https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T03:50:41.234199+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-361953 EUVD-2026-361953 2026-10-04T03:50:41.239919+00:00 EUVD-2026-361953 https://cve.radiocsirt.org/vuln/fkie_cve-2026-12080 fkie_cve-2026-12080 2026-10-04T03:50:41.239951+00:00

A flaw was found in the QEMU Guest Agent (qga). A local unprivileged user can exploit a vulnerability in the guest-ssh-add-authorized-keys command handler by manipulating symbolic links. This can occur either through a deterministic directory-symlink bypass or a Time-of-Check to Time-of-Use (TOCTOU) file-symlink race. Successful exploitation allows the attacker to gain ownership of arbitrary root-owned files or directories, leading to root access. This vulnerability requires an external management layer (e.g., libvirt) to trigger the affected code path.

 https://cve.radiocsirt.org/vuln/ghsa-9xqq-92hv-jj34 GHSA-9xqq-92hv-jj34 2026-10-04T03:50:41.239985+00:00

A flaw was found in the QEMU Guest Agent (qga). A local unprivileged user can exploit a vulnerability in the guest-ssh-add-authorized-keys command handler by manipulating symbolic links. This can occur either through a deterministic directory-symlink bypass or a Time-of-Check to Time-of-Use (TOCTOU) file-symlink race. Successful exploitation allows the attacker to gain ownership of arbitrary root-owned files or directories, leading to root access. This vulnerability requires an external management layer (e.g., libvirt) to trigger the affected code path.

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-12080 msrc_CVE-2026-12080 — Qemu-kvm: qemu-guest-agent: local privilege escalation via symlink attack in guest-ssh-add-authorized-keys 2026-10-04T03:50:41.240003+00:00 msrc_CVE-2026-12080 https://cve.radiocsirt.org/vuln/oesa-2026-4084 OESA-2026-4084 — qemu security update 2026-10-04T03:50:41.240020+00:00

Affected: openEuler:24.03-LTS-SP4: qemu

QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed. Security Fix(es):

A flaw was found in the QEMU Guest Agent (qga). A local unprivileged user can exploit a vulnerability in the guest-ssh-add-authorized-keys command handler by manipulating symbolic links. This can occur either through a deterministic directory-symlink bypass or a Time-of-Check to Time-of-Use (TOCTOU) file-symlink race. Successful exploitation allows the attacker to gain ownership of arbitrary root-owned files or directories, leading to root access. This vulnerability requires an external management layer (e.g., libvirt) to trigger the affected code path.(CVE-2026-12080)

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-12080 UBUNTU-CVE-2026-12080 2026-10-04T03:50:41.240045+00:00

Affected: Ubuntu:Pro:14.04:LTS: qemu, Ubuntu:Pro:16.04:LTS: qemu, Ubuntu:Pro:18.04:LTS: qemu, Ubuntu:Pro:20.04:LTS: qemu, Ubuntu:22.04:LTS: qemu, Ubuntu:24.04:LTS: qemu, Ubuntu:26.04:LTS: qemu, Ubuntu:26.04:LTS: qemu-hwe

A flaw was found in the QEMU Guest Agent (qga). A local unprivileged user can exploit a vulnerability in the guest-ssh-add-authorized-keys command handler by manipulating symbolic links. This can occur either through a deterministic directory-symlink bypass or a Time-of-Check to Time-of-Use (TOCTOU) file-symlink race. Successful exploitation allows the attacker to gain ownership of arbitrary root-owned files or directories, leading to root access. This vulnerability requires an external management layer (e.g., libvirt) to trigger the affected code path.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2295 WID-SEC-W-2026-2295 — QEMU: Schwachstelle ermöglicht Privilegieneskalation 2026-10-04T03:50:41.240074+00:00

Ein lokaler Angreifer kann eine Schwachstelle in QEMU ausnutzen, um möglicherweise Root-Rechte zu erlangen.