https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 01:56:23 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-275643 EUVD-2026-275643 https://cve.radiocsirt.org/vuln/euvd-2026-275643 https://cve.radiocsirt.org/vuln/fkie_cve-2026-31979 <p>Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. Prior to 3.1.0 and 2.3.8, the himmelblaud-tasks daemon, running as root, writes Kerberos cache files under /tmp/krb5cc_&lt;uid&gt; without symlink protections. Since commit 87a51ee, PrivateTmp is explicitly removed from the tasks daemon&#39;s systemd hardening, exposing it to the host /tmp. A local user can exploit this via symlink attacks to chown or overwrite arbitrary files, achieving local privilege escalation. This vulnerability is fixed in 3.1.0 and 2.3.8.</p> <p>Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. Prior to 3.1.0 and 2.3.8, the himmelblaud-tasks daemon, running as root, writes Kerberos cache files under /tmp/krb5cc_&lt;uid&gt; without symlink protections. Since commit 87a51ee, PrivateTmp is explicitly removed from the tasks daemon&#39;s systemd hardening, exposing it to the host /tmp. A local user can exploit this via symlink attacks to chown or overwrite arbitrary files, achieving local privilege escalation. This vulnerability is fixed in 3.1.0 and 2.3.8.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-31979