privilege escalation Archives • Page 3 of 19 • Daily CyberSecurity

CVE-2026-53365: VsockDrop PoC Enables Unprivileged Local Privilege Escalation

CVE-2026-53365 VsockDrop unprivileged local privilege escalation Linux kernel vsock io_uring zerocopy proof-of-concept exploit to root

CVE-2026-53365: VsockDrop PoC Enables Unprivileged Local Privilege Escalation

Do Son August 25, 2026

A public PoC named VsockDrop turns CVE-2026-53365 into unprivileged local privilege escalation to root on Linux. Details and exploit code are disclosed.

CVE-2026-74480 (CVSS 9.8): Linux Kernel Privilege Escalation PoC Public Linux kernel CVE-2026-74480 privilege escalation vulnerability with public proof-of-concept exploit code in the network bridge module

Linux kernel CVE-2026-74480 privilege escalation vulnerability with public proof-of-concept exploit code in the network bridge module

CVE-2026-74480 (CVSS 9.8): Linux Kernel Privilege Escalation PoC Public

Do Son August 24, 2026

CVE-2026-74480 (CVSS 9.8) enables Linux kernel privilege escalation via a bridge use-after-free. Exploit code and a demo are now public.

CVE-2026-52912: Linux Kernel Root Exploit PoC Disclosed CVE-2026-52912 Linux kernel privilege escalation use-after-free flaw in netfilter nf_queue with public root exploit PoC

CVE-2026-52912 Linux kernel privilege escalation use-after-free flaw in netfilter nf_queue with public root exploit PoC

CVE-2026-52912: Linux Kernel Root Exploit PoC Disclosed

Do Son August 24, 2026

CVE-2026-52912, a Linux kernel netfilter use-after-free, now has public PoC exploit code enabling root privilege escalation.

Spring Data REST and Spring AI Vulnerabilities: Four High-Severity Flaws Patched Spring vulnerabilities advisory covering Spring Data REST and Spring AI four high severity flaws CVE-2026-47849

Spring vulnerabilities advisory covering Spring Data REST and Spring AI four high severity flaws CVE-2026-47849

Spring Data REST and Spring AI Vulnerabilities: Four High-Severity Flaws Patched

Do Son August 21, 2026

Four Spring vulnerabilities hit Spring Data REST and Spring AI, including CVE-2026-47849, a privilege escalation flaw. Patch to the fixed versions now.

CVE-2026-19598: Pods Plugin Flaw Enables Complete Site Takeover, Attacks Seen in the Wild Pods WordPress plugin CVE-2026-19598 privilege escalation vulnerability enabling complete site takeover attacks in the wild

Pods WordPress plugin CVE-2026-19598 privilege escalation vulnerability enabling complete site takeover attacks in the wild

CVE-2026-19598: Pods Plugin Flaw Enables Complete Site Takeover, Attacks Seen in the Wild

Do Son August 21, 2026

CVE-2026-19598 (CVSS 9.8) in the Pods WordPress plugin enables complete site takeover. Wordfence is blocking attacks in the wild. Update now.

uutils coreutils stdbuf Flaw Lets Local Users Execute Arbitrary Code uutils coreutils vulnerability stdbuf LD_PRELOAD world-writable library flaw diagram

uutils coreutils vulnerability stdbuf LD_PRELOAD world-writable library flaw diagram

uutils coreutils stdbuf Flaw Lets Local Users Execute Arbitrary Code

Do Son August 21, 2026

A uutils coreutils vulnerability in stdbuf uses a world-writable libstdbuf.so via LD_PRELOAD, letting local users execute arbitrary code.

CVE-2026-67567 (CVSS 9.9): Red Hat Flaws Enable Privilege Escalation in ACM and FreeIPA Red Hat privilege escalation vulnerabilities CVE-2026-67567 ACM and FreeIPA CVE-2026-11861 CVE-2026-13097 advisory

Red Hat privilege escalation vulnerabilities CVE-2026-67567 ACM and FreeIPA CVE-2026-11861 CVE-2026-13097 advisory

CVE-2026-67567 (CVSS 9.9): Red Hat Flaws Enable Privilege Escalation in ACM and FreeIPA

Do Son August 21, 2026

CVE-2026-67567 (CVSS 9.9) leads three Red Hat privilege escalation flaws in ACM and FreeIPA. Two FreeIPA bugs can reach full domain compromise.

CVE-2026-52929: PoC Exploit Published for Linux SCTP Privilege Escalation Linux kernel CVE-2026-52929 SCTP privilege escalation proof-of-concept exploit code demonstration on Ubuntu

Linux kernel CVE-2026-52929 SCTP privilege escalation proof-of-concept exploit code demonstration on Ubuntu

CVE-2026-52929: PoC Exploit Published for Linux SCTP Privilege Escalation

Do Son August 21, 2026

Public PoC exploit code for CVE-2026-52929, a Linux kernel SCTP flaw, escalates to root. Full vulnerability details are now disclosed.

CVE-2026-70496 & CVE-2026-66794: Privilege Escalation in Red Hat ACM Hits CVSS 9.9 Red Hat ACM Kubernetes privilege escalation vulnerability CVE-2026-70496 CVE-2026-66794 CVSS 9.9 cluster control advisory

Red Hat ACM Kubernetes privilege escalation vulnerability CVE-2026-70496 CVE-2026-66794 CVSS 9.9 cluster control advisory

CVE-2026-70496 & CVE-2026-66794: Privilege Escalation in Red Hat ACM Hits CVSS 9.9

Do Son August 20, 2026

Red Hat ACM privilege escalation flaws (CVE-2026-70496, CVSS 9.9) let attackers seize full cluster control. See the three Kubernetes bugs.

CVE-2026-20315 & CVE-2026-20317: Cisco Secure Workload Auth Bypass, Privilege Escalation Hit CVSS 10 Cisco Secure Workload authentication bypass and privilege escalation vulnerability CVE-2026-20315 CVE-2026-20317 CVSS 10 advisory

Cisco Secure Workload authentication bypass and privilege escalation vulnerability CVE-2026-20315 CVE-2026-20317 CVSS 10 advisory

CVE-2026-20315 & CVE-2026-20317: Cisco Secure Workload Auth Bypass, Privilege Escalation Hit CVSS 10

Do Son August 20, 2026

Cisco patches Secure Workload flaws CVE-2026-20315 and CVE-2026-20317, an authentication bypass and privilege escalation pair scoring CVSS 10. Upgrade now.

Vault Secrets Operator Flaw CVE-2026-8715 Enables Privilege Escalation Vault Secrets Operator vulnerability CVE-2026-8715 privilege escalation diagram

Vault Secrets Operator vulnerability CVE-2026-8715 privilege escalation diagram

Vault Secrets Operator Flaw CVE-2026-8715 Enables Privilege Escalation

Do Son August 19, 2026

A Vault Secrets Operator vulnerability, CVE-2026-8715, lets tenants read pod files and gain privilege escalation. Patch to 1.5.0 now.

CVE-2026-66792 (CVSS 9.9): Red Hat ACM Flaw Allows Full Compromise of the Managed Cluster CVE-2026-66792 Red Hat Advanced Cluster Management privilege escalation full compromise managed cluster CVE-2026-66795 CVE-2026-71472

CVE-2026-66792 Red Hat Advanced Cluster Management privilege escalation full compromise managed cluster CVE-2026-66795 CVE-2026-71472

CVE-2026-66792 (CVSS 9.9): Red Hat ACM Flaw Allows Full Compromise of the Managed Cluster

Do Son August 19, 2026

CVE-2026-66792 (CVSS 9.9) and two more Red Hat ACM flaws allow full compromise of the managed cluster via privilege escalation.

BeyondTrust EPM Flaws Allow Windows Privilege Escalation BeyondTrust vulnerability CVE-2026-40144 local privilege escalation flaw in Endpoint Privilege Management for Windows

BeyondTrust vulnerability CVE-2026-40144 local privilege escalation flaw in Endpoint Privilege Management for Windows

BeyondTrust EPM Flaws Allow Windows Privilege Escalation

Do Son August 19, 2026

BeyondTrust patched two high-severity EPM flaws (CVE-2026-40144, CVE-2026-40145) allowing local privilege escalation on Windows. Update to 26.1.2.

CVE-2026-68138: PoC Exploit Enables Linux Kernel Privilege Escalation CVE-2026-68138 Linux kernel privilege escalation qdisc rate-table race condition use-after-free proof-of-concept exploit to root

CVE-2026-68138 Linux kernel privilege escalation qdisc rate-table race condition use-after-free proof-of-concept exploit to root

CVE-2026-68138: PoC Exploit Enables Linux Kernel Privilege Escalation

Do Son August 18, 2026

A public PoC for CVE-2026-68138 escalates a normal Linux user to root through a qdisc rate-table race. Details and exploit code are now disclosed.

Red Hat ACM Fixes Five Critical Flaws, Including CVE-2026-72526 RCE Bug (CVSS 9.9) RHACM remote code execution CVE-2026-72526 vulnerability diagram

Red Hat ACM Fixes Five Critical Flaws, Including CVE-2026-72526 RCE Bug (CVSS 9.9)

Do Son August 17, 2026

Red Hat fixes RHACM remote code execution flaws, including CVE-2026-72526 and CVE-2026-73268, both CVSS 9.9. See patch and mitigation steps.

Linux AF_PACKET Race (03390aa): PoC Exploit Enables Local Privilege Escalation Linux AF_PACKET hard_header_len race local privilege escalation kernel proof-of-concept exploit to root commit 03390aa

Linux AF_PACKET hard_header_len race local privilege escalation kernel proof-of-concept exploit to root commit 03390aa

Linux AF_PACKET Race (03390aa): PoC Exploit Enables Local Privilege Escalation

Do Son August 17, 2026

A public PoC exploits a Linux AF_PACKET race for local privilege escalation to root. Fixed in commit 03390aa; no CVE assigned yet.

CVE-2026-64582: PoC Exploit Published for Kernel LPE Linux kernel RDMA rxe use-after-free CVE-2026-64582 local privilege escalation with public PoC exploit code

Linux kernel RDMA rxe use-after-free CVE-2026-64582 local privilege escalation with public PoC exploit code

CVE-2026-64582: PoC Exploit Published for Kernel LPE

Do Son August 14, 2026

A Linux kernel RDMA/rxe use-after-free (CVE-2026-64582) enables local privilege escalation. Full details and PoC exploit code are now public.

CVE-2026-43723: Apple mediaremoted Flaw Lets Apps Gain Root Privileges, PoC Exploit Code Publicly Disclosed Apple mediaremoted root privileges flaw CVE-2026-43723 with public proof-of-concept exploit code

Apple mediaremoted root privileges flaw CVE-2026-43723 with public proof-of-concept exploit code

CVE-2026-43723: Apple mediaremoted Flaw Lets Apps Gain Root Privileges, PoC Exploit Code Publicly Disclosed

Do Son August 13, 2026

PoC exploit code is public for CVE-2026-43723, an Apple mediaremoted flaw that lets an app gain root privileges. CVSS 7.8. Patch now.

CVE-2026-50656 PoC Published: Defender Privilege Escalation Bypass ShieldBreak PoC exploit code for CVE-2026-50656 Windows Defender privilege escalation displayed on screen

ShieldBreak PoC exploit code for CVE-2026-50656 Windows Defender privilege escalation displayed on screen

CVE-2026-50656 PoC Published: Defender Privilege Escalation Bypass

Do Son August 12, 2026

A public PoC named ShieldBreak bypasses Microsoft's CVE-2026-50656 patch, enabling Windows Defender privilege escalation to SYSTEM.

CVE-2026-64560: Linux Kernel CPU Timer Use-After-Free Gives a Root Shell, PoC Exploit Code Publicly Disclosed

Linux kernel CPU timer flaw CVE-2026-64560 use-after-free giving a root shell, with public PoC exploit code

CVE-2026-64560: Linux Kernel CPU Timer Use-After-Free Gives a Root Shell, PoC Exploit Code Publicly Disclosed

Do Son August 12, 2026

PoC exploit code is public for CVE-2026-64560, a Linux kernel CPU timer flaw that gives a root shell on Pixel 10 Pro. CVSS 7.0. Details inside.

MarkLogic Server Security Bulletin Patches 10 Vulnerabilities, With CVSS Scores Up to 9.9 MarkLogic Server vulnerabilities including CVE-2026-7329 and CVE-2026-9192 rated up to CVSS 9.9

MarkLogic Server vulnerabilities including CVE-2026-7329 and CVE-2026-9192 rated up to CVSS 9.9

MarkLogic Server Security Bulletin Patches 10 Vulnerabilities, With CVSS Scores Up to 9.9

Do Son August 11, 2026

Progress patched 10 MarkLogic Server vulnerabilities, including auth bypass and privilege escalation flaws rated up to CVSS 9.9. Details inside.

CVE-2026-27912: PoC Released for SYSTEM Privilege Flaw Windows Kerberos ResetNightmare CVE-2026-27912 elevation of privilege flaw with public proof-of-concept exploit code

Windows Kerberos ResetNightmare CVE-2026-27912 elevation of privilege flaw with public proof-of-concept exploit code

CVE-2026-27912: PoC Released for SYSTEM Privilege Flaw

Do Son August 11, 2026

Details and PoC for CVE-2026-27912 (ResetNightmare) are public. This Kerberos flaw lets attackers reset AD passwords and gain SYSTEM.