https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T21:17:21.249427+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2025:22760 ALSA-2025:22760 — Important: abrt security update 2026-10-15T21:17:21.437723+00:00

Affected: AlmaLinux:8: abrt, AlmaLinux:8: abrt-addon-ccpp, AlmaLinux:8: abrt-addon-coredump-helper, AlmaLinux:8: abrt-addon-kerneloops, AlmaLinux:8: abrt-addon-pstoreoops, AlmaLinux:8: abrt-addon-vmcore, AlmaLinux:8: abrt-addon-xorg, AlmaLinux:8: abrt-cli, AlmaLinux:8: abrt-cli-ng, AlmaLinux:8: abrt-console-notification and 12 more

The Automatic Bug Reporting Tool (ABRT) recognizes defects in applications and creates bug reports that help maintainers fix the defects. ABRT uses a plug-in system to extend its functionality.

Security Fix(es):

* abrt: Command-injection in ABRT leading to local privilege escalation (CVE-2025-12744)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/euvd-2026-262387 EUVD-2026-262387 2026-10-15T21:17:21.437863+00:00 EUVD-2026-262387 https://cve.radiocsirt.org/vuln/fkie_cve-2025-12744 fkie_cve-2025-12744 2026-10-15T21:17:21.437892+00:00

A flaw was found in the ABRT daemon’s handling of user-supplied mount information.ABRT copies up to 12 characters from an untrusted input and places them directly into a shell command (docker inspect %s) without proper validation. An unprivileged local user can craft a payload that injects shell metacharacters, causing the root-running ABRT process to execute attacker-controlled commands and ultimately gain full root privileges.

 https://cve.radiocsirt.org/vuln/ghsa-vwhf-x6j3-3qfg GHSA-vwhf-x6j3-3qfg 2026-10-15T21:17:21.437932+00:00

A flaw was found in the ABRT daemon’s handling of user-supplied mount information.ABRT copies up to 12 characters from an untrusted input and places them directly into a shell command (docker inspect %s) without proper validation. An unprivileged local user can craft a payload that injects shell metacharacters, causing the root-running ABRT process to execute attacker-controlled commands and ultimately gain full root privileges.

 https://cve.radiocsirt.org/vuln/rhsa-2025:22760 RHSA-2025:22760 — Red Hat Security Advisory: abrt security update 2026-10-15T21:17:21.437961+00:00

abrt: Command-injection in ABRT leading to local privilege escalation

 https://cve.radiocsirt.org/vuln/rhsa-2025:23030 RHSA-2025:23030 — Red Hat Security Advisory: abrt security update 2026-10-15T21:17:21.437995+00:00

abrt: Command-injection in ABRT leading to local privilege escalation

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2748 WID-SEC-W-2025-2748 — Red Hat Enterprise Linux (ABRT): Schwachstelle ermöglicht Privilegieneskalation 2026-10-15T21:17:21.438025+00:00

Ein lokaler Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux (ABRT) ausnutzen, um seine Privilegien zu erhöhen.