https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 00:29:20 +0000 https://cve.radiocsirt.org/vuln/cve-2026-6369 <p><strong>Affected:</strong> canonical-livepatch</p> <p>An improper access control vulnerability in the canonical-livepatch snap client prior to version 10.15.0 allows a local unprivileged user to obtain a sensitive, root-level authentication token by sending an unauthenticated request to the livepatchd.sock Unix domain socket. This vulnerability is exploitable on systems where an administrator has already enabled the Livepatch client with a valid Ubuntu Pro subscription. This token allows an attacker to access Livepatch services using the victim&#39;s credentials, as well as potentially cause issues to the Livepatch server.</p> <p><strong>Affected:</strong> canonical-livepatch</p> <p>An improper access control vulnerability in the canonical-livepatch snap client prior to version 10.15.0 allows a local unprivileged user to obtain a sensitive, root-level authentication token by sending an unauthenticated request to the livepatchd.sock Unix domain socket. This vulnerability is exploitable on systems where an administrator has already enabled the Livepatch client with a valid Ubuntu Pro subscription. This token allows an attacker to access Livepatch services using the victim&#39;s credentials, as well as potentially cause issues to the Livepatch server.</p> https://cve.radiocsirt.org/vuln/cve-2026-6369