privilege escalation Archives • Page 2 of 17 • Daily CyberSecurity

CVE-2026-64560: Linux Kernel CPU Timer Use-After-Free Gives a Root Shell, PoC Exploit Code Publicly Disclosed

Linux kernel CPU timer flaw CVE-2026-64560 use-after-free giving a root shell, with public PoC exploit code

CVE-2026-64560: Linux Kernel CPU Timer Use-After-Free Gives a Root Shell, PoC Exploit Code Publicly Disclosed

Do Son August 12, 2026

TL;DR A Linux kernel CPU timer flaw lets a local user reach root. Tracked as CVE-2026-64560, it...

MarkLogic Server Security Bulletin Patches 10 Vulnerabilities, With CVSS Scores Up to 9.9 MarkLogic Server vulnerabilities including CVE-2026-7329 and CVE-2026-9192 rated up to CVSS 9.9

MarkLogic Server vulnerabilities including CVE-2026-7329 and CVE-2026-9192 rated up to CVSS 9.9

MarkLogic Server Security Bulletin Patches 10 Vulnerabilities, With CVSS Scores Up to 9.9

Do Son August 11, 2026

TL;DR Progress released an August 2026 bulletin for MarkLogic Server. It fixes ten MarkLogic Server vulnerabilities, several...

CVE-2026-27912: PoC Released for SYSTEM Privilege Flaw Windows Kerberos ResetNightmare CVE-2026-27912 elevation of privilege flaw with public proof-of-concept exploit code

Windows Kerberos ResetNightmare CVE-2026-27912 elevation of privilege flaw with public proof-of-concept exploit code

CVE-2026-27912: PoC Released for SYSTEM Privilege Flaw

Do Son August 11, 2026

TL;DR Researchers published full details and a proof-of-concept tool for CVE-2026-27912, called ResetNightmare. The flaw sits in...

Windows PnP Attack Chain Turns a USB Plug Into SYSTEM: Details and PoC Now Public Windows PnP attack chain diagram showing a USB plug and play exploit escalating to NT AUTHORITY SYSTEM privilege escalation

Windows PnP attack chain diagram showing a USB plug and play exploit escalating to NT AUTHORITY SYSTEM privilege escalation

Windows PnP Attack Chain Turns a USB Plug Into SYSTEM: Details and PoC Now Public

Do Son August 11, 2026

TL;DR Two Accenture researchers showed that plugging a USB device into Windows can hand an attacker SYSTEM....

CVE-2026-44945: Rancher Cross-Cluster Impersonation Flaw Enables Full Privilege Escalation, Rated CVSS 9.1 Rancher privilege escalation flaw CVE-2026-44945 via cross-cluster impersonation, rated CVSS 9.1

Rancher privilege escalation flaw CVE-2026-44945 via cross-cluster impersonation, rated CVSS 9.1

CVE-2026-44945: Rancher Cross-Cluster Impersonation Flaw Enables Full Privilege Escalation, Rated CVSS 9.1

Do Son August 11, 2026

TL;DR A critical flaw lets a low-privileged Rancher user seize full control of the platform. Tracked as...

Red Hat ACM privilege escalation flaw CVE-2026-10090 granting cluster-admin, rated CVSS 9.9

CVE-2026-10090: Red Hat ACM Privilege Escalation Flaw Grants Cluster-Admin, Rated CVSS 9.9

Do Son August 10, 2026

TL;DR Red Hat disclosed a critical privilege escalation flaw in Advanced Cluster Management (ACM) for Kubernetes. Tracked...

CVE-2026-43074: Linux Kernel eventpoll Use-After-Free Gives a Root Shell, PoC Exploit Code Publicly Disclosed Linux kernel eventpoll flaw CVE-2026-43074 use-after-free giving a root shell, with public PoC exploit code

Linux kernel eventpoll flaw CVE-2026-43074 use-after-free giving a root shell, with public PoC exploit code

CVE-2026-43074: Linux Kernel eventpoll Use-After-Free Gives a Root Shell, PoC Exploit Code Publicly Disclosed

Do Son August 10, 2026

TL;DR A Linux kernel eventpoll flaw lets a local user climb to root. Tracked as CVE-2026-43074, it...

CVE-2026-64564: SCTP Flaw Enables Container Escape Linux SCTP kernel use-after-free CVE-2026-64564 privilege escalation and container-to-host escape diagram

Linux SCTP kernel use-after-free CVE-2026-64564 privilege escalation and container-to-host escape diagram

CVE-2026-64564: SCTP Flaw Enables Container Escape

Do Son August 10, 2026

TL;DR A Linux kernel use-after-free in SCTP, tracked as CVE-2026-64564, allows local attackers to gain root. Researchers...

CVE-2026-5430: WSO2 Account Takeover Flaws Rated Up to CVSS 10 WSO2 account takeover flaws CVE-2026-5430 and CVE-2026-1728 rated up to CVSS 10

CVE-2026-5430: WSO2 Account Takeover Flaws Rated Up to CVSS 10

Do Son August 7, 2026

TL;DR WSO2 disclosed four critical vulnerabilities across its API and identity products. Several are WSO2 account takeover...

Phoenix Contact CHARX vulnerabilities affecting EV charging controller firmware

Phoenix Contact CHARX Vulnerabilities Expose EV Charging Controllers

Do Son August 6, 2026

TL;DR: Phoenix Contact CHARX vulnerabilities now number 20 across the SEC-3xxx EV charging controllers. Several rate critical,...

Linux suTrap Local Privilege Escalation Flaw PoC Exploit Disclosed Diagram demonstrating the Linux suTrap LPE flaw and the interactive su TIOCSTI bug attack flow

Diagram demonstrating the Linux suTrap LPE flaw and the interactive su TIOCSTI bug attack flow

Linux suTrap Local Privilege Escalation Flaw PoC Exploit Disclosed

Do Son August 5, 2026

TL;DR Security researchers have detailed a critical Linux suTrap local privilege escalation flaw. This interactive su TIOCSTI...

Linux Kernel Flaw CVE-2026-53264 Lets Local Users Execute Arbitrary Code, PoC Published Linux kernel vulnerability CVE-2026-53264 net/sched use-after-free enabling arbitrary code execution

Linux kernel vulnerability CVE-2026-53264 net/sched use-after-free enabling arbitrary code execution

Linux Kernel Flaw CVE-2026-53264 Lets Local Users Execute Arbitrary Code, PoC Published

Do Son August 4, 2026

TL;DR A new Linux kernel vulnerability, tracked as CVE-2026-53264, lets a local user run arbitrary code and...

Public PoC Exploits macOS DesktopServicesHelper for Root With No User Interaction macOS privilege escalation to root via DesktopServicesHelper chown and auth.db hijack with public PoC exploit

macOS privilege escalation to root via DesktopServicesHelper chown and auth.db hijack with public PoC exploit

Public PoC Exploits macOS DesktopServicesHelper for Root With No User Interaction

Do Son August 4, 2026

TL;DR A researcher has published full details and a working proof-of-concept for a macOS privilege escalation bug....

CVE-2026-58048: cPanel Root SQL Execution Flaw Patched cPanel root SQL execution vulnerability CVE-2026-58048 database privilege escalation diagram

cPanel root SQL execution vulnerability CVE-2026-58048 database privilege escalation diagram

CVE-2026-58048: cPanel Root SQL Execution Flaw Patched

Do Son August 4, 2026

TL;DR: cPanel patched a cPanel root SQL execution flaw tracked as CVE-2026-58048, rated CVSS 9.4. A second,...

CVE-2026-39875: Public PoC Lets a Malicious macOS App Gain Root Privileges macOS privilege escalation via CVE-2026-39875 CUPS flaw with public proof-of-concept exploit gaining root

macOS privilege escalation via CVE-2026-39875 CUPS flaw with public proof-of-concept exploit gaining root

CVE-2026-39875: Public PoC Lets a Malicious macOS App Gain Root Privileges

Do Son August 3, 2026

TL;DR Apple has patched a macOS privilege escalation flaw tracked as CVE-2026-39875. A malicious app can chain...

Fraggap Linux kernel vulnerability CVE-2026-53362 enabling local privilege escalation through a UDPv6 out-of-bounds write

Fraggap Linux Kernel Vulnerability: Full Details and PoC Exploit Code Now Public

Do Son July 28, 2026

A researcher has published full technical details and working proof-of-concept code for a Linux kernel vulnerability named...

OVSwrap local root vulnerability CVE-2026-64531 in the Linux kernel Open vSwitch datapath

OVSwrap Local Root Vulnerability (CVE-2026-64531): Exploit Details and PoC Publicly Disclosed

Do Son July 28, 2026

TL;DR The OVSwrap local root flaw lets an unprivileged user gain root on many Linux systems. It...

Kemp LoadMaster vulnerabilities warning covering OS command injection and privilege escalation flaws

Progress Patches Five Kemp LoadMaster Vulnerabilities

Do Son July 28, 2026

TL;DR Progress fixed five Kemp LoadMaster vulnerabilities in a July 2026 bulletin. Three allow OS command injection,...

RefluXFS CVE-2026-64600: XFS Root Privilege Escalation Hits 16.4M Systems RefluXFS CVE-2026-64600 XFS privilege escalation to root diagram showing a reflink direct-I/O race overwriting a protected file across 16.4 million Linux systems

RefluXFS CVE-2026-64600 XFS privilege escalation to root diagram showing a reflink direct-I/O race overwriting a protected file across 16.4 million Linux systems

RefluXFS CVE-2026-64600: XFS Root Privilege Escalation Hits 16.4M Systems

Do Son July 22, 2026

TL;DR Qualys disclosed RefluXFS on July 22, 2026. Tracked as CVE-2026-64600, it is a Linux kernel XFS...

Exim Directory Traversal Flaw Enables Privilege Escalation, Fixed in 4.99.5 Exim vulnerability diagram showing a directory traversal that escapes the spool area and leads to local privilege escalation

Exim vulnerability diagram showing a directory traversal that escapes the spool area and leads to local privilege escalation

Exim Directory Traversal Flaw Enables Privilege Escalation, Fixed in 4.99.5

Do Son July 22, 2026

TL;DR The Exim team published advisory EXIM-Security-2026-06-22.1 on July 22, 2026. It describes an Exim vulnerability that...

SolarWinds Patches 15 Critical Serv-U Vulnerabilities Enabling Root Access SolarWinds Serv-U vulnerabilities enabling privilege escalation and remote code execution as root

SolarWinds Serv-U vulnerabilities enabling privilege escalation and remote code execution as root

SolarWinds Patches 15 Critical Serv-U Vulnerabilities Enabling Root Access

Do Son July 21, 2026

TL;DR SolarWinds fixed 15 critical SolarWinds Serv-U vulnerabilities on July 21, 2026. They allow privilege escalation, account...

snap-confine Flaw CVE-2026-8933 Lets Any User Get Root on Ubuntu CVE-2026-8933 is a snap-confine privilege escalation flaw. It gives any user root on default Ubuntu Desktop 26.04, 25.10, and 24.04. Update snapd now. #snapconfine #CVE20268933 #Ubuntu #PrivilegeEscalation #LPE #Linux #Qualys

CVE-2026-8933 is a snap-confine privilege escalation flaw. It gives any user root on default Ubuntu Desktop 26.04, 25.10, and 24.04. Update snapd now. #snapconfine #CVE20268933 #Ubuntu #PrivilegeEscalation #LPE #Linux #Qualys

snap-confine Flaw CVE-2026-8933 Lets Any User Get Root on Ubuntu

Do Son July 21, 2026

TL;DR Qualys found a snap-confine privilege escalation flaw, tracked as CVE-2026-8933. It lets any local user reach...