Skip to content
OpenAdvisories

Archive

29 August 2026

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • High 7.8
    CVE-2026-82474 Public exploit

    Sudo through 1.9.17p2 Intercept Policy Bypass via execveat

    Sudo through 1.9.17p2 fails to apply intercept policy checks to the execveat system call in ptrace-based intercept mode. Users permitted to run specific commands can execute denied programs by calling execveat directly or through fexecve, bypassing policy enf…

  • Medium 6.6
    CVE-2026-76547 Public exploit

    Profile Builder < 4.0.1 - Admin+ PHP Object Injection via Import/Export

    The User Profile Builder WordPress plugin before 4.0.1 does not validate the type of data being deserialized when importing a configuration file, allowing high privilege users such as administrators to conduct PHP Object Injection. The affected feature is a f…