege escalation qdisc rate-table race condition use-after-free proof-of-concept exploit to root

CVE-2026-68138: PoC Exploit Enables Linux Kernel Privilege Escalation

Do Son August 18, 2026

TL;DR A researcher released proof-of-concept exploit code for CVE-2026-68138, a race condition in the Linux kernel traffic-control...

Red Hat ACM Fixes Five Critical Flaws, Including CVE-2026-72526 RCE Bug (CVSS 9.9) RHACM remote code execution CVE-2026-72526 vulnerability diagram

Red Hat ACM Fixes Five Critical Flaws, Including CVE-2026-72526 RCE Bug (CVSS 9.9)

Do Son August 17, 2026

Red Hat patched five critical bugs in Advanced Cluster Management this week. Two of them allow RHACM...

Linux AF_PACKET Race (03390aa): PoC Exploit Enables Local Privilege Escalation Linux AF_PACKET hard_header_len race local privilege escalation kernel proof-of-concept exploit to root commit 03390aa

Linux AF_PACKET hard_header_len race local privilege escalation kernel proof-of-concept exploit to root commit 03390aa

Linux AF_PACKET Race (03390aa): PoC Exploit Enables Local Privilege Escalation

Do Son August 17, 2026

TL;DR A researcher published a proof-of-concept exploit for a Linux kernel AF_PACKET race condition. The flaw enables...

CVE-2026-64582: PoC Exploit Published for Kernel LPE Linux kernel RDMA rxe use-after-free CVE-2026-64582 local privilege escalation with public PoC exploit code

Linux kernel RDMA rxe use-after-free CVE-2026-64582 local privilege escalation with public PoC exploit code

CVE-2026-64582: PoC Exploit Published for Kernel LPE

Do Son August 14, 2026

TL;DR A researcher published full technical details and working proof-of-concept exploit code for CVE-2026-64582. The flaw is...

CVE-2026-43723: Apple mediaremoted Flaw Lets Apps Gain Root Privileges, PoC Exploit Code Publicly Disclosed Apple mediaremoted root privileges flaw CVE-2026-43723 with public proof-of-concept exploit code

Apple mediaremoted root privileges flaw CVE-2026-43723 with public proof-of-concept exploit code

CVE-2026-43723: Apple mediaremoted Flaw Lets Apps Gain Root Privileges, PoC Exploit Code Publicly Disclosed

Do Son August 13, 2026

TL;DR Apple patched a flaw that let a local app gain root privileges through the mediaremoted service....

CVE-2026-50656 PoC Published: Defender Privilege Escalation Bypass ShieldBreak PoC exploit code for CVE-2026-50656 Windows Defender privilege escalation displayed on screen

ShieldBreak PoC exploit code for CVE-2026-50656 Windows Defender privilege escalation displayed on screen

CVE-2026-50656 PoC Published: Defender Privilege Escalation Bypass

Do Son August 12, 2026

TL;DR A researcher has published a public PoC called ShieldBreak. It bypasses Microsoft’s July patch for the...