https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 16:21:08 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-04600 bdu:2026-04600 https://cve.radiocsirt.org/vuln/bdu:2026-04600 https://cve.radiocsirt.org/vuln/euvd-2026-280243 EUVD-2026-280243 https://cve.radiocsirt.org/vuln/euvd-2026-280243 https://cve.radiocsirt.org/vuln/fkie_cve-2026-34397 <p>Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. From versions 2.0.0-alpha to before 2.3.9 and 3.0.0-alpha to before 3.1.1, there is a conditional local privilege escalation vulnerability in an edge-case naming collision. Only authenticated himmelblau users whose mapped CN/short name exactly matches a privileged local group name (e.g., &#34;sudo&#34;, &#34;wheel&#34;, &#34;docker&#34;, &#34;adm&#34;) can cause the NSS module to resolve that group name to their fake primary group. If the system uses NSS results for group-based authorization decisions (sudo, polkit, etc.), this can grant the attacker the privileges of that group. This issue has been patched in versions 2.3.9 and 3.1.1.</p> <p>Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. From versions 2.0.0-alpha to before 2.3.9 and 3.0.0-alpha to before 3.1.1, there is a conditional local privilege escalation vulnerability in an edge-case naming collision. Only authenticated himmelblau users whose mapped CN/short name exactly matches a privileged local group name (e.g., &#34;sudo&#34;, &#34;wheel&#34;, &#34;docker&#34;, &#34;adm&#34;) can cause the NSS module to resolve that group name to their fake primary group. If the system uses NSS results for group-based authorization decisions (sudo, polkit, etc.), this can grant the attacker the privileges of that group. This issue has been patched in versions 2.3.9 and 3.1.1.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-34397