sudo: Sudo: Privilege escalation due to failure in privilege drop calls

A flaw was found in Sudo. A local user could exploit a failure in the setuid, setgid, or setgroups calls, which are used to drop privileges before running the mailer. This oversight allows for privilege escalation, enabling the user to gain elevated access on the system...

CVE-2026-43574

OpenClaw before 2026.4.12 contains an improper authorization vulnerability in helper-backed channels where empty resolved approver lists are interpreted as explicit approval authorization. Attackers can resolve pending approvals without proper authorization by exploiting this logic flaw if they...

CVE-2026-43574

OpenClaw before 2026.4.12 contains an improper authorization vulnerability in helper-backed channels where empty resolved approver lists are interpreted as explicit approval authorization. Attackers can resolve pending approvals without proper authorization by exploiting this logic flaw if they...

CVE-2026-43574 OpenClaw < 2026.4.12 - Improper Authorization via Empty Approver Lists

OpenClaw before 2026.4.12 contains an improper authorization vulnerability in helper-backed channels where empty resolved approver lists are interpreted as explicit approval authorization. Attackers can resolve pending approvals without proper authorization by exploiting this logic flaw if they...

CVE-2026-43574

CVE-2026-43574 involves OpenClaw before 2026.4.12, where an improper authorization flaw in helper-backed channels treats empty resolved approver lists as explicit approval. An attacker who knows an approval id can resolve pending approvals without proper authorization. The vulnerability impacts a...

EUVD-2026-27299

OpenClaw before 2026.4.12 contains an improper authorization vulnerability in helper-backed channels where empty resolved approver lists are interpreted as explicit approval authorization. Attackers can resolve pending approvals without proper authorization by exploiting this logic flaw if they...

CVE-2026-43574 OpenClaw < 2026.4.12 - Improper Authorization via Empty Approver Lists

OpenClaw before 2026.4.12 contains an improper authorization vulnerability in helper-backed channels where empty resolved approver lists are interpreted as explicit approval authorization. Attackers can resolve pending approvals without proper authorization by exploiting this logic flaw if they...

CVE-2026-21661

creationtimestamp| type| source ---|---|--- 2026-05-05 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-125-05...

Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses pyasn1 which is vulnerable to CVE-2026-30922

Summary IBM Maximo Application Suite - Visual Inspection component uses pyasn1 which is vulnerable to CVE-2026-30922, This bulletin contains information regarding the vulnerability and its remediation. Vulnerability Details CVEID:CVE-2026-30922 DESCRIPTION: pyasn1 is a generic ASN.1 library for...

EUVD-2026-27231

A race condition exists in PaperCut MF when processing badge-swipe data from certain HP multifunction devices. Under specific network conditions involving dropped packets and out-of-order sequence counters, the server may incorrectly process fragmented data chunks. If a sequence reset notificatio...

CVE-2026-40797

creationtimestamp| type| source ---|---|--- 2026-05-05 07:30:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/116520794744579709 2026-05-05 07:30:31+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3ml3o4sriyd2j 2026-05-05 08:01:19+00:00| seen|...

CVE-2026-6180

A race condition exists in PaperCut MF when processing badge-swipe data from certain HP multifunction devices. Under specific network conditions involving dropped packets and out-of-order sequence counters, the server may incorrectly process fragmented data chunks. If a sequence reset notificatio...

CVE-2026-23866

creationtimestamp| type| source ---|---|--- 2026-05-05 07:11:11+00:00| seen| https://www.acn.gov.it/portale/w/whatsapp-rilevate-vulnerabilita-in-versioni-per-windows-e-ios/android 2026-05-05 11:44:26+00:00| seen| https://bsky.app/profile/securestep9.bsky.social/post/3ml44ctvsok2g 2026-05-05...

SUSE CVE-2026-31778

In the Linux kernel, the following vulnerability has been resolved: ALSA: caiaq: fix stack out-of-bounds read in initcard The loop creates a whitespace-stripped copy of the card shortname where len id is used for the bounds check. Since sizeofcard-id is 16 and the local id buffer is also 16 bytes...

GHSA-M7PR-HJQH-92CM

creationtimestamp| type| source ---|---|--- 2026-05-05 01:40:28+00:00| seen| https://gist.github.com/alon710/f7e9943ac304fddb338906da41495cb0...

GHSA-445Q-VR5W-6Q77

creationtimestamp| type| source ---|---|--- 2026-05-05 01:10:29+00:00| seen| https://gist.github.com/alon710/f60cd3417122b17fedb1824de3dd0f54...

EUVD-2026-27153

A vulnerability was detected in CodeCanyon Perfex CRM up to 3.4.1. This affects the function Clients::project of the file application/controllers/Clients.php of the component Tenant Handler. The manipulation of the argument ID results in authorization bypass. The attack may be performed from...

GHSA-GXXH-8VCJ-W2MH

creationtimestamp| type| source ---|---|--- 2026-05-05 00:10:29+00:00| seen| https://gist.github.com/alon710/8bb704e5f538c265ec11484d13063fb4...

CVE-2026-34408

An issue was discovered in Gambio 4.9.2.0 patched in 2024-02 v1.0.0 for GX4 v4.0.0.0 to v4.9.2.0. The password reset function can be bypassed to set arbitrary passwords for arbitrary accounts if the ID is known...

D-Link DI-8100 缓冲区错误漏洞

The D-Link DI-8100 is a wireless broadband router designed for small and medium-sized network environments by D-Link Corporation. The D-Link DI-8100 version 16.07.26A1 contains a buffer error vulnerability. This vulnerability arises from the function sprintf in the file yyxz.asp, where the handli...