privilege escalation news
8 stories
Public Exploits Released for Linux Kernel Root Privilege Flaws
Working exploit code has been publicly released for four distinct vulnerabilities within the Linux kernel. These flaws reportedly allow a local user to escalate their privileges to administrative root access on affected systems. The availability of public exploits significantly lowers the bar for malicious actors to leverage these vulnerabilities, increasing the urgency for system…
ZDI-26-577: Trend Micro VPN OpenSSL Configuration Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
Trend Micro's TrendLife VPN product has been found to contain a local privilege escalation vulnerability, tracked as CVE-2026-67212, which could allow an attacker to execute arbitrary code with SYSTEM privileges. The flaw, identified as ZDI-26-577 (ZDI-CAN-29830), stems from an uncontrolled search path element in the OpenSSL configuration used by the VPN client.
ZDI-26-575: Linux Kernel Net Scheduler Packet Classifier API Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability
A local privilege escalation vulnerability has been identified in the Linux Kernel's Net Scheduler Packet Classifier API, tracked as ZDI-26-575 and CVE-2026-31419. This flaw could allow an attacker to execute code with kernel-level privileges.
ZDI-26-576: Linux Kernel XFRM Race Condition Local Privilege Escalation Vulnerability
A race condition vulnerability, identified as ZDI-26-576, has been reported in the Linux Kernel's XFRM (IPSec) subsystem. This flaw reportedly allows local attackers to escalate privileges on affected systems. The issue specifically involves improper locking mechanisms during operations on skb (socket buffer) objects within the XFRM component.
Ubiquiti Patches Critical UniFi OS Flaws Allowing Command Injection and Privilege Escalation
Ubiquiti has released security updates to address seven vulnerabilities in its UniFi OS, including a critical flaw that could allow for command injection. The most severe of these, CVE-2026-50746, carries a CVSS score of 10.0 and affects the UniFi Connect Application, versions 3.4.16 and earlier. This application is used for managing commercial building systems like smart lighting and EV chargers.
15-Year-Old GhostLock Flaw Enables Root and Container Escape on Most Linux Distros
A Linux kernel vulnerability, present for 15 years and now publicly disclosed as CVE-2026-43499, has been identified by Nebula Security. This flaw, dubbed GhostLock, allows any authenticated user on an unpatched system to escalate their privileges to root and to break out of containerized environments.
In Less Than 24 Hours, Attackers Weaponize Cisco CUCM Flaw
A critical vulnerability in Cisco Unified Communications Manager (CUCM) and CUCM Small and Medium Edition (SME) has been actively exploited by attackers less than a day after its public disclosure. The flaw allows for server-side request forgery (SSRF) and enables attackers to escalate their privileges to root access on affected systems.
ZDI-26-397: X.Org Server CreateSaverWindow Use-After-Free Information Disclosure Vulnerability
A critical use-after-free vulnerability has been identified in the X.Org Server, potentially leading to sensitive information disclosure and privilege escalation. The vulnerability, tracked as ZDI-26-397, resides in the server's management of ScreenSaverScreenPrivateRec objects. It arises from an insufficient validation process, where the server performs operations on an object without first…