1188 matches found
DEBIAN-CVE-2026-96812
Improper Exposure of Resource to Wrong Sphere in the host file helper gofer in Google gVisor prior to commit 573a9e73cf844f on Linux platforms with CUSE enabled allows a local attacker with container image deployment privileges to achieve root code execution on the host system. By including a...
CVE-2026-96812
Improper Exposure of Resource to Wrong Sphere in the host file helper gofer in Google gVisor prior to commit 573a9e73cf844f on Linux platforms with CUSE enabled allows a local attacker with container image deployment privileges to achieve root code execution on the host system. By including a...
EUVD-2026-87111
Improper Exposure of Resource to Wrong Sphere in the host file helper gofer in Google gVisor prior to commit 573a9e73cf844f on Linux platforms with CUSE enabled allows a local attacker with container image deployment privileges to achieve root code execution on the host system. By including a...
CVE-2026-96812 Host Root Sandbox Escape in gVisor via Character Device Passthrough and CUSE
Improper Exposure of Resource to Wrong Sphere in the host file helper gofer in Google gVisor prior to commit 573a9e73cf844f on Linux platforms with CUSE enabled allows a local attacker with container image deployment privileges to achieve root code execution on the host system. By including a...
CVE-2026-96812 Host Root Sandbox Escape in gVisor via Character Device Passthrough and CUSE
Improper Exposure of Resource to Wrong Sphere in the host file helper gofer in Google gVisor prior to commit 573a9e73cf844f on Linux platforms with CUSE enabled allows a local attacker with container image deployment privileges to achieve root code execution on the host system. By including a...
CVE-2026-96812
Improper Exposure of Resource to Wrong Sphere in the host file helper gofer in Google gVisor prior to commit 573a9e73cf844f on Linux platforms with CUSE enabled allows a local attacker with container image deployment privileges to achieve root code execution on the host system. By including a...
CVE-2026-96812
A vulnerability in Google gVisor on Linux platforms (prior to commit 573a9e73cf844f) allows a local attacker with container image deployment privileges to achieve root code execution on the host system. The issue stems from an improper exposure of resource in the host file helper (gofer ) when CU...
CVE-2026-96812
Improper Exposure of Resource to Wrong Sphere in the host file helper gofer in Google gVisor prior to commit 573a9e73cf844f on Linux platforms with CUSE enabled allows a local attacker with container image deployment privileges to achieve root code execution on the host system. By including a...
CVE-2026-91839: Improper Neutralization of CRLF Sequences
A flaw was found in NetworkManager-fortisslvpn, the FortiSSLVPN plugin for NetworkManager. The nm-fortisslvpn-service improperly handles carriage-return/line-feed CR/LF characters in VPN connection profile credentials. A local unprivileged user can exploit this by crafting a malicious VPN profile...
PT-2026-98870
Name of the Vulnerable Software and Affected Versions Google gVisor versions prior to commit 573a9e73cf844f Description An improper exposure of resource to the wrong sphere exists in the host file helper gofer on Linux platforms with CUSE Character device for Userspace enabled. A local attacker...
CVE-2026-96812: Exposure of Resource to Wrong Sphere
Improper Exposure of Resource to Wrong Sphere in the host file helper gofer in Google gVisor prior to commit 573a9e73cf844f on Linux platforms with CUSE enabled allows a local attacker with container image deployment privileges to achieve root code execution on the host system. By including a...
CVE-2026-83603
Netdata is an open source observability tool. Prior to 2.10.4, the setuid-root ndsudo helper command fail2ban-client-status-socket in src/collectors/utils/ndsudo.c accepts a caller-controlled --socketpath from the low-privileged netdata service account. The account can direct root fail2ban-client...
CVE-2026-95511
Rejected reason: Not a vulnerability. Creating a serial queue that overwrites cups-files.conf requires membership in SystemGroups lpadmin, which is an opt-in cupsd admin role granted by a superuser. No privilege boundary is crossed...
CVE-2026-95511
This CVE ID is rejected and does not represent an active vulnerability entry.
CVE-2026-95511
...
EUVD-2026-84335
Not a vulnerability. Creating a serial queue that overwrites cups-files.conf requires membership in SystemGroups lpadmin, which is an opt-in cupsd admin role granted by a superuser. No privilege boundary is crossed...
CVE-2026-95511
A privilege escalation vulnerability was found in CUPS when used with the cups-filters serial backend. A local user who is a member of the lpadmin group can configure a printer that uses a privileged serial backend. The CUPS scheduler does not restrict the path component of non-file device URIs, ...
PT-2026-96687
Name of the Vulnerable Software and Affected Versions CUPS and cups-filters affected versions not specified Description A privilege escalation issue exists in CUPS when used with the cups-filters serial backend. A local user with lpadmin group membership can configure a printer using a privileged...
CVE-2026-79920
Ajenti is a Linux & BSD modular server admin panel. Prior to version 2.2.16, any authenticated user can call /api/core/tasks/start to enqueue InstallPlugin, UnInstallPlugin, or UpgradeAll from plugins/plugins/tasks.py without plugin-management authorization. InstallPlugin and UnInstallPlugin...
EUVD-2026-84010
Ajenti is a Linux & BSD modular server admin panel. Prior to version 2.2.16, any authenticated user can call /api/core/tasks/start to enqueue InstallPlugin, UnInstallPlugin, or UpgradeAll from plugins/plugins/tasks.py without plugin-management authorization. InstallPlugin and UnInstallPlugin...