CVE-2026-87876

Two case-insensitive comparisons on request-derived usernames outside the main authorization path in CUPS's scheduler printer ACL validation and private-attribute filtering could allow bypass of username-based access controls in certain configurations...

CVE-2026-87876 Cups: openprinting cups: remaining case-insensitive username matching in scheduler side paths (cve-2026-27447 follow-up)

Two case-insensitive comparisons on request-derived usernames outside the main authorization path in CUPS's scheduler printer ACL validation and private-attribute filtering could allow bypass of username-based access controls in certain configurations...

EUVD-2026-75089

Two case-insensitive comparisons on request-derived usernames outside the main authorization path in CUPS's scheduler printer ACL validation and private-attribute filtering could allow bypass of username-based access controls in certain configurations...

CVE-2026-87876 Cups: openprinting cups: remaining case-insensitive username matching in scheduler side paths (cve-2026-27447 follow-up)

Two case-insensitive comparisons on request-derived usernames outside the main authorization path in CUPS's scheduler printer ACL validation and private-attribute filtering could allow bypass of username-based access controls in certain configurations...

CVE-2026-87876

This CUPS vulnerability (a follow-up to CVE-2026-27447 ) involves two case-insensitive comparisons on request-derived usernames in scheduler side paths outside the main authorization path—specifically in printer ACL validation and private-attribute filtering . The mismatched case handling could a...

CVE-2026-87876

Two case-insensitive comparisons on request-derived usernames outside the main authorization path in CUPS's scheduler printer ACL validation and private-attribute filtering could allow bypass of username-based access controls in certain configurations. Mitigation Fixed on upstream master branch...

CVE-2026-25939-SCADA-FUXA-Unauthenticated-Remote-Arbitrary

👤 작성자 Mohammed Idrees Banyamer 보안 연구원 📌 개요 이 저장소는 FUXA오픈소스 SCADA/ICS 소프트웨어의 심각한 권한 부여 우회 취약점인 CVE-2026-25939 에 대한 개념 증명PoC 익스플로잇을 포함합니다. 이 취약점은 인증되지 않은 원격 공격자가 임의의 스케줄러 항목을 생성, 수정 및 삭제할 수 있게 하여, 잠재적으로 원격 코드 실행과 산업 제어 시스템 조작으로 이어질 수 있습니다. 🔥 취약점 세부 정보 CVE ID : CVE-2026-25939 CVSS 점수 : 9.1 치명적 -...

CVE-2025-56799

CVE-2025-56799 Reolink 데스크톱 애플리케이션의 캐시 정리 스케줄러를 통한 OS 명령 주입 취약점 1. 개요 이름 : Reolink 데스크톱 애플리케이션 버전 : 8.18.12 공급업체 : Reolink CWE : CWE-78: OS 명령에 사용되는 특수 요소의 부적절한 중화 'OS 명령 주입' CVSS : 6.5 MEDIUM 벡터 문자열 : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N 2. 요약 Reolink 데스크톱 애플리케이션버전 8.18.12에는 캐시 정리...

CVE-2026-72945

Use of uninitialized resource in Windows Task Scheduler allows an authorized attacker to disclose information locally...

CVE-2026-72945

CVE-2026-72945 is an information disclosure vulnerability in Windows Task Scheduler , caused by the use of an uninitialized resource . An authorized local attacker with low privileges can exploit this to disclose information, with high confidentiality impact and no integrity or availability impac...

EUVD-2026-73113

Use of uninitialized resource in Windows Task Scheduler allows an authorized attacker to disclose information locally...

wptsextensions.dll

작업 스케줄러 DLL 하이재킹 악용을 위한 WptsExtensions.dll "수정 안 됨" x64 Visual Studio 환경 변수 로드: root@kitploit: "C:\Program Files x86\Microsoft Visual Studio\2019\Community\VC\Auxiliary\Build\vcvars64.bat" TCHAR script 변수를 DLL이 검색될 쓰기 가능한 SYSTEM 경로로 업데이트하세요. 이 도구를 확인하여 그러한 경로들을 찾으세요. 다음 명령으로 이 환경 변수를 나열할 수도 있습니다:...

CVE-2026-43655-AppleM2ScalerCSCDriver-UAF

CVE-2026-43655: use-after-free в общем планировщике AppleM2ScalerCSCDriver Публичное техническое описание CVE-2026-43655 , use-after-free в AppleM2ScalerCSCDriver / IOSurfaceAccelerator, доступного из стандартной песочницы приложений iOS без специальных привилегий. Apple исправила эту проблему в...

cve-2024-49039-task_scheduler_eop_reproduction

CVE-2024-49039: Windows 작업 스케줄러 권한 상승 취약점 개요 CVE-2024-49039는 인증된 공격자가 AppContainer 샌드박스를 탈출하여 Low 무결성AppContainer에서 Medium 무결성으로 권한을 상승시킬 수 있게 하는 Windows 작업 스케줄러 권한 상승EoP 취약점입니다. 이 취약점은 CVSS 점수 8.8을 부여받았으며, RomCom 위협 그룹에 의해 실제 환경에서 활발히 악용되었습니다. CVE ID : CVE-2024-49039 CVSS 점수 : 8.8 높음 CWE : CWE-2...

kernel: net/sched: act_api: use RCU with deferred freeing for action lifecycle

A flaw was found in the Linux kernel's networking scheduler. A race condition, which is a problem that occurs when multiple operations try to access the same resource at the same time, exists when network filter operations are run concurrently. This can lead to a Use-After-Free UAF vulnerability,...

CVE-2026-80630

A flaw was found in the Linux kernel's fqcodel Fair Queueing Controlled Delay network scheduler. When fqcodel drops packets during a peek operation, it incorrectly calls qdisctreereducebacklog before restoring the queue length. This can lead to the parent's class being mistakenly deactivated,...

CVE-2026-82743

Uncontrolled Resource Consumption vulnerability in ash-project ash lets a slow asynchronous read spin a scheduler thread at full CPU while the framework waits for it. Ash.Actions.Read.AsyncLimiter.awaitatleastone/1 lib/ash/actions/read/asynclimiter.ex waited for concurrent async read tasks by...

EUVD-2026-68948

Uncontrolled Resource Consumption vulnerability in ash-project ash lets a slow asynchronous read spin a scheduler thread at full CPU while the framework waits for it. Ash.Actions.Read.AsyncLimiter.awaitatleastone/1 lib/ash/actions/read/asynclimiter.ex waited for concurrent async read tasks by...

CVE-2026-82743

ash-project ash (Elixir framework) contains an uncontrolled resource consumption vulnerability in Ash.Actions.Read.AsyncLimiter.await_at_least_one/1. The function polled outstanding async read tasks with Task.yield(task, 0) in a tight loop rather than blocking, causing a BEAM scheduler to spin at...

CVE-2026-82743 Ash.Actions.Read.AsyncLimiter busy-spins a scheduler while awaiting slow async reads

Uncontrolled Resource Consumption vulnerability in ash-project ash lets a slow asynchronous read spin a scheduler thread at full CPU while the framework waits for it. Ash.Actions.Read.AsyncLimiter.awaitatleastone/1 lib/ash/actions/read/asynclimiter.ex waited for concurrent async read tasks by...