CVE-2026-115805 Rapid7 Insight Agent Local Privilege Escalation via Shell Injection in mcp.json Configuration Path

Improper handling of local filesystem paths in Rapid7 Insight Agent on Linux and macOS may allow authenticated local users to gain elevated privileges. Exploitation requires existing local access and depends on the Agent's inventory collection processing the crafted path...

CVE-2026-115805

The Rapid7 Insight Agent on Linux and macOS is vulnerable to local privilege escalation due to improper handling of local filesystem paths. Specifically, a vulnerability exists in the mcp.json configuration path where the Agent's inventory collection may process a crafted path, leading to shell i...

EUVD-2026-113221

Improper handling of local filesystem paths in Rapid7 Insight Agent on Linux and macOS may allow authenticated local users to gain elevated privileges. Exploitation requires existing local access and depends on the Agent's inventory collection processing the crafted path...

CVE-2026-115805 Rapid7 Insight Agent Local Privilege Escalation via Shell Injection in mcp.json Configuration Path

Improper handling of local filesystem paths in Rapid7 Insight Agent on Linux and macOS may allow authenticated local users to gain elevated privileges. Exploitation requires existing local access and depends on the Agent's inventory collection processing the crafted path...

Exploit for CVE-2025-4960

macOS Local Privilege Escalation via Improper Authorization Ha...

Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by a vulnerability in setuptools (CVE-2026-59890)

Summary A Unicode handling vulnerability in the setuptools package CVE-2026-59890 used by IBM InfoSphere Optim Archive Viewer has been addressed by upgrading the component to version 83.0.0 in FP-15 on both Linux and Windows operating systems. Vulnerability Details CVEID:CVE-2026-59890 DESCRIPTIO...

Exploit for CVE-2026-112445

CVE-2026-112445: The Simplest macOS Local Privilege Escalation...

PT-2026-132798

A malicious actor with local access and high privileges could exploit an Improper Access Control vulnerability found in WiFiman Desktop for macOS to escalate privileges on the host device...

Apple iOS 26.6 / macOS Tahoe 26.6 NSUserDefaults Information Disclosure

Apple iOS 26.6 and macOS Tahoe 26.6 contain an information disclosure vulnerability that allows an application to access sensitive user preference data through NSUserDefaults. The proof of concept reads accessible system preference domains and extracts Bluetooth MAC addresses...

Apple macOS Local Privilege Escalation

Apple macOS contains a local privilege escalation vulnerability that permits an unprivileged active console user to run root commands through the com.apple.xpc.uscwoap launchd job. https://packetstorm.news/download/238175...

CVE-2026-119251: Ubiquiti Inc WiFiman Desktop for macOS: A malicious actor with local access and high privileges could exploit an Improper Access Control vulnerability found in…

A malicious actor with local access and high privileges could exploit an Improper Access Control vulnerability found in WiFiman Desktop for macOS to escalate privileges on the host device...

CVE-2026-119249: Ubiquiti Inc WiFiman Desktop for macOS: A malicious actor with access to the network could exploit a Binding to an Unrestricted IP Address vulnerability found…

A malicious actor with access to the network could exploit a Binding to an Unrestricted IP Address vulnerability found in WiFiman Desktop for macOS to obtain information about the host device...

PT-2026-132392

Improper handling of local filesystem paths in Rapid7 Insight Agent on Linux and macOS may allow authenticated local users to gain elevated privileges. Exploitation requires existing local access and depends on the Agent's inventory collection processing the crafted path...

PT-2026-132773

Name of the Vulnerable Software and Affected Versions WiFiman Desktop for macOS affected versions not specified Description A network-based actor can exploit a Binding to an Unrestricted IP Address issue to obtain information about the host device. This occurs when a service binds to all availabl...

PT-2026-132797

A malicious actor with local access and low privileges could exploit an External Control of File Name or Path vulnerability found in WiFiman Desktop for macOS to execute arbitrary commands with root privileges on the host device...

PT-2026-132060

Apple has patched a vulnerability I reported that had been present for over a decade. The fix was released in macOS 27.2. CVE-2026-112445 Of all the local privilege escalation LPE vulnerabilities I’ve seen, this is probably the easiest to exploit, the most straightforward, and the most bizarre—so...

Ubiquiti WiFiman Desktop for macOS permission and access control issue vulnerability

Versions prior to 1.3.0 of Ubiquiti WiFiman Desktop for macOS contain a vulnerability related to permission escalation and access control. This vulnerability stems from improper access controls and may allow malicious attackers with local access and elevated privileges to escalate their privilege...

CVE-2026-115805: Rapid7 Insight Agent: Improper handling of local filesystem paths in Rapid7 Insight Agent on Linux and macOS may allow authenticated local…

Improper handling of local filesystem paths in Rapid7 Insight Agent on Linux and macOS may allow authenticated local users to gain elevated privileges. Exploitation requires existing local access and depends on the Agent's inventory collection processing the crafted path...

Ubiquiti WiFiman Desktop for macOS input validation error vulnerability

Ubiquiti WiFiman Desktop for macOS versions prior to 1.3.0 contain an input validation error vulnerability stemming from improper control over external filenames or paths. Attackers with local access and low privileges can exploit this vulnerability to execute arbitrary commands on the host devic...

Ubiquiti WiFiman Desktop for macOS configuration error vulnerability

A configuration error vulnerability exists in Ubiquiti WiFiman Desktop for macOS versions prior to 1.3.0. This vulnerability arises from binding to unrestricted IP addresses, potentially allowing malicious attackers with network access to obtain information about host devices...