CVE-2023-32350: Teltonika RUT Series Privilege Escalation Vulnerability
CVE-2023-32350 is another Teltonika RUT series vulnerability that requires existing privileges. It was part of the same CISA advisory and is considered…
Tag: privilege escalation
18-Year-Old Linux SCTP Flaw CVE-2026-64564 Could Let Local Users Gain Root and Escape Containers
A use-after-free vulnerability in Linux's SCTP networking code, tracked as CVE-2026-64564 and named SCTPhantom, could allow local users to gain root privileges…
CVE-2026-20200: Cisco IMC Command Injection
CVE-2026-20200 is a high-severity vulnerability in the Cisco Integrated Management Controller (IMC) with a CVSS score of 8.8. It allows an authenticated…
CVE-2026-20288: Cisco IMC Command Injection
CVE-2026-20288 is a medium-severity vulnerability in the Cisco Integrated Management Controller (IMC) with a CVSS score of 6.5. It allows an authenticated…
New Zapscape KVM Flaw Could Let Privileged L1 Guest Code Escape to Linux Hosts
A newly disclosed Linux kernel vulnerability, dubbed Zapscape and tracked as CVE-2026-64561, could allow an attacker with kernel privileges inside an L1…
Attackers Compile khunt Inside Oracle to Turn SQL Injection Into Windows SYSTEM Access
Attackers breached an organization's Oracle database via a SQL injection flaw in a public-facing web application, then installed a post-exploitation toolkit named…
OVSwrap Linux Kernel Flaw Lets Local Users Gain Root via Open vSwitch
A newly disclosed memory corruption vulnerability in the Linux kernel's Open vSwitch (OVS) datapath, tracked as CVE-2026-64531 and codenamed OVSwrap, allows unprivileged…
cPanel Patches Critical SQL Injection Flaw Allowing Database Root Access
cPanel has released a targeted security update to address a critical vulnerability that could allow authenticated hosting customers to execute SQL commands…
Exim Vulnerabilities Patched in 4.99.5
Exim, a mail transfer agent, fixed two vulnerabilities in version 4.99.5: GCVE-25-2026-07-45-3, a privilege escalation via .forward files, and GCVE-25-2026-07-45-1, a directory…
Adobe Patches Critical Campaign Classic Flaw Allowing Code Execution Without User Interaction
Adobe has released security updates to address a maximum-severity vulnerability in Campaign Classic (ACC), its enterprise marketing automation platform. The flaw, tracked…