https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T05:34:13.667661+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2026:3938 ALSA-2026:3938 — Moderate: nfs-utils security update 2026-10-03T05:34:14.035611+00:00

Affected: AlmaLinux:8: libnfsidmap, AlmaLinux:8: libnfsidmap-devel, AlmaLinux:8: nfs-utils

The nfs-utils packages provide a daemon for the kernel Network File System (NFS) server and related tools, which provides better performance than the traditional Linux NFS server used by most users. These packages also contain the mount.nfs, umount.nfs, and showmount programs.

Security Fix(es):

* nfs-utils: rpc.mountd in the nfs-utils privilege escalation (CVE-2025-12801)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2026-09797 bdu:2026-09797 2026-10-03T05:34:14.035678+00:00 bdu:2026-09797 https://cve.radiocsirt.org/vuln/bell-cve-2025-12801 BELL-CVE-2025-12801 2026-10-03T05:34:14.035705+00:00

Affected: Alpaquita:23: nfs-utils, Alpaquita:25: nfs-utils, Alpaquita:stream: nfs-utils

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0316 certfr-2026-avi-0316 — De multiples vulnérabilités ont été découvertes dans les produits VMware. Elles permettent à un attaquant de provoquer… 2026-10-03T05:34:14.035755+00:00 certfr-2026-avi-0316 https://cve.radiocsirt.org/vuln/euvd-2026-362225 EUVD-2026-362225 2026-10-03T05:34:14.035784+00:00 EUVD-2026-362225 https://cve.radiocsirt.org/vuln/fkie_cve-2025-12801 fkie_cve-2025-12801 2026-10-03T05:34:14.035796+00:00

A vulnerability was recently discovered in the rpc.mountd daemon in the nfs-utils package for Linux, that allows a NFSv3 client to escalate the privileges assigned to it in the /etc/exports file at mount time. In particular, it allows the client to access any subdirectory or subtree of an exported directory, regardless of the set file permissions, and regardless of any 'root_squash' or 'all_squash' attributes that would normally be expected to apply to that client.

 https://cve.radiocsirt.org/vuln/ghsa-q8x7-j9x6-2fpc GHSA-q8x7-j9x6-2fpc 2026-10-03T05:34:14.035820+00:00

A vulnerability was recently discovered in the rpc.mountd daemon in the nfs-utils package for Linux, that allows a NFSv3 client to escalate the privileges assigned to it in the /etc/exports file at mount time. In particular, it allows the client to access any subdirectory or subtree of an exported directory, regardless of the set file permissions, and regardless of any 'root_squash' or 'all_squash' attributes that would normally be expected to apply to that client.

 https://cve.radiocsirt.org/vuln/oesa-2026-2597 OESA-2026-2597 — nfs-utils security update 2026-10-03T05:34:14.035837+00:00

Affected: openEuler:24.03-LTS-SP1: nfs-utils

This is he nfs-utils tools package. It contains the showmount,mount.nfs,umount.nfs and libnfsidmap Security Fix(es):

A vulnerability was recently discovered in the rpc.mountd daemon in the nfs-utils package for Linux, that allows a NFSv3 client to escalate the privileges assigned to it in the /etc/exports file at mount time. In particular, it allows the client to access any subdirectory or subtree of an exported directory, regardless of the set file permissions, and regardless of any 'root_squash' or 'all_squash' attributes that would normally be expected to apply to that client.(CVE-2025-12801)

 https://cve.radiocsirt.org/vuln/rhsa-2026:3938 RHSA-2026:3938 — Red Hat Security Advisory: nfs-utils security update 2026-10-03T05:34:14.035862+00:00

nfs-utils: rpc.mountd in the nfs-utils privilege escalation

 https://cve.radiocsirt.org/vuln/rhsa-2026:3941 RHSA-2026:3941 — Red Hat Security Advisory: nfs-utils security update 2026-10-03T05:34:14.035879+00:00

nfs-utils: rpc.mountd in the nfs-utils privilege escalation

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-12801 UBUNTU-CVE-2025-12801 2026-10-03T05:34:14.035894+00:00

Affected: Ubuntu:Pro:14.04:LTS: linux, Ubuntu:Pro:14.04:LTS: linux-aws, Ubuntu:Pro:14.04:LTS: linux-azure, Ubuntu:Pro:14.04:LTS: linux-lts-xenial, Ubuntu:Pro:16.04:LTS: linux, Ubuntu:Pro:16.04:LTS: linux-aws, Ubuntu:Pro:16.04:LTS: linux-aws-hwe, Ubuntu:Pro:16.04:LTS: linux-azure, Ubuntu:Pro:16.04:LTS: linux-gcp, Ubuntu:Pro:16.04:LTS: linux-hwe and 255 more

A vulnerability was recently discovered in the rpc.mountd daemon in the nfs-utils package for Linux, that allows a NFSv3 client to escalate the privileges assigned to it in the /etc/exports file at mount time. In particular, it allows the client to access any subdirectory or subtree of an exported directory, regardless of the set file permissions, and regardless of any 'root_squash' or 'all_squash' attributes that would normally be expected to apply to that client.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0615 WID-SEC-W-2026-0615 — Red Hat Enterprise Linux (nfs-utils): Schwachstelle ermöglicht Offenlegung von Informationen 2026-10-03T05:34:14.036228+00:00

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um Informationen offenzulegen.