Root Exploit Archives • Daily CyberSecurity

cups2root: Public PoC Exploit Escalates lpadmin to Root on CUPS

cups2root CUPS privilege escalation 0-day exploit chain escalating lpadmin group to root shell on Ubuntu Linux

cups2root: Public PoC Exploit Escalates lpadmin to Root on CUPS

Do Son September 22, 2026

A public PoC exploit, cups2root, chains a CUPS privilege escalation to take lpadmin users to root. No CVE or patch yet. See the mechanism and mitigations.

Public PoC Exploits macOS DesktopServicesHelper for Root With No User Interaction macOS privilege escalation to root via DesktopServicesHelper chown and auth.db hijack with public PoC exploit

macOS privilege escalation to root via DesktopServicesHelper chown and auth.db hijack with public PoC exploit

Public PoC Exploits macOS DesktopServicesHelper for Root With No User Interaction

Do Son August 4, 2026

A macOS privilege escalation flaw gives an unprivileged user root with no user interaction. A full public PoC is out; Apple fixed it in 26.6 with no CVE.

Fragnesia Universal Linux Root LPE Details and One-Line PoC Disclosed Fragnesia Linux Exploit Universal LPE PoC

Fragnesia Universal Linux Root LPE Details and One-Line PoC Disclosed

Do Son May 13, 2026

Public PoC for Fragnesia. This universal Linux LPE exploit allows unprivileged users to seize root via the page cache. Patch your kernel immediately!

Embargo Broken: Public PoC Released for “Dirty Frag” Linux Kernel Exploit Granting Instant Root Access Dirty Frag Linux PoC v4bel Dirty Frag Exploit

Dirty Frag Linux PoC v4bel Dirty Frag Exploit

Embargo Broken: Public PoC Released for “Dirty Frag” Linux Kernel Exploit Granting Instant Root Access

Do Son May 8, 2026

Dirty Frag PoC released! Researcher v4bel discloses a universal Linux root exploit targeting the page cache. No patches yet—apply module mitigations now!

FreeBSD DHCP Client Flaw Opens Door to Remote Code Execution as Root Privilege FreeBSD Wi-Fi RCE Vulnerability CVE-2026-45255 Patch FreeBSD dhclient Root Exploit CVE-2026-42511 FreeBSD Vulnerability - CVE-2024-7589 FreeBSD Jail Escape CVE-2025-15576

FreeBSD DHCP Client Flaw Opens Door to Remote Code Execution as Root Privilege

Do Son May 4, 2026

FreeBSD warns of CVE-2026-42511: a critical dhclient flaw allowing rogue DHCP servers to execute code as root via BOOTP file injection. Patch and reboot now!

Copy Fail: Public PoC and Full Details Disclosed for the 732-Byte Linux Root Exploit (CVE-2026-31431) Linux Kernel Root Exploit Copy Fail CVE-2026-31431

Linux Kernel Root Exploit Copy Fail CVE-2026-31431

Copy Fail: Public PoC and Full Details Disclosed for the 732-Byte Linux Root Exploit (CVE-2026-31431)

Do Son April 29, 2026

Linux "Copy Fail" (CVE-2026-31431) technical details and PoC are now public. Learn how a 732-byte script grants root access by corrupting the page cache.

Linux Privilege Escalation: “Pack2TheRoot” Flaw Impacts Major Distributions Pack2TheRoot Vulnerability PackageKit Privilege Escalation

Linux Privilege Escalation: “Pack2TheRoot” Flaw Impacts Major Distributions

Do Son April 23, 2026

The critical "Pack2TheRoot" flaw (CVE-2026-41651) in PackageKit gives root access on Linux. It went undetected for 12 years. Update to version 1.3.5 now!

Root via Telnet: Why You Must Patch Your Synology NAS Against This Decade-Old Ghost Synology Chat Server vulnerabilities Synology security update Synology DSM Update NAS Security Vulnerability Synology VPN Update SSL VPN Vulnerability Synology Telnet Flaw DSM Security Update Synology DSM Telnet vulnerability BeeStation Zero-Day, Pwn2Own RCE CVE-2024-11131 & CVE-2024-10442 CVE-2025-2848 Synology, NAS

Root via Telnet: Why You Must Patch Your Synology NAS Against This Decade-Old Ghost

Do Son February 3, 2026

On January 29, 2026, Synology, a preeminent manufacturer of Network Attached Storage (NAS) solutions, disseminated a series...

10-Year-Old GNU Inetutils Telnetd Flaw Lets Hackers Log In as Root via “-f root”

Do Son January 21, 2026

Critical GNU Inetutils telnetd flaw allows unauthenticated root access via "-f root". Affects v1.9.3-2.7. Disable telnet immediately to stay safe.

Zero-Day Chronomaly Exploit Grants Root Access to Vulnerable Linux Kernels CVE-2025-38352 Chronomaly exploit, Linux kernel privilege escalation 2026

CVE-2025-38352 Chronomaly exploit, Linux kernel privilege escalation 2026

Zero-Day Chronomaly Exploit Grants Root Access to Vulnerable Linux Kernels

Do Son January 7, 2026

The Chronomaly exploit weaponizes CVE-2025-38352, a Linux kernel race condition. It allows any local user to gain root access across Android and Linux.