User jails 2014 Renault Latitude navigation system to change time
Reverse engineering allowed access to the time settings menu on a TomTom Carminat LIVE unit after the SD card menu definition was missing.
Stories per day · 30 days
3 RSS
Relatedasyncos3cisco3cve-2026-765193active-exploitation2rce2secure-email-gateway20day1auerswald1cisa-kev1cloudpanel1commander1email-gateway1email-security1iot1jailbreak1lg1local-network1navigation1
18 stories, newest first · one card per story
Stories tagged #root
Cisco Urges Customers to Patch Email Gateway Flaw and Check for Compromise
Cisco says attackers are exploiting CVE-2026-76519 in Secure Email Gateway to write files and run commands as root.
3
[0day-rubbish] CloudPanel 2.5.4-3 site-settings rootDirectory nginx virtual-host injection to host root code execution (8.8)
CloudPanel 2.5.4-3 site settings can inject an nginx vhost and run code as root.
[0day-rubbish] Auerswald COMmander 6000 / 6000R 8.6D unauthenticated provisioning import zip-slip to root binary hijack and root code execution (9.8)
Unauthenticated zip-slip in Auerswald COMmander 6000 firmware 8.6D yields root code execution.
Cisco make-me-root email bug exploited as a 0-day by unknown crims
Attackers are exploiting Cisco Secure Email Gateway zero-day CVE-2026-76519 for unauthenticated root access via email.
5
Cisco Warns of Active Attacks Exploiting New Critical Secure Email Gateway Vulnerability
Cisco says attackers are exploiting critical Secure Email Gateway flaw CVE-2026-76519 to write files and gain root.
3
LG Smart TVs Vulnerable to Pre-Auth Root Takeover From Local Network
Chained webOS flaws allow local-network pre-auth root on some LG smart TVs.
Multiple cPanel & WHM Vulnerabilities Enable Root Code Execution and Admin Session Hijacking
cPanel patched a critical root command-execution flaw and two WHM stored XSS bugs across supported versions.
OnePlus 15 Flaws Let Zero-Permission Apps Gain Root Access Through OxygenOS Services
OxygenOS flaws could let zero-permission apps gain root on OnePlus and OPPO devices.
Unpatched OnePlus Flaws Let Installed Android Apps Gain Root Without Permissions
Unpatched OnePlus flaws let a no-permission Android app gain root on OxygenOS phones, with no fix released.
VU#280377: Dokploy is vulnerable to OS command injection
CERT/CC details an OS command injection in Dokploy letting authenticated users execute commands as root; patched in 0.29.13.
1
Cisco Secure Firewall Management Center Software Java Deserialization Remote Code Execution Vulnerability
Cisco fixed an unauthenticated Java deserialization RCE in FMC's External Database Access feature allowing root command execution via a TCP port.
Cisco Identity Services Engine Command Injection Vulnerabilities
Authenticated attackers with admin credentials could exploit Cisco ISE command injection flaws to execute arbitrary commands as root; fixes released.
Cisco ThousandEyes Virtual Appliance Authenticated Web Interface Command Injection Vulnerability
Cisco patched an authenticated command injection in ThousandEyes Virtual Appliance allowing arbitrary OS command execution with root privileges.
LiteSpeed Enterprise Flaw Could Let One Hosting Account Gain Root Access on a Shared Server
cPanel warns critical LiteSpeed Web Server Enterprise flaw (pre-6.3.7) lets shared-hosting account users gain root access.
cPanel EmailTrack SQL Injection Flaw Lets Attackers Execute Code as Root
cPanel disclosed CVE-2026-67401, an authenticated SQL injection in EmailTrack that lets attackers write files and execute code as root.
1
Any user process can escalate to root
A disclosed local privilege escalation flaw allows any user process to escalate to root on the affected system.
Omarchy: Any User Process Can Escalate to Root
A security write-up details how any user process on the Omarchy Linux setup can escalate privileges to root.