One LiteSpeed Hosting Account Could Escape CageFS and Reach Root
A critical LiteSpeed Enterprise flaw can let a low-privilege website user cross a shared server's account boundary, bypass CageFS and potentially gain root access.
Privilege Escalation
One Failed Login Could Hand Attackers Full Control of 389 Directory Server
Red Hat says a failed SASL PLAIN login can leave a privileged identity behind in 389 Directory Server. A second anonymous bind on the same connection may inherit full Directory Manager control without valid credentials.
One Hosting Account Could Become Root on the Entire cPanel Server
A hosting customer did not need WHM administrator access to reach the server's highest privilege. cPanel says its EmailTrack flaw could lead to code execution as root.
Two Windows Flaws Were Already Under Attack When Microsoft’s 974-CVE Patch Tuesday Landed
Microsoft has confirmed exploitation of two Windows privilege-escalation vulnerabilities. One can break out of an AppContainer on older Windows systems; the other affects the Update Stack on current Windows releases. Together, they turn partial access into a race for SYSTEM.
A PoC Turned Avast’s Malware Sandbox Into a Route to SYSTEM
A public PoC claims Avast’s malware sandbox can become a route to Windows SYSTEM. Gen Digital says the privilege-escalation flaw has been fixed.
CrowdStrike’s Own Clean-Up Feature Could Hand an Attacker SYSTEM
FalconFlank turns CrowdStrike Falcon’s Office macro clean-up into a path from a low-privilege Windows account to SYSTEM. The public PoC has been independently reproduced.
The Security Product Became the Privilege-Escalation Primitive
HardBreacher turns a trusted Kaspersky endpoint-security component into a privilege-escalation primitive. Kaspersky says the issue is fixed.
Artifactory’s Default Configuration Could Give an Unauthenticated Attacker Admin Access.
JFrog fixed a critical Artifactory authentication bypass that can grant administrative privileges without credentials under the default configuration.
Active Directory Saw Two Different Names. Kerberos Saw the Same Identity.
KerberLoss can disrupt Kerberos services. ResetNightmare can turn a directory write permission into a privileged password reset and domain takeover.
A Local IPv6 Packet Became a Route From an Unprivileged Container to the Linux Host.
CISA confirms active exploitation of Linux kernel CVE-2026-53362. A public IPv6 fragmentation exploit can turn local access into root and, under specific conditions, escape an unprivileged container.