https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T18:41:10.983343+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-371964 EUVD-2026-371964 2026-10-02T18:41:11.065846+00:00 EUVD-2026-371964 https://cve.radiocsirt.org/vuln/fkie_cve-2026-93658 fkie_cve-2026-93658 2026-10-02T18:41:11.065887+00:00

uutils coreutils versions before 0.10.0 apply setuid or setgid mode to install destinations before finalizing ownership changes, allowing privileged users to leave setuid executables owned by the privileged invoker when ownership changes fail. Attackers can execute leftover setuid files with elevated privileges when ownership change operations fail on capability-restricted systems.

 https://cve.radiocsirt.org/vuln/ghsa-7xr6-4qqg-jjh9 GHSA-7xr6-4qqg-jjh9 2026-10-02T18:41:11.065921+00:00

uutils coreutils versions before 0.10.0 apply setuid or setgid mode to install destinations before finalizing ownership changes, allowing privileged users to leave setuid executables owned by the privileged invoker when ownership changes fail. Attackers can execute leftover setuid files with elevated privileges when ownership change operations fail on capability-restricted systems.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-93658 UBUNTU-CVE-2026-93658 2026-10-02T18:41:11.065940+00:00

Affected: Ubuntu:24.04:LTS: rust-coreutils, Ubuntu:26.04:LTS: rust-coreutils

uutils coreutils versions before 0.10.0 apply setuid or setgid mode to install destinations before finalizing ownership changes, allowing privileged users to leave setuid executables owned by the privileged invoker when ownership changes fail. Attackers can execute leftover setuid files with elevated privileges when ownership change operations fail on capability-restricted systems.