Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

985 matches found

attackerkb
attackerkb•added 2026/04/22 4:07 p.m.•17 views

CVE-2026-35338

A vulnerability in the chmod utility of uutils coreutils allows users to bypass the --preserve-root safety mechanism. The implementation only validates if the target path is literally / and does not canonicalize the path. An attacker or accidental user can use path variants such as /../ or symbol...

7.3CVSS6.1AI score0.00199EPSS
SaveExploits0References3
osv_cve
osv_cve•added 2026/04/22 4:07 p.m.•20 views

CVE-2026-35338 uutils coreutils chmod Path Traversal Bypass of --preserve-root

A vulnerability in the chmod utility of uutils coreutils allows users to bypass the --preserve-root safety mechanism. The implementation only validates if the target path is literally / and does not canonicalize the path. An attacker or accidental user can use path variants such as /../ or symbol...

7.3CVSS6.1AI score0.00199EPSS
SaveExploits0References6
CVE
CVE•added 2026/04/22 4:07 p.m.•59 views

CVE-2026-35338

Summary: CVE-2026-35338 affects the chmod utility in the uutils coreutils package. The vulnerability arises because the implementation only checks if the target path is exactly “/” and does not canonicalize the path, allowing path variants like “/../” or symbolic links to bypass --preserve-root. ...

7.3CVSS6.1AI score0.00199EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist•added 2026/04/22 4:07 p.m.•65 views

CVE-2026-35338 uutils coreutils chmod Path Traversal Bypass of --preserve-root

A vulnerability in the chmod utility of uutils coreutils allows users to bypass the --preserve-root safety mechanism. The implementation only validates if the target path is literally / and does not canonicalize the path. An attacker or accidental user can use path variants such as /../ or symbol...

7.3CVSS0.00199EPSS
SaveExploits0References2
Mend
Mend•added 2026/04/22 4:07 p.m.•12 views

CVE-2026-35338

A vulnerability in the chmod utility of uutils coreutils allows users to bypass the --preserve-root safety mechanism. The implementation only validates if the target path is literally / and does not canonicalize the path. An attacker or accidental user can use path variants such as /../ or symbol...

7.3CVSS6.1AI score0.00199EPSS
SaveExploits0References8
Debian CVE
Debian CVE•added 2026/04/22 4:07 p.m.•27 views

CVE-2026-35338

A vulnerability in the chmod utility of uutils coreutils allows users to bypass the --preserve-root safety mechanism. The implementation only validates if the target path is literally / and does not canonicalize the path. An attacker or accidental user can use path variants such as /../ or symbol...

7.3CVSS6.1AI score0.00199EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus•added 2026/04/22 12:00 a.m.•15 views

Linux Distros Unpatched Vulnerability : CVE-2026-35338

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability in the chmod utility of uutils coreutils allows users to bypass the --preserve-root safety mechanism. The implementation only validates if the...

7.3CVSS5.7AI score0.00199EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies•added 2026/04/22 12:00 a.m.•38 views

PT-2026-34474

Name of the Vulnerable Software and Affected Versions uutils coreutils affected versions not specified Description A flaw in the chmod utility allows users to bypass the --preserve-root safety mechanism. The implementation validates if the target path is literally '/', but fails to canonicalize t...

7.3CVSS5.8AI score0.00199EPSS
SaveExploits0References15
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2026/04/22 12:00 a.m.•5 views

CVE-2026-35338: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability in the chmod utility of uutils coreutils allows users to bypass the --preserve-root safety mechanism. The implementation only validates if the target path is literally / and does not canonicalize the path. An attacker or accidental user can use path variants such as /../ or symbol...

7.3CVSS6.1AI score0.00199EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus•added 2026/04/22 12:00 a.m.•31 views

openSUSE 16 Security Update : go1.26 (openSUSE-SU-2026:20571-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20571-1 advisory. - Update to version go1.26.2 bsc1255111. - CVE-2026-27140: cmd/go: trust layer bypass when using cgo and SWIG bsc1261653. - CVE-2026-27143:...

9.8CVSS7.1AI score0.00661EPSS
SaveExploits0References31
Tenable Nessus
Tenable Nessus•added 2026/04/22 12:00 a.m.•18 views

Linux Distros Unpatched Vulnerability : CVE-2026-35339

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The recursive mode -R of the chmod utility in uutils coreutils incorrectly handles exit codes when processing multiple files. The final return value is determin...

5.5CVSS5.9AI score0.00157EPSS
SaveExploits0References3
CNNVD
CNNVD•added 2026/04/22 12:00 a.m.•26 views

uutils coreutils path traversal vulnerability

uutils coreutils is a cross-platform core command-line toolset developed by Uutils. uutils coreutils has a path traversal vulnerability. This vulnerability stems from the chmod utility, which allows users to bypass the --preserve-root security mechanism. As a result, it only verifies whether the...

7.3CVSS5.8AI score0.00199EPSS
SaveExploits0References1
CNNVD
CNNVD•added 2026/04/22 12:00 a.m.•29 views

uutils coreutils security vulnerabilities

uutils coreutils is a cross-platform core command-line toolset developed by Uutils. There is a security vulnerability in uutils coreutils. This vulnerability stems from the recursive processing mode of the chmod utility, which improperly handles exit codes when processing multiple files. As a...

5.5CVSS6.2AI score0.00157EPSS
SaveExploits0References1
CNNVD
CNNVD•added 2026/04/22 12:00 a.m.•31 views

uutils coreutils security vulnerabilities

uutils coreutils is a cross-platform core command-line toolset developed by Uutils Open Source. There is a security vulnerability in uutils coreutils, which stems from a timing race condition in the mkfifo utility. The utility creates a FIFO and then performs a path-based chmod operation to set...

7CVSS6AI score0.0012EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies•added 2026/04/22 12:00 a.m.•25 views

PT-2026-34489

Name of the Vulnerable Software and Affected Versions uutils coreutils affected versions not specified Description The mkdir utility incorrectly applies permissions when the -m flag is used. The utility creates a directory with umask-derived permissions typically 0755 and then changes them to the...

3.3CVSS5.7AI score0.00119EPSS
SaveExploits0References14
Positive Technologies
Positive Technologies•added 2026/04/22 12:00 a.m.•27 views

PT-2026-34475

Name of the Vulnerable Software and Affected Versions uutils coreutils affected versions not specified Description The recursive mode -R of the chmod utility incorrectly handles exit codes when processing multiple files. The final return value is determined solely by the success or failure of the...

5.5CVSS5.9AI score0.00157EPSS
SaveExploits0References14
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2026/04/22 12:00 a.m.•6 views

CVE-2026-35339: Incorrect Check of Function Return Value

The recursive mode -R of the chmod utility in uutils coreutils incorrectly handles exit codes when processing multiple files. The final return value is determined solely by the success or failure of the last file processed. This allows the command to return an exit code of 0 success even if error...

5.5CVSS6AI score0.00157EPSS
SaveExploits0References3
osv_opensuse
osv_opensuse•added 2026/04/20 2:02 p.m.•19 views

OPENSUSE-SU-2026:20570-1 Security update for go1.25

This update for go1.25 fixes the following issues: - Update to version go1.25.9 bsc1244485. - CVE-2026-27140: cmd/go: trust layer bypass when using cgo and SWIG bsc1261653. - CVE-2026-27143: cmd/compile: possible memory corruption after bound check elimination bsc1261654. - CVE-2026-27144:...

9.8CVSS6.9AI score0.00661EPSS
SaveExploits0References19
osv_suse
osv_suse•added 2026/04/20 2:00 p.m.•26 views

SUSE-SU-2026:21356-1 Security update for go1.26

This update for go1.26 fixes the following issues: - Update to version go1.26.2 bsc1255111. - CVE-2026-27140: cmd/go: trust layer bypass when using cgo and SWIG bsc1261653. - CVE-2026-27143: cmd/compile: possible memory corruption after bound check elimination bsc1261654. - CVE-2026-27144:...

9.8CVSS6.9AI score0.00661EPSS
SaveExploits0References22
osv_suse
osv_suse•added 2026/04/20 1:54 p.m.•42 views

SUSE-SU-2026:21355-1 Security update for go1.25

This update for go1.25 fixes the following issues: - Update to version go1.25.9 bsc1244485. - CVE-2026-27140: cmd/go: trust layer bypass when using cgo and SWIG bsc1261653. - CVE-2026-27143: cmd/compile: possible memory corruption after bound check elimination bsc1261654. - CVE-2026-27144:...

9.8CVSS6.9AI score0.00661EPSS
SaveExploits0References20
Rows per page
Query Builder