Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 23:56:17 +0000 CVE-2024-28139 — Privilege escalation through sudo misconfiguration https://cve.radiocsirt.org/vuln/cve-2024-28139 <p><strong>Affected:</strong> Image Access GmbH Scan2Net</p> <p>The www-data user can elevate its privileges because sudo is configured to allow the execution of the mount command as root without a password. Therefore, the privileges can be escalated to the root user. The risk has been accepted by the vendor and won&#39;t be fixed in the near future.</p> <p><strong>Affected:</strong> Image Access GmbH Scan2Net</p> <p>The www-data user can elevate its privileges because sudo is configured to allow the execution of the mount command as root without a password. Therefore, the privileges can be escalated to the root user. The risk has been accepted by the vendor and won&#39;t be fixed in the near future.</p> https://cve.radiocsirt.org/vuln/cve-2024-28139