CISA Sounds Alarm on Critical Sudo Flaw Actively Exploited in Linux and Unix Systems
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2021-21311 | Server-Side Request Forgery in Adminer Database Management Tool (CVE-2021-21311) | 7.2 | 98% | KEVPoC | KEV |
| CVE-2025-10035 | Deserialization Flaw in Fortra GoAnywhere MFT License Servlet Enables RCE | 9.8 | 100% | KEVRansomwarePoC | KEV |
| CVE-2025-20352 | SNMP Stack Buffer Overflow in Cisco IOS and IOS XE Enables DoS and Root RCE | 7.7 | 42% | KEV | KEV |
| CVE-2025-32463 | Local Privilege Escalation to Root in Sudo via Untrusted nsswitch.conf with --chroot | 7.8 | 55% | KEVPoC ×3 | KEV |
| CVE-2025-59689 | Command Injection in Libraesva Email Security Gateway Exploited in the Wild | 6.1 | 2% | KEV | KEV |
From the original article
2 min read at thehackernews.com
The U. S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a critical security flaw impacting the Sudo command-line utility for Linux and Unix-like operating systems to its Known Exploited Vulnerabilities ( KEV ) catalog, citing evidence of active exploitation in the wild.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.