CVE-2026-92374 Privilege Escalation via Insecure Package Handling in TeamViewer Full Client and Host for macOS

A time-of-check time-of-use TOCTOU race condition combined with improper symbolic link handling in the privileged helper of TeamViewer Full Client and Host prior to version 15.83 for macOS allows a local attacker with low privileges to bypass installer package verification and install a malicious...

PT-2026-126622

A time-of-check time-of-use TOCTOU race condition combined with improper symbolic link handling in the privileged helper of TeamViewer Full Client and Host prior to version 15.83 for macOS allows a local attacker with low privileges to bypass installer package verification and install a malicious...

CentOS Linux 8.5 [TuxCare] Security Update: rsync / rsync-daemon (CENTOS8.5:CLSA-2026:1793119617)

The CentOS Linux 8.5 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.5:CLSA-2026:1793119617 advisory. - rsync before 3.5.0 contains a time-of-check to time-of-use TOCTOU race condition vulnerability in the rrsync restricted shell wrapper that...

CVE-2026-77059

boneIO Black contains a TOCTOU race condition in the createtimedatectlsudoersfile function in boneio/webui/routes/timezonesudoers.py. The function writes sudoers rules to a predictable temporary file, validates them, then installs them with root privileges. A local attacker can exploit the race...

CVE-2026-77059 TOCTOU Race Condition in boneIO

boneIO Black contains a TOCTOU race condition in the createtimedatectlsudoersfile function in boneio/webui/routes/timezonesudoers.py. The function writes sudoers rules to a predictable temporary file, validates them, then installs them with root privileges. A local attacker can exploit the race...

EUVD-2026-109954

boneIO Black contains a TOCTOU race condition in the createtimedatectlsudoersfile function in boneio/webui/routes/timezonesudoers.py. The function writes sudoers rules to a predictable temporary file, validates them, then installs them with root privileges. A local attacker can exploit the race...

CVE-2026-77059 TOCTOU Race Condition in boneIO

boneIO Black contains a TOCTOU race condition in the createtimedatectlsudoersfile function in boneio/webui/routes/timezonesudoers.py. The function writes sudoers rules to a predictable temporary file, validates them, then installs them with root privileges. A local attacker can exploit the race...

CVE-2026-77059 TOCTOU Race Condition in boneIO

boneIO Black contains a TOCTOU race condition in the createtimedatectlsudoersfile function in boneio/webui/routes/timezonesudoers.py. The function writes sudoers rules to a predictable temporary file, validates them, then installs them with root privileges. A local attacker can exploit the race...

CVE-2026-77059

The boneIO Black software contains a TOCTOU (Time-of-Check Time-of-Use) race condition within the create_timedatectl_sudoers_file() function of the boneio/webui/routes/timezone_sudoers.py file. The vulnerability arises because the function writes sudoers rules to a predictable temporary file , pe...

PT-2026-123364

boneIO Black contains a TOCTOU race condition in the create timedatectl sudoers file function in boneio/webui/routes/timezone sudoers.py. The function writes sudoers rules to a predictable temporary file, validates them, then installs them with root privileges. A local attacker can exploit the ra...

CentOS Linux 6 [TuxCare] Security Update: rsync Multiple Vulnerabilities (CENTOS6:CLSA-2026:1792767553)

The CentOS Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare CENTOS6:CLSA-2026:1792767553 advisory. - rsync before 3.5.0 contains a time-of-check to time-of-use TOCTOU race condition vulnerability in the rrsync restricted shell wrapper...

cohort-htb

Cohort — HTB writeup & exploit chain Machine Cohort HackTheBox. Full kill chain: 1. SSRF in the Flask API /api/validate → internal vhost discovery 2. Pre-auth RCE in Marimo 0.20.4 WebSocket terminal CVE-2026-39987 → shell as marimo 3. Privilege escalation via PackageKit 1.2.8 D-Bus TOCTOU...

Time-of-check Time-of-use (TOCTOU) Race Condition

Overview Affected versions of this package are vulnerable to Time-of-check Time-of-use TOCTOU Race Condition via SQLite side-file handling in readwrite.py on Windows, where a local attacker can plant adversarial -wal or -journal side files adjacent to the lock database in a shared directory such ...

PPLFault

PPLFault By Gabriel Landau at Elastic Security. From PPLdump Is Dead. Long Live PPLdump! presented at Black Hat Asia 2023. PPLFault 2024-02 UPDATE: Microsoft patched PPLFault on 2024-02-13. Seethis thread for related discussion. Exploits a TOCTOU in Windows Code Integrity to achieve arbitrary cod...

Oracle Linux 9 : libcap (ELSA-2026-12441)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-12441 advisory. 2.48-10.1 - Fix TOCTOU race condition in capsetfile CVE-2026-4878 Resolves: RHEL-169311 Tenable has extracted the preceding description block directly from the...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple issues in Apache Tomcat-Embed-Core

Summary IBM Watson Speech Services Cartridge is vulnerable to multiple issues in Apache Tomcat-Embed-Core. Apache Tomcat-Embed-Core is used in our Speech microservices. These vulnerabilities have been addressed. Please read the details for remediation below. Vulnerability Details...

CLSA-2026-1792659934 rsync: Fix of CVE-2026-53783

CVE-2026-53783: fix a TOCTOU escape from rrsync's restricted directory by replacing the lexical-only Perl support/rrsync with upstream's Python one, which pins each validated path component through /proc/self/fd, fails closed on path anomalies, pins the receiver option directories a peer can...

AlmaLinux 9.2 [TuxCare] Security Update: rsync / rsync-daemon (ALMALINUX9.2:CLSA-2026:1792659934)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1792659934 advisory. - rsync before 3.5.0 contains a time-of-check to time-of-use TOCTOU race condition vulnerability in the rrsync restricted shell wrapper that...

Linux Distros Unpatched Vulnerability : CVE-2026-80353

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Time-of-check time-of-use TOCTOU race condition vulnerability in Apache Tomcat when creating unix domain sockets for the APR/Native connector allows an...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142530)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142530 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: bound DMA command body size against suffix pointer vmwcmddma locates the DMA suffix a...