sudo

Search everything

Mentions · 7d0
Mentions · 30d1
All mentions8
First seenSep 8, 2026
Last mentioned26d ago

Timeline

8 articles · newest first

Hackers Use AI-Generated Scripts to Hijack Linux Sudo Commands and Steal Passwords

Unit 42 says CL-UNK-1211 used AI-assisted scripts to steal Linux sudo passwords from government targets.

Cyber Security NewsOct 16, 13:23 UTC · 26d agoThreat actorExploitedCVE-2025-551828

USN-8895-1: Sudo vulnerability

Ubuntu says Sudo time rules can be bypassed via TZ when timestamps omit a timezone.

Ubuntu Security NoticesOct 7, 13:12 UTC · Oct 7, 2026Advisory4 · 2 reads

Sudo Security Vulnerability Lets Attackers Escalate Privileges

A Sudo flaw, CVE-2026-96512, lets local users bypass time-based sudoers rules via a crafted TZ variable.

Cyber Security NewsSep 25, 09:29 UTC · Sep 25, 2026VulnerabilityCVE-2026-965123 · 1 read

Sudo Vulnerability Lets Attackers Bypass Time-Based Authorization Controls

CVE-2026-96512 lets local users skew Sudo time-based authorization windows via the TZ variable.

GBHackersSep 25, 07:26 UTC · Sep 25, 2026VulnerabilityCVE-2026-965125 · 2 reads

CVE-2026-96512: sudo: TZ still affects NOTBEFORE/NOTAFTER

Sudo CVE-2026-96512 lets a local user shift sudoers time windows by abusing TZ.

oss-securitySep 24, 16:28 UTC · Sep 24, 2026VulnerabilityCVE-2026-965123 · 3 reads

USN-8803-1: Sudo vulnerability

Ubuntu warned Sudo can skip intercept checks, letting local users bypass policy and logging.

Ubuntu Security NoticesSep 22, 14:15 UTC · Sep 22, 2026Advisory2 · 1 read

sudo and OpenDoas timestamp files (2020)

A 2020 write-up demonstrates reusing sudo timestamp files across SSH sessions for passwordless sudo, fixed via session-leader start times.

Lobsters · securitySep 18, 19:36 UTC · Sep 18, 2026Research1 · 1 read

August 2026 CVE Landscape

Insikt Group catalogs 73 high-impact August 2026 CVEs (43 Very Critical), including PaperCut, Zimbra, and Metabase flaws actively exploited or weaponized.

Recorded FutureSep 8, 00:00 UTC · Sep 8, 2026VulnerabilityExploitedCVE-2025-62593 CVE-2026-72898 CVE-2026-9198+45 · 2 reads

Related CVEs

by mentions

CVE-2026-96512<1%7.8
Time-window bypass via TZ manipulation in sudo NOTBEFORE/NOTAFTER rules
published Sep 23, 2026Sudo project (Todd M. Miller) sudoPoC ×2
CVE-2025-55182100%10.0
Unauthenticated RCE in React Server Components (React2Shell)
published Dec 3, 2025Meta (Facebook) React Server Components (react-server-dom-parcel, react-server-dom-turbopack, react-server-dom-webpack)KEVRansomwarePoC ×14
CVE-2026-7289898%10.0
Unauthenticated SQL Injection in Metabase Grants Admin Access
published Aug 10, 2026MetabaseKEVPoC ×3
CVE-2026-919829%9.8
Unauthenticated RCE Chain in IBM Langflow OSS 1.0.0-1.10.0
published Jul 17, 2026IBM Langflow OSSKEVPoC
CVE-2026-8207863%9.4
Unsafe Reflection RCE in PaperCut NG/MF, Chained with Auth Bypass in Attacks
published Aug 28, 2026PaperCut NGKEV
CVE-2025-6259360%9.4
Actively Exploited Browser-Based RCE in Ray AI Compute Engine
published Nov 26, 2025Ray-Project (Anyscale) RayKEVPoC
CVE-2026-8157885%8.8
Missing Authentication for Critical Function in PaperCut NG/MF Web Interface
published Aug 28, 2026PaperCut MFKEV
CVE-2026-598002%9.2
9Router before 0.4.44 contains an OS command injection vulnerability in the unauthenticated POST /api/tunnel/tailscale-install endpoint (this route is not…
published Jul 7, 2026
CVE-2026-33954%5.5
A flaw has been found in MaxSite CMS up to 109.1
published Mar 1, 2026max-3000 maxsite cms

Appears with

Canonicalorganization · 2
Red Hatorganization · 2
Canonicalvendor · 2
OpenBSDorganization · 1
Palo Alto Networksorganization · 1
Red Hat Libuserproduct · 1
Recorded Futurevendor · 1
CISAorganization · 1
Metabaseproduct · 1
CL-UNK-1211threat actor · 1
IBM Langflowproduct · 1
Zimbravendor · 1
Ubuntuproduct · 1
PaperCut NG/MFproduct · 1
Palo Alto Networksvendor · 1
Linuxproduct · 1

Entities are extracted by the model from each article. First seen Sep 8, 2026, last mentioned 26d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.