https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T12:06:04.180681+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2019-15902 cnvd-2019-15902 2026-10-03T12:06:04.187042+00:00 cnvd-2019-15902 https://cve.radiocsirt.org/vuln/euvd-2026-53415 EUVD-2026-53415 2026-10-03T12:06:04.187079+00:00 EUVD-2026-53415 https://cve.radiocsirt.org/vuln/fkie_cve-2019-10143 fkie_cve-2019-10143 2026-10-03T12:06:04.187094+00:00

It was discovered freeradius up to and including version 3.0.19 does not correctly configure logrotate, allowing a local attacker who already has control of the radiusd user to escalate his privileges to root, by tricking logrotate into writing a radiusd-writable file to a directory normally inaccessible by the radiusd user. NOTE: the upstream software maintainer has stated "there is simply no way for anyone to gain privileges through this alleged issue."

 https://cve.radiocsirt.org/vuln/ghsa-5x22-w79m-34gq GHSA-5x22-w79m-34gq 2026-10-03T12:06:04.187126+00:00

It was discovered freeradius up to and including version 3.0.19 does not correctly configure logrotate, allowing a local attacker who already has control of the radiusd user to escalate his privileges to root, by tricking logrotate into writing a radiusd-writable file to a directory normally inaccessible by the radiusd user.

 https://cve.radiocsirt.org/vuln/gsd-2019-10143 gsd-2019-10143 2026-10-03T12:06:04.187158+00:00 gsd-2019-10143 https://cve.radiocsirt.org/vuln/rhsa-2019:3353 RHSA-2019:3353 — Red Hat Security Advisory: freeradius:3.0 security and bug fix update 2026-10-03T12:06:04.187178+00:00

freeradius: privilege escalation due to insecure logrotate configuration

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-10143 UBUNTU-CVE-2019-10143 2026-10-03T12:06:04.187197+00:00

Affected: Ubuntu:Pro:16.04:LTS: freeradius, Ubuntu:18.04:LTS: freeradius, Ubuntu:20.04:LTS: freeradius, Ubuntu:22.04:LTS: freeradius, Ubuntu:24.04:LTS: freeradius, Ubuntu:25.10: freeradius, Ubuntu:26.04:LTS: freeradius

It was discovered freeradius up to and including version 3.0.19 does not correctly configure logrotate, allowing a local attacker who already has control of the radiusd user to escalate his privileges to root, by tricking logrotate into writing a radiusd-writable file to a directory normally inaccessible by the radiusd user. NOTE: the upstream software maintainer has stated "there is simply no way for anyone to gain privileges through this alleged issue."