Parallels Desktop

Mentions · 7d0
Mentions · 30d0
All mentions5
First seenSep 16, 2026
Last mentionedSep 20, 2026

Timeline

5 articles · newest first

Week in review: Cisco patches exploited email gateway 0-day, Revolut breach

Weekly roundup: Cisco patches actively exploited email gateway zero-day CVE-2026-76461, Revolut discloses breach via government-agency impersonation, plus Acronis, Parallels, Cisco ISE flaws.

Help Net SecuritySep 20, 08:00 UTC · Sep 20, 2026IndustryExploitedCVE-2026-76461 CVE-2026-87886 CVE-2026-90894+11 · 1 read

Parallels Desktop Flaw Lets Non-Admin Mac Users Gain Root, but Intel Macs Can't Install Fix

JFrog disclosed CVE-2026-90894, a 7.8-rated local privilege escalation in Parallels Desktop for Mac, patched only in version 27, which Intel Macs cannot install.

The Hacker NewsSep 16, 13:14 UTC · Sep 16, 2026VulnerabilityCVE-2026-9089411 · 5 reads

Parallels Desktop flaw hands any local user root on a Mac (CVE-2026-90894)

CVE-2026-90894 in Parallels Desktop for Mac lets any local user gain root via argument injection; patched in v27.0.0, PoC withheld.

Help Net SecuritySep 16, 12:36 UTC · Sep 16, 2026VulnerabilityCVE-2026-908946 · 4 reads

Parallels Desktop Flaw Lets Unprivileged Mac Users Gain Root Access

JFrog's 'ParaShells' research details CVE-2026-90894, a Parallels Desktop local privilege escalation letting unprivileged macOS users gain root via tar argument injection.

GBHackersSep 16, 11:29 UTC · Sep 16, 2026VulnerabilityCVE-2026-908942 · 1 read

Parallels Desktop Vulnerability Lets Non-Admin Mac Users Execute Code as Root

JFrog researchers disclosed CVE-2026-90894, a critical Parallels Desktop local privilege escalation letting non-admin Mac users execute code as root; fixed in 27.0.0.

Cyber Security NewsSep 16, 09:24 UTC · Sep 16, 2026VulnerabilityCVE-2026-908942 · 1 read

Related CVEs

by mentions

CVE-2026-908947.8
Local Root Privilege Escalation in Parallels Desktop via tar Argument Injection
published Sep 14, 2026Parallels (Alludo) Parallels Desktop for Mac
CVE-2026-7646076%10.0
Unauthenticated Management Interface Bypass in Cisco ISE and ISE-PIC
published Sep 16, 2026Cisco Identity Services Engine (ISE)KEVPoC
CVE-2026-7646130%9.8
Unauthenticated SQL Injection to Root RCE in Cisco Secure Email Gateway
published Sep 14, 2026Cisco Secure Email Gateway (Cisco AsyncOS Software)KEVPoC ×3
CVE-2026-87886<1%7.8
Incorrect Default Permissions in Acronis Backup Plugin for cPanel & WHM and Plesk Enable Privilege Escalation
published Sep 17, 2026Acronis Backup plugin for cPanel & WHMKEV

Appears with

JFrogvendor · 5
Parallelsvendor · 4
JFrogorganization · 3
Applevendor · 2
Parallelsorganization · 2
Revolutvendor · 1
CISAvendor · 1
macOSproduct · 1
Revolutvictim · 1
Cisco Secure Email Gatewayproduct · 1
Cisco Identity Services Engineproduct · 1
Ciscovendor · 1
Alludovendor · 1
European Commissionorganization · 1
Parallels Desktopvendor · 1
Acronisvendor · 1

Entities are extracted by the model from each article. First seen Sep 16, 2026, last mentioned Sep 20, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.