CVE-2026-110450

Nix before 2.35.3 and Lix before 2.95.4 allow privilege escalation via a repair operation because it could destroy and then replace a store path before content verification...

EUVD-2026-100802

Nix before 2.35.3 and Lix before 2.95.4 have an integer overflow and resultant out-of-bounds write when evaluating untrusted expressions because list allocation is mishandled...

CVE-2026-110449

Nix before 2.35.3 and Lix before 2.95.4 have an integer overflow and resultant out-of-bounds write when evaluating untrusted expressions because list allocation is mishandled...

CVE-2026-110449

Nix before 2.35.3 and Lix before 2.95.4 have an integer overflow and resultant out-of-bounds write when evaluating untrusted expressions because list allocation is mishandled...

CVE-2026-110449

The software Nix (versions before 2.35.3 ) and Lix (versions before 2.95.4 ) are vulnerable to an integer overflow leading to an out-of-bounds write . This issue occurs during the evaluation of untrusted expressions due to mishandled list allocation . The vulnerability has a base severity score o...

CVE-2026-110449

Nix before 2.35.3 and Lix before 2.95.4 have an integer overflow and resultant out-of-bounds write when evaluating untrusted expressions because list allocation is mishandled...

CVE-2026-110449

Nix before 2.35.3 and Lix before 2.95.4 have an integer overflow and resultant out-of-bounds write when evaluating untrusted expressions because list allocation is mishandled...

PT-2026-113634

Nix before 2.35.3, when unsandboxed on macOS or FreeBSD, incorrectly allows connections made by build users from daemon clients...

PT-2026-113632

Nix before 2.35.3 and Lix before 2.95.4 on macOS allow a Seatbelt sandbox escape for an unconfined build because a certain size threshold is mishandled...

PT-2026-113631

Nix before 2.35.3 and Lix before 2.95.4 allow privilege escalation via a repair operation because it could destroy and then replace a store path before content verification...

PT-2026-113633

The multi-user installer in Nix before 2.35.3 sets the ownership of store contents to the user who invoked the installer even though it should be root ownership...

Linux Distros Unpatched Vulnerability : CVE-2026-110452

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The multi-user installer in Nix before 2.35.3 sets the ownership of store contents to the user who invoked the installer even though it should be root ownership...

PT-2026-113615

Nix before 2.35.3 and Lix before 2.95.4 have an integer overflow and resultant out-of-bounds write when evaluating untrusted expressions because list allocation is mishandled...

Linux Distros Unpatched Vulnerability : CVE-2026-110450

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Nix before 2.35.3 and Lix before 2.95.4 allow privilege escalation via a repair operation because it could destroy and then replace a store path before content...

Linux Distros Unpatched Vulnerability : CVE-2026-110449

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Nix before 2.35.3 and Lix before 2.95.4 have an integer overflow and resultant out-of-bounds write when evaluating untrusted expressions because list allocation...

CVE-2026-48907

E.L.V CVE Research & Assessment Framework E.L.V — Exploit Loader & Vulnerability Firmware Cybersecurity research utility for authorized vulnerability assessment. Table of Contents Overview Important Safety Notice Project Information What the Current Script Does Workflow Requirements Installation...

heimdall_webserver

ATENCIÓN, este proyecto está en versión beta, hay muchos errores y problemas, si quieres ayudar al proyecto úsalo en un laboratorio, no en tu entorno real. NO, aún no está implementado HTTPS, llegará en la próxima actualización Heimdall Es una herramienta para gestionar paquetes vulnerables en tu...

rootend

rootend rootend es una herramienta de enumeración y escalada automática de privilegios para sistemas nix. Para una lista completa de nuestras herramientas, visite nuestro sitio webhttps://www.twelvesec.com/ Escrito por: nickvourd twitter maldevel twitter servo Uso . \ / | | / / | | \ / / // | |...

CVE-2026-90085 octeontx2-af: fix NULL deref in NIX TM tree debugfs read path

In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: fix NULL deref in NIX TM tree debugfs read path rvudbgnixtmtreedisplay dereferences pfvf-sqctx without checking whether the SQ context has been allocated. Reading /sys/kernel/debug/octeontx2/nix/tmtree for a NIX LF...

CVE-2026-90085

CVE-2026-90085 affects the octeontx2-af driver in the Linux kernel . The function rvu_dbg_nix_tm_tree_display() dereferences pfvf->sq_ctx without verifying that the SQ context has been allocated. Reading /sys/kernel/debug/octeontx2/nix/tm_tree for a NIX logical function whose transmit queues a...