Lucene search
+L

275 matches found

OSV
OSV
added 2026/08/21 6:06 a.m.10 views

RLSA-2026:57610 Moderate: kbd security update

The kbd packages provide tools for managing console behavior on a Linux system, including the keyboard, screen fonts, virtual terminals, and font files. Security Fixes: kbd: Local privilege escalation in openvt via incorrect process owner verification allowing passwordless root login CVE-2026-726...

7.8CVSS5.4AI score0.00107EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2026/08/20 5:47 p.m.6 views

Moderate: Red Hat Security Advisory: kbd security update

An update for kbd is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

7.8CVSS5.5AI score0.00107EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2026/08/20 5:47 p.m.8 views

kbd: Local privilege escalation in openvt via incorrect process owner verification allowing passwordless root login

openvt -u is intended to identify the owner of the current VT and then execute login as that user from a privileged context. In the documented kbrequest/init usage, the ownership test in authenticateuser relies on stat"/proc//fd/0". stat on /proc//fd/0 follows the symlink to the underlying TTY...

7.8CVSS5.6AI score0.00107EPSS
SaveExploits0References4
AlmaLinux
AlmaLinux
added 2026/08/20 12:00 a.m.7 views

Moderate: kbd security update

The kbd packages provide tools for managing console behavior on a Linux system, including the keyboard, screen fonts, virtual terminals, and font files. Security Fixes: kbd: Local privilege escalation in openvt via incorrect process owner verification allowing passwordless root login CVE-2026-726...

7.8CVSS5.3AI score0.00107EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2026/08/11 9:17 a.m.8 views

CVE-2026-72693

openvt -u is intended to identify the owner of the current VT and then execute login as that user from a privileged context. In the documented kbrequest/init usage, the ownership test in authenticateuser relies on stat"/proc//fd/0". stat on /proc//fd/0 follows the symlink to the underlying TTY...

7.8CVSS5.5AI score0.00107EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/11 8:39 a.m.80 views

CVE-2026-72693

CVE-2026-72693 describes a privilege-escalation path in deployments using openvt -u with kbrequest/init. The root cause is an ownership check in authenticate_user() that uses stat("/proc//fd/0"), which follows the fd to the TTY node and reports the TTY owner instead of the process owner. If the T...

7.8CVSS5.5AI score0.00107EPSS
SaveExploits0References5
Debian CVE
Debian CVE
added 2026/08/11 8:39 a.m.10 views

CVE-2026-72693

openvt -u is intended to identify the owner of the current VT and then execute login as that user from a privileged context. In the documented kbrequest/init usage, the ownership test in authenticateuser relies on stat"/proc//fd/0". stat on /proc//fd/0 follows the symlink to the underlying TTY...

7.8CVSS5.5AI score0.00107EPSS
SaveExploits0
Vulnrichment
Vulnrichment
added 2026/08/11 8:39 a.m.7 views

CVE-2026-72693 Kbd: local privilege escalation in openvt via incorrect process owner verification allowing passwordless root login

openvt -u is intended to identify the owner of the current VT and then execute login as that user from a privileged context. In the documented kbrequest/init usage, the ownership test in authenticateuser relies on stat"/proc//fd/0". stat on /proc//fd/0 follows the symlink to the underlying TTY...

7.8CVSS5.5AI score0.00107EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2026/08/11 12:00 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2026-72693

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - openvt -u is intended to identify the owner of the current VT and then execute login as that user from a privileged context. In the documented kbrequest/init...

7.8CVSS5.6AI score0.00107EPSS
SaveExploits0References4
CVE
CVE
added 2026/07/15 2:52 p.m.26 views

CVE-2026-61828

Affected software: NixOS/Nixpkgs’ MySQL service module (services.mysql). Vulnerability: The module initialization process could set up the MySQL data directory in a way that allows local unprivileged users (e.g., web or CGI processes on the same host) to log in as root without a password when usi...

8.5CVSS6.1AI score0.00107EPSS
SaveExploits0References7
OSV
OSV
added 2026/07/15 2:52 p.m.15 views

CVE-2026-61828 nixos/mysql : `services.mysql` is configured with insecure authentication by default when used with `mysql` or `percona-server`

Nixpkgs is a collection of software packages that can be installed with the Nix package manager. Prior to the 25.11 and 26.05 channel fixes, the NixOS module for MySQL services.mysql initializes the MySQL database in a way that allows local users, such as unprivileged web or CGI processes on the...

8.5CVSS6.1AI score
SaveExploits0References9
Cvelist
Cvelist
added 2026/07/15 2:52 p.m.37 views

CVE-2026-61828 nixos/mysql : `services.mysql` is configured with insecure authentication by default when used with `mysql` or `percona-server`

Nixpkgs is a collection of software packages that can be installed with the Nix package manager. Prior to the 25.11 and 26.05 channel fixes, the NixOS module for MySQL services.mysql initializes the MySQL database in a way that allows local users, such as unprivileged web or CGI processes on the...

8.5CVSS0.00107EPSS
SaveExploits0References7
ATTACKERKB
ATTACKERKB
added 2026/07/15 2:52 p.m.24 views

CVE-2026-61828

Nixpkgs is a collection of software packages that can be installed with the Nix package manager. Prior to the 25.11 and 26.05 channel fixes, the NixOS module for MySQL services.mysql initializes the MySQL database in a way that allows local users, such as unprivileged web or CGI processes on the...

8.5CVSS6.1AI score0.00107EPSS
SaveExploits0References8Affected Software1
RedhatCVE
RedhatCVE
added 2026/03/11 7:09 a.m.9 views

CVE-2025-70802

Tenda G1V3.1si V16.01.7.8 Firmware V16.01.7.8 was discovered to contain a hardcoded password vulnerability in /etcro/shadow, which allows attackers to log in as root...

8.4CVSS5.8AI score0.00179EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2026/03/11 7:09 a.m.11 views

CVE-2025-70798

Tenda i24V3.0si V3.0.0.5 Firmware V3.0.0.5 was discovered to contain a hardcoded password vulnerability in /etcro/shadow, which allows attackers to log in as root...

8.4CVSS5.8AI score0.00179EPSS
SaveExploits1References1
EUVD
EUVD
added 2026/03/10 9:32 p.m.8 views

EUVD-2025-208540

Tenda G1V3.1si V16.01.7.8 Firmware V16.01.7.8 was discovered to contain a hardcoded password vulnerability in /etcro/shadow, which allows attackers to log in as root...

5.8AI score0.00179EPSS
SaveExploits1References3
EUVD
EUVD
added 2026/03/10 9:32 p.m.8 views

EUVD-2025-208539

Tenda i24V3.0si V3.0.0.5 Firmware V3.0.0.5 was discovered to contain a hardcoded password vulnerability in /etcro/shadow, which allows attackers to log in as root...

5.8AI score0.00179EPSS
SaveExploits1References3
NVD
NVD
added 2026/03/10 9:16 p.m.10 views

CVE-2025-70798

Tenda i24V3.0si V3.0.0.5 Firmware V3.0.0.5 was discovered to contain a hardcoded password vulnerability in /etcro/shadow, which allows attackers to log in as root...

8.4CVSS0.00179EPSS
SaveExploits1References2
NVD
NVD
added 2026/03/10 9:16 p.m.9 views

CVE-2025-70802

Tenda G1V3.1si V16.01.7.8 Firmware V16.01.7.8 was discovered to contain a hardcoded password vulnerability in /etcro/shadow, which allows attackers to log in as root...

8.4CVSS0.00179EPSS
SaveExploits1References2
CVE
CVE
added 2026/03/10 12:00 a.m.16 views

CVE-2025-70802

CVE-2025-70802 affects Tenda G1V3.1si firmware version V16.01.7.8. The vulnerability is a hardcoded password present in /etc_ro/shadow, enabling an attacker to log in as root. Multiple connected sources (NVD, Red Hat, ENISA EUVD, CVE record) corroborate the same description and firmware detail. E...

8.4CVSS5.8AI score0.00179EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder