Most recent entries from all

EUVD-2026-318890

2026-10-03T13:34:57.809809+00:00

EUVD-2026-318890

fkie_cve-2025-34197

2026-10-03T13:34:57.809845+00:00

Vasion Print (formerly PrinterLogic) Virtual Appliance Host versions prior to 22.0.951, Application prior to 20.0.2368 (VA and SaaS deployments) contain an undocumented local user account named ubuntu with a preset password and a sudoers entry granting that account passwordless root privileges (ubuntu ALL=(ALL) NOPASSWD: ALL). Anyone who knows the hardcoded password can obtain root privileges via local console or equivalent administrative access, enabling local privilege escalation. This vulnerability has been identified by the vendor as: V-2024-010 — Hardcoded Linux Password. NOTE: The patch for this vulnerability is reported to be incomplete: /etc/shadow was remediated but /etc/sudoers remains vulnerable.

GHSA-4g48-423m-8v44

2026-10-03T13:34:57.809884+00:00

Vasion Print (formerly PrinterLogic) Virtual Appliance Host versions prior to 22.0.951, Application prior to 20.0.2368 (VA and SaaS deployments) contain an undocumented local user account named ubuntu with a preset password and a sudoers entry granting that account passwordless root privileges (ubuntu ALL=(ALL) NOPASSWD: ALL). Anyone who knows the hardcoded password can obtain root privileges via local console or equivalent administrative access, enabling local privilege escalation. NOTE: The patch for this vulnerability is reported to be incomplete: /etc/shadow was remediated but /etc/sudoers remains vulnerable.

WID-SEC-W-2025-2103 — Vasion Print: Mehrere Schwachstellen

2026-10-03T13:34:57.809905+00:00

Ein Angreifer kann mehrere Schwachstellen in Vasion Print ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Informationen offenzulegen, einen Denial of Service zu verursachen oder seine Rechte zu erweitern.