Bubblewrap: Root privilege escalation

Background Bubblewrap is an unprivileged sandboxing tool namespaces-powered chroot-like solution. Description A vulnerability has been discovered in Bubblewrap. Please review the CVE identifier referenced below for details. Impact An attacker could achieve root privilege escalation if Bubblewrap ...

KLA91223 PE vulnerability in Microsoft System Center

Privilege escalation vulnerability was found in Microsoft System Center. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2026-69414 Exploitation Public exploits exist for this vulnerability. Related products Microsoft-Malware-Protection-Engine CVE list...

PT-2026-72125

Name of the Vulnerable Software and Affected Versions Microsoft Defender affected versions not specified Description An elevation of privilege exists in the Microsoft Malware Protection Engine in Microsoft Defender, publicly referred to as "ShieldBreak". Recommendations At the moment, there is no...

PT-2026-72033

Nozomi Networks Labs identified a CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability in the event notification functionality of KUNBUS piControl in version 2.6.2 that allows a local authenticated attacker to corrupt kernel heap and...

UBUNTU-CVE-2026-16457

virtio: Malformed packed descriptor livelocks the device at 100% host CPU guest triggered DoS...

GLSA-202608-09 : Bubblewrap: Root privilege escalation

The remote host is affected by the vulnerability described in GLSA-202608-09 Bubblewrap: Root privilege escalation A vulnerability has been discovered in Bubblewrap. Please review the CVE identifier referenced below for details. Tenable has extracted the preceding description block directly from...

PT-2026-72040

In Akaunting versions sync call without verifying whether the caller is authorized to manage roles. Users only require the default update-auth-profile permission to access the self-update path and assign themselves as admins. The API endpoints are properly permission‑gated and are not affected by...

PT-2026-72045

Dell Wyse Management Suite WMS, versions prior to 2605.0.2, contain a Use of Hard-coded Credentials vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Unauthorized access...

PT-2026-71995

Name of the Vulnerable Software and Affected Versions getgrav/grav-plugin-api versions prior to 1.0.13 Description The getgrav/grav-plugin-api plugin fails to validate that the scopes of a newly created API key are a subset of the caller's scopes within the createApiKey function. The self-target...

PT-2026-71998

Name of the Vulnerable Software and Affected Versions Grav API plugin getgrav/grav-plugin-api versions prior to 1.0.13 Description An API-key scope-cap bypass exists in the create and update methods of the UsersController. While these methods enforce scope caps for api.users.write, they rely on a...

PT-2026-72044

Dell Wyse Management Suite WMS, versions prior to 2605.0.2, contain an Improper Deserialization of Untrusted Data vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Privilege Escalation...

AlmaLinux 8 : .NET 10.0 (ALSA-2026:54542)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:54542 advisory. .NET: .NET Core: .NET Security Feature Bypass Vulnerability CVE-2026-62899 .NET: .NET Information Disclosure Vulnerability CVE-2026-62900 .NET: .NET Deni...

PT-2026-72074

Name of the Vulnerable Software and Affected Versions Emlog versions prior to 2.6.27 Description The install.php endpoint allows the action parameter to be set to reinstall without authentication. This bypasses the installation check because the security guard only executes when the $act variable...

The vulnerability of the drm/display/dp_mst component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the drm/display/dpmst component in Linux kernel is related to an incorrect bit offset for a integer value. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the Linux operating system’s kernel, related to pointer arithmetic errors, allows attackers to trigger a service failure.

The vulnerability of the Linux operating system’s kernel is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

FreeBSD : Gitlab -- vulnerabilities (2c73b6d5-971c-11f1-bdc8-2cf05da270f3)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 2c73b6d5-971c-11f1-bdc8-2cf05da270f3 advisory. Gitlab reports: Cross-site Scripting issue in Analytics Dashboards table field configuration...

SUSE SLES15: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2026:3602-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3602-1 advisory. The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues: The following security issues were fixed: -...

Security Updates for Azure CycleCloud < 8.9.1

The Azure CycleCloud product is missing a security update. It is, therefore, affected by the following vulnerabilities: - Missing authentication for critical function in Azure CycleCloud allows an authorized attacker to elevate privileges over a network. CVE-2026-57969 - An improper input...

python3-ansible-compat-26.8.0-1.1 on GA media (moderate)

python3-ansible-compat-26.8.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11509-1 Rating: moderate Cross-References: CVE-2026-11332 CVSS scores: CVE-2026-11332 SUSE : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Tumbleweed An update that solves one...

kernel-devel-7.1.8-1.1 on GA media (moderate)

kernel-devel-7.1.8-1.1 on GA media Announcement ID: openSUSE-SU-2026:11506-1 Rating: moderate Cross-References: CVE-2026-68081 CVE-2026-68082 CVSS scores: CVE-2026-68081 SUSE : 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H CVE-2026-68081 SUSE : 7.1...