CVE-2026-34528

CVE-2026-34528 (File Browser) : The signup flow copies default permissions, including Execute and Commands, then only Admin is stripped. If signup=true, EnableExec=true, and Defaults include Execute=true and Commands (e.g., ["bash"]), an unauthenticated user can self-register and inherit shell ex...

EUVD-2025-37400

ELOG allows an authenticated user to modify or overwrite the configuration file, resulting in denial of service. If the execute facility is specifically enabled with the "-x" command line flag, attackers could execute OS commands on the host machine. By default, ELOG is not configured to allow...

CVE-2025-64348

CVE-2025-64348 affects ELOG (ELOG

Ensure That the Sticky Bit Is Set for Globally Writable Directories

The sticky bit of a common file is ignored by the kernel. The sticky bit shows up as the execute permission flag of a directory and is indicated with t. If the sticky bit set is for a directory, a user who is not root or the directory owner cannot delete files or directories in the directory,...