kbd: Local privilege escalation in openvt via incorrect process owner verification allowing passwordless root login

openvt -u is intended to identify the owner of the current VT and then execute login as that user from a privileged context. In the documented kbrequest/init usage, the ownership test in authenticateuser relies on stat"/proc//fd/0". stat on /proc//fd/0 follows the symlink to the underlying TTY...

Moderate: Red Hat Security Advisory: kbd security update

An update for kbd is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CV...

CVE-2026-24061-Scanner

CVE-2026-24061 Scanner: GNU Inetutils Telnet Exploit Checker CVE-2026-24061 Scanner is a Bash Script-based tool for performing detection reconnaissance and active verification active exploitation check of the Authentication Bypass vulnerability in the telnetd service of the GNU Inetutils package...

Ashwesker-CVE-2026-24061

🚨 CVE-2026-24061 : Critical Remote Authentication Bypass in GNU InetUtils telnetd 🧠 Overview CVE-2026-24061 is a critical vulnerability affecting the telnetd service in GNU InetUtils. It allows an unauthenticated remote attacker to log in as root by exploiting improper handling of environment...

ssh-hardening

Fortalecimiento de SSH Bloquea SSH en Debian/Ubuntu de una sola ejecución: nuevo puerto, sin inicio de sesión como root, autenticación basada en clave, UFW y Fail2Ban opcionales. Lo que verás Cuando ejecutes el script, detecta tu SO y muestra la configuración antes de preguntar si continuar: Inic...

Moderate: kbd security update

The kbd packages provide tools for managing console behavior on a Linux system, including the keyboard, screen fonts, virtual terminals, and font files. Security Fixes: kbd: Local privilege escalation in openvt via incorrect process owner verification allowing passwordless root login CVE-2026-726...

Rocky Linux 10.2 [CIQ] Security Update: kbd / kbd-debuginfo / kbd-debugsource / kbd-legacy / kbd-misc (crlsa-2026_57597)

The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202657597 advisory. kbd: Local privilege escalation in openvt via incorrect process owner verification allowing passwordless root login CVE-2026-72693 Tenable has extracted the...

Rocky Linux 9 [CIQ] Security Update: kbd / kbd-debuginfo / kbd-debugsource / kbd-legacy / kbd-misc (crlsa-2026_57610)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202657610 advisory. kbd: Local privilege escalation in openvt via incorrect process owner verification allowing passwordless root login CVE-2026-72693 Tenable has extracted the...

CVE-2026-22094

The firmware for the EVbee DC-80 has a weak hardcoded root password, which allows attackers to login as root using the SSH daemon that is exposed to the network...

CVE-2026-22094 Weak root password in EVbee DC 80

The firmware for the EVbee DC-80 has a weak hardcoded root password, which allows attackers to login as root using the SSH daemon that is exposed to the network...

PT-2026-102629

The firmware for the EVbee DC-80 has a weak hardcoded root password, which allows attackers to login as root using the SSH daemon that is exposed to the network...

openSUSE 16 Security Update : kbd (openSUSE-SU-2026:21939-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21939-1 advisory. This update for kbd fixes the following issue: - CVE-2026-72693: local privilege escalation in openvt due to incorrect process owner verification that...

Security update for kbd (important)

openSUSE security update: security update for kbd ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21939-1 Rating: important References: bsc1275441 Cross-References: CVE-2026-72693 CVSS scores: CVE-2026-72693 SUSE : 7.8...

Updated kbd packages fix a security vulnerability

Local privilege escalation in openvt via incorrect process owner verification allowing passwordless root login. CVE-2026-72693...

MGASA-2026-0444 Updated kbd packages fix a security vulnerability

Local privilege escalation in openvt via incorrect process owner verification allowing passwordless root login. CVE-2026-72693...

SUSE-SU-2026:23911-1 Security update for kbd

This update for kbd fixes the following issue: - CVE-2026-72693: local privilege escalation in openvt due to incorrect process owner verification that allows passwordless root login bsc1275441...

SUSE-SU-2026:23893-1 Security update for kbd

This update for kbd fixes the following issue: - CVE-2026-72693: local privilege escalation in openvt due to incorrect process owner verification that allows passwordless root login bsc1275441...

OPENSUSE-SU-2026:21939-1 Security update for kbd

This update for kbd fixes the following issue: - CVE-2026-72693: local privilege escalation in openvt due to incorrect process owner verification that allows passwordless root login bsc1275441...

SUSE SLES15 Security Update : kbd (SUSE-SU-2026:4207-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4207-1 advisory. This update for kbd fixes the following issue: - CVE-2026-72693: local privilege escalation in openvt due to incorrect process owner...

SUSE SLED15 / SLES15 Security Update : kbd (SUSE-SU-2026:4211-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4211-1 advisory. This update for kbd fixes the following issue: - CVE-2026-72693: local privilege escalation in openvt due to incorrect...