GO-2022-0895 vulnerabilities

Vulnerabilities for packages: k3d...

EUVD-2026-58548

OpenWrt LuCI contains an overly permissive ACL definition in luci-mod-system-mounts that grants write access to /etc/crontabs/root to users intended only for mount configuration. Authenticated users with only the mount-configuration ACL group can append arbitrary cron entries via ubus file.write,...

Bubblewrap: Root privilege escalation

Background Bubblewrap is an unprivileged sandboxing tool namespaces-powered chroot-like solution. Description A vulnerability has been discovered in Bubblewrap. Please review the CVE identifier referenced below for details. Impact An attacker could achieve root privilege escalation if Bubblewrap ...

Exploit for Missing Authentication for Critical Function in Cpanel

CVE-2026-41940 ⚠ This tool is created solely for education...

EUVD-2026-57709

A race condition in the Palo Alto Networks GlobalProtect™ client on macOS enables a locally authenticated low-privileged attacker to escalate their privileges to root. The GlobalProtect app on Linux, Windows, iOS, Android, and Chrome OS is not affected...

CVE-2026-0295

The provided data identifies CVE-2026-0295 as a race condition in the Palo Alto Networks GlobalProtect client on macOS, allowing a locally authenticated low-privileged attacker to escalate to root. Affected: GlobalProtect macOS client. Not affected: GlobalProtect apps on Linux, Windows, iOS, Andr...

CVE-2026-0295 GlobalProtect App: Local Privilege Escalation via Race Condition on macOS

A race condition in the Palo Alto Networks GlobalProtect™ client on macOS enables a locally authenticated low-privileged attacker to escalate their privileges to root. The GlobalProtect app on Linux, Windows, iOS, Android, and Chrome OS is not affected...

CVE-2026-73519

WolfStack before 25.9.2 contains a hard-coded cluster-authentication secret compiled into every build and published as a constant in src/auth/mod.rs, allowing remote unauthenticated attackers to bypass authentication by supplying this value in the X-WolfStack-Secret header to the requireauth gate...

GHSA-RP2P-6CMP-JXJ9 vulnerabilities

Vulnerabilities for packages: dotnet-bootstrap...

UBUNTU-CVE-2026-63294

A link following vulnerability in LXD allows an attacker to achieve root command execution on the host system. During the import or unpacking of crafted image or backup archives, LXD fails to properly validate and confine the backup.yaml file when it exists as a symbolic link. An attacker can...

EUVD-2026-57414

ScadaLTS 2.7.8.1 exposes a server-side method that lacks authorization checks, allowing any authenticated user including one holding only low-privilege, read-only permissions to execute arbitrary operating system commands on the host. Successful exploitation results in code execution in the conte...

CVE-2026-18713

IBM i 7.6, 7.5, 7.4, and 7.3 s vulnerable to privilege escalation via Navigator for i. An authenticated user could elevate privileges to a root user to execute commands...

EUVD-2026-57359

IBM i 7.6, 7.5, 7.4, and 7.3 s vulnerable to privilege escalation via Navigator for i. An authenticated user could elevate privileges to a root user to execute commands...

CVE-2026-18713

IBM i (7.3–7.6) is affected by CVE-2026-18713: Navigator for i contains a privilege-escalation flaw that could allow an authenticated user to elevate to root and run commands. IBM lists this under multipleNavigator-for-i vulnerabilities; the issue is addressed with PTFs SJ10887/SJ10888/SJ10890/SJ...

CVE-2026-18713

IBM i 7.6, 7.5, 7.4, and 7.3 s vulnerable to privilege escalation via Navigator for i. An authenticated user could elevate privileges to a root user to execute commands...

CVE-2026-18683

IBM i 7.6, 7.5, 7.4, and 7.3 is vulnerable to privilege escalation via Navigator for i. An authenticated user could elevate privileges to a root user to execute commands...

EUVD-2026-57347

IBM i 7.6, 7.5, 7.4, and 7.3 is vulnerable to privilege escalation via Navigator for i. An authenticated user could elevate privileges to a root user to execute commands...

CVE-2026-18683

IBM i 7.6/7.5/7.4/7.3 are affected by CVE-2026-18683, a privilege-escalation flaw in Navigator for i. An authenticated user could elevate privileges to root and execute commands. Root cause involves improper access control in Navigator for i on IBM i. Affected components/versions: IBM i 7.3–7.6. ...

CVE-2026-18683

IBM i 7.6, 7.5, 7.4, and 7.3 is vulnerable to privilege escalation via Navigator for i. An authenticated user could elevate privileges to a root user to execute commands...

PT-2026-71350

Name of the Vulnerable Software and Affected Versions WolfStack versions prior to 25.9.2 Description A hard-coded cluster-authentication secret is compiled into every build and published as a constant in src/auth/mod.rs. This allows remote unauthenticated attackers to bypass authentication by...