privilege escalation Archives • Daily CyberSecurity

CVE-2026-54523 (CVSS 9.6): Public PoC Exploit Enables Kyverno Privilege Escalation to Admin in Any Namespace Kyverno vulnerability CVE-2026-54523 privilege escalation to admin in any namespace including kube-system

Kyverno vulnerability CVE-2026-54523 privilege escalation to admin in any namespace including kube-system

CVE-2026-54523 (CVSS 9.6): Public PoC Exploit Enables Kyverno Privilege Escalation to Admin in Any Namespace

Do Son July 17, 2026

TL;DR A critical Kyverno vulnerability, CVE-2026-54523 (CVSS 9.6), has been publicly disclosed with full technical details and...

Citrix Secure Access vulnerability CVE-2026-53565 privilege escalation illustration

Citrix Secure Access Vulnerability Lets Local Users Gain SYSTEM Privileges

Do Son July 17, 2026

TL;DR Cloud Software Group published bulletin CTX696734 for two flaws in Citrix Windows clients. CVE-2026-53565, a Citrix...

CVE-2026-53412: CVSS 9.8 Zoom Vulnerability Allows Unauthenticated Account Takeover Zoom vulnerability CVE-2026-53412 account takeover flaw in Zoom Workplace for Windows

Zoom vulnerability CVE-2026-53412 account takeover flaw in Zoom Workplace for Windows

CVE-2026-53412: CVSS 9.8 Zoom Vulnerability Allows Unauthenticated Account Takeover

Do Son July 15, 2026

TL;DR Zoom has patched four flaws across its Windows products. The most severe Zoom vulnerability, CVE-2026-53412 (CVSS...

Four Critical Coolify Vulnerabilities Allow Remote Code Execution and Cross-Team Server Access Coolify vulnerabilities enabling remote code execution and cross-tenant server access in the self-hosted PaaS

Coolify vulnerabilities enabling remote code execution and cross-tenant server access in the self-hosted PaaS

Four Critical Coolify Vulnerabilities Allow Remote Code Execution and Cross-Team Server Access

Do Son July 15, 2026

TL;DR Four critical Coolify vulnerabilities now have patches. Three score CVSS 9.9, and they let low-privileged members...

LegacyHive: Exploit Code and Full Details Publicly Disclosed for Unpatched Windows Privilege Escalation Flaw LegacyHive exploit public disclosure Windows privilege escalation flaw by Nightmare-Eclipse

LegacyHive exploit public disclosure Windows privilege escalation flaw by Nightmare-Eclipse

LegacyHive: Exploit Code and Full Details Publicly Disclosed for Unpatched Windows Privilege Escalation Flaw

Do Son July 14, 2026

TL;DR A researcher known as Nightmare-Eclipse has published details and proof-of-concept code for LegacyHive, a Windows User...

Exploited in the Wild? Debian Webhost Rooted as Public PoCs Land for Bad Epoll (CVE-2026-46242) and IPv6 Frag Escape Bad Epoll CVE-2026-46242 Linux kernel privilege escalation use-after-free public PoC exploit

Bad Epoll CVE-2026-46242 Linux kernel privilege escalation use-after-free public PoC exploit

Exploited in the Wild? Debian Webhost Rooted as Public PoCs Land for Bad Epoll (CVE-2026-46242) and IPv6 Frag Escape

Do Son July 14, 2026

TL;DR Two Linux kernel flaws now have public proof-of-concept exploit code and full technical write-ups. Bad Epoll...

Public Exploit and Details Released for Bad Epoll Root Flaw (CVE-2026-46242) Bad Epoll CVE-2026-46242 Linux kernel use-after-free enabling root privilege escalation

Bad Epoll CVE-2026-46242 Linux kernel use-after-free enabling root privilege escalation

Public Exploit and Details Released for Bad Epoll Root Flaw (CVE-2026-46242)

Do Son July 14, 2026

TL;DR Bad Epoll is a Linux kernel use-after-free that turns any unprivileged user into root. It is...

WinFsp Patches Two Privilege Escalation Flaws: CVE-2026-3006 and CVE-2026-7162 (CVSS 7.8) WinFsp vulnerabilities CVE-2026-3006 and CVE-2026-7162 enabling local privilege escalation on Windows

WinFsp vulnerabilities CVE-2026-3006 and CVE-2026-7162 enabling local privilege escalation on Windows

WinFsp Patches Two Privilege Escalation Flaws: CVE-2026-3006 and CVE-2026-7162 (CVSS 7.8)

Do Son July 14, 2026

TL;DR The WinFsp project has fixed two WinFsp vulnerabilities, CVE-2026-3006 (CVSS 7.0) and CVE-2026-7162 (CVSS 7.8). Both...

CVE-2026-20744: Privilege Escalation in EV Chargers Diagram of CVE-2026-20744 privilege escalation flaw in Hydro-Québec charging stations alongside CVE-2026-42952 and CVE-2026-44383.

Diagram of CVE-2026-20744 privilege escalation flaw in Hydro-Québec charging stations alongside CVE-2026-42952 and CVE-2026-44383.

CVE-2026-20744: Privilege Escalation in EV Chargers

Do Son July 13, 2026

Hydro-Québec recently disclosed a severe privilege escalation flaw impacting its electric vehicle charging network. This critical vulnerability...

FreeBSD Patches Three Kernel Flaws That Enable Local Privilege Escalation FreeBSD privilege escalation advisory chart highlighting a kernel use-after-free and two local root flaws

FreeBSD privilege escalation advisory chart highlighting a kernel use-after-free and two local root flaws

FreeBSD Patches Three Kernel Flaws That Enable Local Privilege Escalation

Do Son July 10, 2026

TL;DR On June 30, 2026, the FreeBSD Project shipped three advisories covering FreeBSD privilege escalation bugs in...

GNU Guix Vulnerabilities Expose guix substitute and guix pull GNU Guix vulnerabilities in guix substitute and guix pull enabling remote privilege escalation

GNU Guix vulnerabilities in guix substitute and guix pull enabling remote privilege escalation

GNU Guix Vulnerabilities Expose guix substitute and guix pull

Do Son July 10, 2026

TL;DR The GNU Guix project disclosed four GNU Guix vulnerabilities in early July 2026. Three affect the...

Linux kernel privilege escalation CVE-2026-46215 DRM GEM use-after-free root exploit diagram

Linux Kernel Privilege Escalation Flaw CVE-2026-46215: PoC and Full Write-Up Public

Do Son July 9, 2026

TL;DR A researcher has published a full technical write-up and proof-of-concept exploit for a Linux kernel privilege...

Microsoft Patches RoguePlanet Defender Zero-Day That Grants SYSTEM Access Microsoft Defender zero-day RoguePlanet CVE-2026-50656 patched via Malware Protection Engine update

Microsoft Defender zero-day RoguePlanet CVE-2026-50656 patched via Malware Protection Engine update

Microsoft Patches RoguePlanet Defender Zero-Day That Grants SYSTEM Access

Do Son July 9, 2026

TL;DR Microsoft patched a Microsoft Defender zero-day named RoguePlanet, tracked as CVE-2026-50656. The flaw is a race...

Public Exploit for GhostLock (CVE-2026-43499) Enables Linux Privilege Escalation and Container Escape GhostLock CVE-2026-43499 Linux kernel privilege escalation and container escape exploit chain

GhostLock CVE-2026-43499 Linux kernel privilege escalation and container escape exploit chain

Public Exploit for GhostLock (CVE-2026-43499) Enables Linux Privilege Escalation and Container Escape

Do Son July 8, 2026

TL;DR Researchers have published full details and proof-of-concept code for GhostLock. This Linux kernel bug, tracked as...

Linux kernel vulnerability CVE-2024-26582 TLS use-after-free root shell exploit diagram

Linux Kernel Vulnerability CVE-2024-26582: Public PoC Reaches Root Shell

Do Son July 7, 2026

TL;DR Researchers have published full technical details and proof-of-concept exploit code for a Linux kernel vulnerability tracked...

Kerberos Reflection Bypass CVE-2026-26128 Gets Public PoC Exploit Kerberos reflection CVE-2026-26128 SMB SYSTEM privilege escalation Windows Unicode SPN PoC exploit

Kerberos reflection CVE-2026-26128 SMB SYSTEM privilege escalation Windows Unicode SPN PoC exploit

Kerberos Reflection Bypass CVE-2026-26128 Gets Public PoC Exploit

Do Son July 6, 2026

TL;DR Synacktiv publicly disclosed a Kerberos reflection bypass tracked as CVE-2026-26128. The flaw lets a domain user...

Public PoC and Exploit Details Released for IPV6_FRAG_ESCAPE on RHEL 10 IPV6_FRAG_ESCAPE IPv6 container escape PoC root shell on RHEL 10 and CentOS Stream 10 kernel

IPV6_FRAG_ESCAPE IPv6 container escape PoC root shell on RHEL 10 and CentOS Stream 10 kernel

Public PoC and Exploit Details Released for IPV6_FRAG_ESCAPE on RHEL 10

Do Son June 29, 2026

Security researcher Massimiliano Oldani has published IPV6_FRAG_ESCAPE, a working proof-of-concept for an IPv6 container escape on CentOS...

NTLM Reflection Bypass CVE-2026-24294 Gets Public PoC Exploit NTLM reflection CVE-2026-24294 SMB local privilege escalation Windows Server 2025 PoC exploit

NTLM reflection CVE-2026-24294 SMB local privilege escalation Windows Server 2025 PoC exploit

NTLM Reflection Bypass CVE-2026-24294 Gets Public PoC Exploit

Do Son June 29, 2026

TL;DR Synacktiv publicly disclosed a new NTLM reflection bypass tracked as CVE-2026-24294. The flaw gives a local...

DirtyClone Linux Kernel Flaw Lets Local Users Get Root DirtyClone Linux kernel privilege escalation flaw CVE-2026-43503 page cache exploit

DirtyClone Linux Kernel Flaw Lets Local Users Get Root

Do Son June 28, 2026

TL;DR DirtyClone is a Linux kernel privilege escalation flaw tracked as CVE-2026-43503. It scores 8.8 on the...

Avo Flaw CVE-2026-55518 Enables Privilege Escalation in Rails Apps Avo authorization bypass CVE-2026-55518 enabling privilege escalation in a Ruby on Rails admin panel

Avo authorization bypass CVE-2026-55518 enabling privilege escalation in a Ruby on Rails admin panel

Avo Flaw CVE-2026-55518 Enables Privilege Escalation in Rails Apps

Do Son June 22, 2026

At a glance CVE CVE-2026-55518 CVSS 9.6 (Critical) Product / vendor Avo admin panel framework / Avo...

LiteSpeed cPanel privilege escalation CVE-2026-54420, active exploitation, symlink vulnerability LiteSpeed cPanel Plugin Vulnerability CVE-2026-48172 Exploit

LiteSpeed cPanel Privilege Escalation Flaw Exploited in the Wild (CVE-2026-54420)

Do Son June 16, 2026

A LiteSpeed cPanel privilege escalation flaw is being exploited in the wild right now. Tracked as CVE-2026-54420,...

FreeBSD Privilege Escalation Flaw CVE-2026-49413 Hits the Linuxulator FreeBSD privilege escalation CVE-2026-49413, Linuxulator vulnerability

FreeBSD privilege escalation CVE-2026-49413, Linuxulator vulnerability

FreeBSD Privilege Escalation Flaw CVE-2026-49413 Hits the Linuxulator

Do Son June 15, 2026

Researchers have disclosed a serious FreeBSD privilege escalation vulnerability that hands local users a root shell. Tracked...