Rocky Linux 9 [CIQ] Security Update: qemu-guest-agent / qemu-guest-agent-debuginfo / qemu-img / etc (crlsa-2026_88421)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202688421 advisory. qemu-kvm: qemu-guest-agent: Local privilege escalation via symlink attack in guest-ssh-add-authorized- keys CVE-2026-12080 Bug Fixes and Enhancements: qemu-img can...

needrestart 3.7 Local Privilege Escalation

needrestart before version 3.8 allows local attackers to execute arbitrary code as root through an attacker-controlled PYTHONPATH environment variable. This proof of concept causes a root needrestart process to create a set-user-ID copy of bash. https://packetstorm.news/download/237426...

CVE-2026-93640

A local privilege escalation vulnerability in the optional dnscache package of Zimbra Collaboration Suite ZCS allows the Unix zimbra account to access files with root privileges. The passwordless sudo policy permits arbitrary arguments to zmunbound, whose wrapper forwards them to Unbound without...

CVE-2026-50056

A local privilege escalation vulnerability in the zmmailboxdmgr launcher of Zimbra Collaboration Suite ZCS allows the Unix zimbra account to execute arbitrary commands as root. The passwordless sudo interface accepts JVM arguments that are not adequately restricted. An attacker can postpone Jetty...

CVE-2026-50057

A local privilege escalation vulnerability in the Zimbra Collaboration Suite ZCS MTA package allows the Unix zimbra account to execute arbitrary commands as root. The installed sudo policy permits passwordless root execution of Postfix administration commands without restricting their arguments. ...

CVE-2026-93640 Zimbra Collaboration Suite Local Privilege Escalation via Unrestricted zmunbound Sudo Configuration

A local privilege escalation vulnerability in the optional dnscache package of Zimbra Collaboration Suite ZCS allows the Unix zimbra account to access files with root privileges. The passwordless sudo policy permits arbitrary arguments to zmunbound, whose wrapper forwards them to Unbound without...

CVE-2026-93640

The optional dnscache package in Zimbra Collaboration Suite (ZCS) versions 10.1.16 and 10.1.21 contains a local privilege escalation vulnerability. The root cause is an unrestricted zmunbound sudo configuration that allows the Unix zimbra account to execute arbitrary arguments. Attackers can prov...

EUVD-2026-108984

A local privilege escalation vulnerability in the optional dnscache package of Zimbra Collaboration Suite ZCS allows the Unix zimbra account to access files with root privileges. The passwordless sudo policy permits arbitrary arguments to zmunbound, whose wrapper forwards them to Unbound without...

CVE-2026-93640 Zimbra Collaboration Suite Local Privilege Escalation via Unrestricted zmunbound Sudo Configuration

A local privilege escalation vulnerability in the optional dnscache package of Zimbra Collaboration Suite ZCS allows the Unix zimbra account to access files with root privileges. The passwordless sudo policy permits arbitrary arguments to zmunbound, whose wrapper forwards them to Unbound without...

CVE-2026-50057

A local privilege escalation vulnerability exists in the Zimbra Collaboration Suite (ZCS) MTA package, specifically affecting versions 10.1.16 and 10.1.21 . The root cause is an unrestricted sudo policy that allows the zimbra account to execute Postfix administration commands as root without argu...

EUVD-2026-108981

A local privilege escalation vulnerability in the Zimbra Collaboration Suite ZCS MTA package allows the Unix zimbra account to execute arbitrary commands as root. The installed sudo policy permits passwordless root execution of Postfix administration commands without restricting their arguments. ...

CVE-2026-50057 Zimbra Collaboration Suite Local Privilege Escalation via Unrestricted Postfix Sudo Permissions

A local privilege escalation vulnerability in the Zimbra Collaboration Suite ZCS MTA package allows the Unix zimbra account to execute arbitrary commands as root. The installed sudo policy permits passwordless root execution of Postfix administration commands without restricting their arguments. ...

CVE-2026-50056

A local privilege escalation vulnerability exists in the zmmailboxdmgr launcher of Zimbra Collaboration Suite (ZCS) versions 10.1.16 and 10.1.21. The root cause is an argument injection flaw where the passwordless sudo interface accepts unrestricted JVM arguments. An attacker with local command e...

CVE-2026-50056 Zimbra Collaboration Suite Local Privilege Escalation via zmmailboxdmgr JVM Argument Injection

A local privilege escalation vulnerability in the zmmailboxdmgr launcher of Zimbra Collaboration Suite ZCS allows the Unix zimbra account to execute arbitrary commands as root. The passwordless sudo interface accepts JVM arguments that are not adequately restricted. An attacker can postpone Jetty...

Exploit for CVE-2026-98260

CVE-2026-98260 · Xiaomi 17 Ultra nezha Android port This...

CVE-2021-3493

CVE-2021-3493 Ubuntu OverlayFS Local Privesc Description "Ubuntu specific issue in the overlayfs file system in the Linux kernel where it did not properly validate the application of file system capabilities with respect to user namespaces. A local attacker could use this to gain elevated...

CVE-2025-30054

CGM CLININET is vulnerable to local privilege escalation. The service that processes incoming HL7 messages runs with root privileges, but due to incorrect permissions, its scripts and configuration files can be modified by the uhcapache user. An attacker with uhcapache privileges can modify these...

Exploit for CVE-2026-98260

CVE-2026-98260 · Android 17 / popsicle – Local privilege escal...

Exploit for CVE-2026-8933

CVE-2026-8933 — snap-confine set-capabilities: Local Privilege...

CVE-2025-30054

The CGM CLININET software is vulnerable to local privilege escalation due to incorrect permission assignments (CWE-732). The service responsible for processing incoming HL7 messages runs with root privileges , but its configuration files and scripts are accessible and modifiable by the uhcapache ...