https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 05:34:36 +0000 https://cve.radiocsirt.org/vuln/alsa-2026:3938 <p><strong>Affected:</strong> AlmaLinux:8: libnfsidmap, AlmaLinux:8: libnfsidmap-devel, AlmaLinux:8: nfs-utils</p> <p>The nfs-utils packages provide a daemon for the kernel Network File System (NFS) server and related tools, which provides better performance than the traditional Linux NFS server used by most users. These packages also contain the mount.nfs, umount.nfs, and showmount programs.</p> <p>Security Fix(es):</p> <p>* nfs-utils: rpc.mountd in the nfs-utils privilege escalation (CVE-2025-12801)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:8: libnfsidmap, AlmaLinux:8: libnfsidmap-devel, AlmaLinux:8: nfs-utils</p> <p>The nfs-utils packages provide a daemon for the kernel Network File System (NFS) server and related tools, which provides better performance than the traditional Linux NFS server used by most users. These packages also contain the mount.nfs, umount.nfs, and showmount programs.</p> <p>Security Fix(es):</p> <p>* nfs-utils: rpc.mountd in the nfs-utils privilege escalation (CVE-2025-12801)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2026:3938 https://cve.radiocsirt.org/vuln/bdu:2026-09797 bdu:2026-09797 https://cve.radiocsirt.org/vuln/bdu:2026-09797 https://cve.radiocsirt.org/vuln/bell-cve-2025-12801 <p><strong>Affected:</strong> Alpaquita:23: nfs-utils, Alpaquita:25: nfs-utils, Alpaquita:stream: nfs-utils</p> <p><strong>Affected:</strong> Alpaquita:23: nfs-utils, Alpaquita:25: nfs-utils, Alpaquita:stream: nfs-utils</p> https://cve.radiocsirt.org/vuln/bell-cve-2025-12801 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0316 certfr-2026-avi-0316 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0316 https://cve.radiocsirt.org/vuln/euvd-2026-362225 EUVD-2026-362225 https://cve.radiocsirt.org/vuln/euvd-2026-362225 https://cve.radiocsirt.org/vuln/fkie_cve-2025-12801 <p>A vulnerability was recently discovered in the rpc.mountd daemon in the nfs-utils package for Linux, that allows a NFSv3 client to escalate the privileges assigned to it in the /etc/exports file at mount time. In particular, it allows the client to access any subdirectory or subtree of an exported directory, regardless of the set file permissions, and regardless of any &#39;root_squash&#39; or &#39;all_squash&#39; attributes that would normally be expected to apply to that client.</p> <p>A vulnerability was recently discovered in the rpc.mountd daemon in the nfs-utils package for Linux, that allows a NFSv3 client to escalate the privileges assigned to it in the /etc/exports file at mount time. In particular, it allows the client to access any subdirectory or subtree of an exported directory, regardless of the set file permissions, and regardless of any &#39;root_squash&#39; or &#39;all_squash&#39; attributes that would normally be expected to apply to that client.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-12801 https://cve.radiocsirt.org/vuln/ghsa-q8x7-j9x6-2fpc <p>A vulnerability was recently discovered in the rpc.mountd daemon in the nfs-utils package for Linux, that allows a NFSv3 client to escalate the privileges assigned to it in the /etc/exports file at mount time. In particular, it allows the client to access any subdirectory or subtree of an exported directory, regardless of the set file permissions, and regardless of any &#39;root_squash&#39; or &#39;all_squash&#39; attributes that would normally be expected to apply to that client.</p> <p>A vulnerability was recently discovered in the rpc.mountd daemon in the nfs-utils package for Linux, that allows a NFSv3 client to escalate the privileges assigned to it in the /etc/exports file at mount time. In particular, it allows the client to access any subdirectory or subtree of an exported directory, regardless of the set file permissions, and regardless of any &#39;root_squash&#39; or &#39;all_squash&#39; attributes that would normally be expected to apply to that client.</p> https://cve.radiocsirt.org/vuln/ghsa-q8x7-j9x6-2fpc https://cve.radiocsirt.org/vuln/oesa-2026-2597 <p><strong>Affected:</strong> openEuler:24.03-LTS-SP1: nfs-utils</p> <p>This is he nfs-utils tools package. It contains the showmount,mount.nfs,umount.nfs and libnfsidmap Security Fix(es):</p> <p>A vulnerability was recently discovered in the rpc.mountd daemon in the nfs-utils package for Linux, that allows a NFSv3 client to escalate the privileges assigned to it in the /etc/exports file at mount time. In particular, it allows the client to access any subdirectory or subtree of an exported directory, regardless of the set file permissions, and regardless of any &amp;apos;root_squash&amp;apos; or &amp;apos;all_squash&amp;apos; attributes that would normally be expected to apply to that client.(CVE-2025-12801)</p> <p><strong>Affected:</strong> openEuler:24.03-LTS-SP1: nfs-utils</p> <p>This is he nfs-utils tools package. It contains the showmount,mount.nfs,umount.nfs and libnfsidmap Security Fix(es):</p> <p>A vulnerability was recently discovered in the rpc.mountd daemon in the nfs-utils package for Linux, that allows a NFSv3 client to escalate the privileges assigned to it in the /etc/exports file at mount time. In particular, it allows the client to access any subdirectory or subtree of an exported directory, regardless of the set file permissions, and regardless of any &amp;apos;root_squash&amp;apos; or &amp;apos;all_squash&amp;apos; attributes that would normally be expected to apply to that client.(CVE-2025-12801)</p> https://cve.radiocsirt.org/vuln/oesa-2026-2597 https://cve.radiocsirt.org/vuln/rhsa-2026:3938 <p>nfs-utils: rpc.mountd in the nfs-utils privilege escalation</p> <p>nfs-utils: rpc.mountd in the nfs-utils privilege escalation</p> https://cve.radiocsirt.org/vuln/rhsa-2026:3938 https://cve.radiocsirt.org/vuln/rhsa-2026:3941 <p>nfs-utils: rpc.mountd in the nfs-utils privilege escalation</p> <p>nfs-utils: rpc.mountd in the nfs-utils privilege escalation</p> https://cve.radiocsirt.org/vuln/rhsa-2026:3941 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-12801 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: linux, Ubuntu:Pro:14.04:LTS: linux-aws, Ubuntu:Pro:14.04:LTS: linux-azure, Ubuntu:Pro:14.04:LTS: linux-lts-xenial, Ubuntu:Pro:16.04:LTS: linux, Ubuntu:Pro:16.04:LTS: linux-aws, Ubuntu:Pro:16.04:LTS: linux-aws-hwe, Ubuntu:Pro:16.04:LTS: linux-azure, Ubuntu:Pro:16.04:LTS: linux-gcp, Ubuntu:Pro:16.04:LTS: linux-hwe and 255 more</p> <p>A vulnerability was recently discovered in the rpc.mountd daemon in the nfs-utils package for Linux, that allows a NFSv3 client to escalate the privileges assigned to it in the /etc/exports file at mount time. In particular, it allows the client to access any subdirectory or subtree of an exported directory, regardless of the set file permissions, and regardless of any &#39;root_squash&#39; or &#39;all_squash&#39; attributes that would normally be expected to apply to that client.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: linux, Ubuntu:Pro:14.04:LTS: linux-aws, Ubuntu:Pro:14.04:LTS: linux-azure, Ubuntu:Pro:14.04:LTS: linux-lts-xenial, Ubuntu:Pro:16.04:LTS: linux, Ubuntu:Pro:16.04:LTS: linux-aws, Ubuntu:Pro:16.04:LTS: linux-aws-hwe, Ubuntu:Pro:16.04:LTS: linux-azure, Ubuntu:Pro:16.04:LTS: linux-gcp, Ubuntu:Pro:16.04:LTS: linux-hwe and 255 more</p> <p>A vulnerability was recently discovered in the rpc.mountd daemon in the nfs-utils package for Linux, that allows a NFSv3 client to escalate the privileges assigned to it in the /etc/exports file at mount time. In particular, it allows the client to access any subdirectory or subtree of an exported directory, regardless of the set file permissions, and regardless of any &#39;root_squash&#39; or &#39;all_squash&#39; attributes that would normally be expected to apply to that client.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-12801 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0615 <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um Informationen offenzulegen.</p> <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0615