https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 07:03:20 +0000 https://cve.radiocsirt.org/vuln/alsa-2026:12423 <p><strong>Affected:</strong> AlmaLinux:10: libcap, AlmaLinux:10: libcap-devel</p> <p>Libcap is a library for getting and setting POSIX.1e (formerly POSIX 6) draft 15 capabilities.</p> <p>Security Fix(es):</p> <p>* libcap: libcap: Privilege escalation via TOCTOU race condition in cap_set_file() (CVE-2026-4878)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:10: libcap, AlmaLinux:10: libcap-devel</p> <p>Libcap is a library for getting and setting POSIX.1e (formerly POSIX 6) draft 15 capabilities.</p> <p>Security Fix(es):</p> <p>* libcap: libcap: Privilege escalation via TOCTOU race condition in cap_set_file() (CVE-2026-4878)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2026:12423 https://cve.radiocsirt.org/vuln/bdu:2026-08666 bdu:2026-08666 https://cve.radiocsirt.org/vuln/bdu:2026-08666 https://cve.radiocsirt.org/vuln/bell-cve-2026-4878 <p><strong>Affected:</strong> Alpaquita:23: libcap, Alpaquita:25: libcap, Alpaquita:stream: libcap</p> <p><strong>Affected:</strong> Alpaquita:23: libcap, Alpaquita:25: libcap, Alpaquita:stream: libcap</p> https://cve.radiocsirt.org/vuln/bell-cve-2026-4878 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0435 certfr-2026-avi-0435 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0435 https://cve.radiocsirt.org/vuln/cleanstart-2026-fv86809 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: grafana-alloy</p> <p>Multiple security vulnerabilities affect the grafana-alloy package. These issues are resolved in later releases. See references for individual vulnerability details.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: grafana-alloy</p> <p>Multiple security vulnerabilities affect the grafana-alloy package. These issues are resolved in later releases. See references for individual vulnerability details.</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-fv86809 https://cve.radiocsirt.org/vuln/euvd-2026-382022 EUVD-2026-382022 https://cve.radiocsirt.org/vuln/euvd-2026-382022 https://cve.radiocsirt.org/vuln/fkie_cve-2026-4878 <p>A flaw was found in libcap. A local unprivileged user can exploit a Time-of-check-to-time-of-use (TOCTOU) race condition in the `cap_set_file()` function. This allows an attacker with write access to a parent directory to redirect file capability updates to an attacker-controlled file. By doing so, capabilities can be injected into or stripped from unintended executables, leading to privilege escalation.</p> <p>A flaw was found in libcap. A local unprivileged user can exploit a Time-of-check-to-time-of-use (TOCTOU) race condition in the `cap_set_file()` function. This allows an attacker with write access to a parent directory to redirect file capability updates to an attacker-controlled file. By doing so, capabilities can be injected into or stripped from unintended executables, leading to privilege escalation.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-4878 https://cve.radiocsirt.org/vuln/msrc_cve-2026-4878 msrc_CVE-2026-4878 https://cve.radiocsirt.org/vuln/msrc_cve-2026-4878 https://cve.radiocsirt.org/vuln/oesa-2026-1929 <p><strong>Affected:</strong> openEuler:22.03-LTS-SP4: libcap, openEuler:24.03-LTS: libcap, openEuler:24.03-LTS-SP1: libcap, openEuler:24.03-LTS-SP2: libcap, openEuler:24.03-LTS-SP3: libcap, openEuler:20.03-LTS-SP4: libcap</p> <p>This is a library for getting and setting POSIX.1e (formerly POSIX 6) draft 15 capabilities. Security Fix(es):</p> <p>A flaw was found in libcap. A local unprivileged user can exploit a Time-of-check-to-time-of-use (TOCTOU) race condition in the `cap_set_file()` function. This allows an attacker with write access to a parent directory to redirect file capability updates to an attacker-controlled file. By doing so, capabilities can be injected into or stripped from unintended executables, leading to privilege escalation.(CVE-2026-4878)</p> <p><strong>Affected:</strong> openEuler:22.03-LTS-SP4: libcap, openEuler:24.03-LTS: libcap, openEuler:24.03-LTS-SP1: libcap, openEuler:24.03-LTS-SP2: libcap, openEuler:24.03-LTS-SP3: libcap, openEuler:20.03-LTS-SP4: libcap</p> <p>This is a library for getting and setting POSIX.1e (formerly POSIX 6) draft 15 capabilities. Security Fix(es):</p> <p>A flaw was found in libcap. A local unprivileged user can exploit a Time-of-check-to-time-of-use (TOCTOU) race condition in the `cap_set_file()` function. This allows an attacker with write access to a parent directory to redirect file capability updates to an attacker-controlled file. By doing so, capabilities can be injected into or stripped from unintended executables, leading to privilege escalation.(CVE-2026-4878)</p> https://cve.radiocsirt.org/vuln/oesa-2026-1929 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10536-1 <p>libcap-devel-2.78-1.1 on GA media</p> <p>libcap-devel-2.78-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:10536-1 https://cve.radiocsirt.org/vuln/rhsa-2026:14162 <p>libcap: libcap: Privilege escalation via TOCTOU race condition in cap_set_file() systemd: systemd: Arbitrary code execution or Denial of Service via spurious IPC API call data crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages github.com/apache/thrift: Apache Thrift: Integer Overflow in TFramedTransport Go implementation</p> <p>libcap: libcap: Privilege escalation via TOCTOU race condition in cap_set_file() systemd: systemd: Arbitrary code execution or Denial of Service via spurious IPC API call data crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages github.com/apache/thrift: Apache Thrift: Integer Overflow in TFramedTransport Go implementation</p> https://cve.radiocsirt.org/vuln/rhsa-2026:14162 https://cve.radiocsirt.org/vuln/rlsa-2026:19130 <p><strong>Affected:</strong> Rocky Linux:10: libcap</p> <p>Libcap is a library for getting and setting POSIX.1e (formerly POSIX 6) draft 15 capabilities.</p> <p>Security Fix(es):</p> <p>* libcap: libcap: Privilege escalation via TOCTOU race condition in cap_set_file() (CVE-2026-4878)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> Rocky Linux:10: libcap</p> <p>Libcap is a library for getting and setting POSIX.1e (formerly POSIX 6) draft 15 capabilities.</p> <p>Security Fix(es):</p> <p>* libcap: libcap: Privilege escalation via TOCTOU race condition in cap_set_file() (CVE-2026-4878)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/rlsa-2026:19130 https://cve.radiocsirt.org/vuln/suse-su-2026:1433-1 <p>Security update for libcap</p> <p>Security update for libcap</p> https://cve.radiocsirt.org/vuln/suse-su-2026:1433-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-4878 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: libcap2, Ubuntu:Pro:16.04:LTS: libcap2, Ubuntu:Pro:18.04:LTS: libcap2, Ubuntu:Pro:20.04:LTS: libcap2, Ubuntu:22.04:LTS: libcap2, Ubuntu:24.04:LTS: libcap2, Ubuntu:25.10: libcap2</p> <p>A flaw was found in libcap. A local unprivileged user can exploit a Time-of-check-to-time-of-use (TOCTOU) race condition in the `cap_set_file()` function. This allows an attacker with write access to a parent directory to redirect file capability updates to an attacker-controlled file. By doing so, capabilities can be injected into or stripped from unintended executables, leading to privilege escalation.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: libcap2, Ubuntu:Pro:16.04:LTS: libcap2, Ubuntu:Pro:18.04:LTS: libcap2, Ubuntu:Pro:20.04:LTS: libcap2, Ubuntu:22.04:LTS: libcap2, Ubuntu:24.04:LTS: libcap2, Ubuntu:25.10: libcap2</p> <p>A flaw was found in libcap. A local unprivileged user can exploit a Time-of-check-to-time-of-use (TOCTOU) race condition in the `cap_set_file()` function. This allows an attacker with write access to a parent directory to redirect file capability updates to an attacker-controlled file. By doing so, capabilities can be injected into or stripped from unintended executables, leading to privilege escalation.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-4878 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1267 <p>Ein Angreifer kann mehrere Schwachstellen in Red Hat Hardened Images RPMs ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Rechte zu erweitern, vertrauliche Informationen offenzulegen, Daten zu manipulieren oder einen Denial-of-Service-Zustand zu verursachen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Red Hat Hardened Images RPMs ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Rechte zu erweitern, vertrauliche Informationen offenzulegen, Daten zu manipulieren oder einen Denial-of-Service-Zustand zu verursachen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1267