CVE-2026-121608

A vulnerability was determined in Qihoo 360 D603-2, D600-2 and D606-6 up to 6.3.2. This vulnerability affects the function onpushmessage of the file /fs2/bin/iscm of the component Timezone Push Handler. Executing a manipulation of the argument tz can lead to os command injection. The attack may b...

CVE-2026-96512

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · CVE-2026-96512 Write-up: https://abraxaslabs.tech/research/CVE-2026-96512 CVE-2026-96512 sudo 1.9.13p3 Debian bookworm - Sudo Project I am @abraxasnull. Local lab, not HTTP. The client is CVE-2026-96512-Abraxas-Labs.p...

CentOS Linux 7 [TuxCare] Security Update: sudo / sudo-devel (CENTOS7:CLSA-2026:1793183073)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1793183073 advisory. - A flaw was found in sudo. When sudoers rules use NOTBEFORE or NOTAFTER time-based access restrictions with timestamps that omit the trailing 'Z...

sudotimewarp-cve-2026-96512-

SudoTimeWarp — CVE-2026-96512 sudo: the caller'sTZ decides NOTBEFORE/NOTAFTER Reproduction material for SudoTimeWarp CVE-2026-96512. A sudoers rule whose DateSpec timestamp omits the trailing Z is converted by mktime, which re-reads getenv"TZ" on every call. Because sudo is setuid-root and the...

RHEL 7 : sudo (RHSA-2026:92326)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:92326 advisory. The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged...

Important: Red Hat Security Advisory: sudo security update

An update for sudo is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability...

sudo: sudo: TZ environment variable allows bypass of NOTBEFORE/NOTAFTER time-based authorization

A flaw was found in sudo. When sudoers rules use NOTBEFORE or NOTAFTER time-based access restrictions with timestamps that omit the trailing 'Z' timezone indicator, the time evaluation relies on the TZ environment variable inherited from the calling user. Because sudo is a setuid-root program, an...

sudo: sudo: TZ environment variable allows bypass of NOTBEFORE/NOTAFTER time-based authorization

A flaw was found in sudo. When sudoers rules use NOTBEFORE or NOTAFTER time-based access restrictions with timestamps that omit the trailing 'Z' timezone indicator, the time evaluation relies on the TZ environment variable inherited from the calling user. Because sudo is a setuid-root program, an...

Important: Red Hat Security Advisory: sudo security update

An update for sudo is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

Important: Red Hat Security Advisory: sudo security update

An update for sudo is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability...

sudo: sudo: TZ environment variable allows bypass of NOTBEFORE/NOTAFTER time-based authorization

A flaw was found in sudo. When sudoers rules use NOTBEFORE or NOTAFTER time-based access restrictions with timestamps that omit the trailing 'Z' timezone indicator, the time evaluation relies on the TZ environment variable inherited from the calling user. Because sudo is a setuid-root program, an...

RHEL 8 : sudo (RHSA-2026:92349)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:92349 advisory. The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged...

RHEL 8 : sudo (RHSA-2026:92325)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:92325 advisory. The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged...

sudo: sudo: TZ environment variable allows bypass of NOTBEFORE/NOTAFTER time-based authorization

A flaw was found in sudo. When sudoers rules use NOTBEFORE or NOTAFTER time-based access restrictions with timestamps that omit the trailing 'Z' timezone indicator, the time evaluation relies on the TZ environment variable inherited from the calling user. Because sudo is a setuid-root program, an...

Important: Red Hat Security Advisory: sudo security update

An update for sudo is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

RHEL 9 : sudo (RHSA-2026:90287)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:90287 advisory. The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged...

MGASA-2026-0531 Updated sudo package fixes security vulnerabilities

Sudo through 1.9.17p2 Intercept Policy Bypass via execveat. CVE-2026-82474 tz environment variable allows bypass of notbefore/notafter time-based authorization. CVE-2026-96512...

Updated sudo package fixes security vulnerabilities

Sudo through 1.9.17p2 Intercept Policy Bypass via execveat. CVE-2026-82474 tz environment variable allows bypass of notbefore/notafter time-based authorization. CVE-2026-96512...

Important: Red Hat Security Advisory: sudo security update

An update for sudo is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

sudo: sudo: TZ environment variable allows bypass of NOTBEFORE/NOTAFTER time-based authorization

A flaw was found in sudo. When sudoers rules use NOTBEFORE or NOTAFTER time-based access restrictions with timestamps that omit the trailing 'Z' timezone indicator, the time evaluation relies on the TZ environment variable inherited from the calling user. Because sudo is a setuid-root program, an...