HIGHVulnerability
Verified
Global

CISA KEV: Red Hat Automatic Bug Reporting Tool — Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability

·Source: CISA KEV

Updated:

Executive Summary

Red Hat Automatic Bug Reporting Tool (ABRT) contains a privilege escalation vulnerability that could allow local users with certain permissions to gain privileges via a symlink attack on a file with a predictable name. The impacted product(s) could be end-of-life (EoL) and/or end-of-service (EoS). Users are advised to discontinue use and/or transition to a supported version.

Analysis

Red Hat Automatic Bug Reporting Tool (ABRT) contains a privilege escalation vulnerability that could allow local users with certain permissions to gain privileges via a symlink attack on a file with a predictable name. The impacted product(s) could be end-of-life (EoL) and/or end-of-service (EoS). Users are advised to discontinue use and/or transition to a supported version. Added to CISA Known Exploited Vulnerabilities catalog on 2026-08-26. Remediation due: 2026-09-09.

Indicators of Compromise (1)

CVE (1)
CVE-2015-5287
NVDMITRE CVE
Source Attribution

Originally published by CISA KEV on Aug 26, 2026. Verified by: CISA.

Related Threats

LOWVulnerability

The Fine Art of Frustrating the Adversary

What really frustrates an adversary? Eight Cisco Talos researchers share practical ways to make their next move slower and riskier. From deception and behavioral detection to breaking attack dependencies and resisting manufactured urgency.

Cisco Talos
MEDIUMVulnerability

Agents Pick Dependencies, DoWI 8430.01 Holds You Accountable

<div class="hs-featured-image-wrapper"> <a href="https://www.sonatype.com/blog/your-agents-are-choosing-dependencies.-dowi-8430.01-says-you-own-the-result" title="" class="hs-featured-image-link"> <img src="https://www.sonatype.com/hubfs/Fed%20-%20Policy.png" alt="Image with hexagon shape at center containing a checkbox icon. The hexagon is surrounded by checkmarks throughout the image" class="hs-

Sonatype (Maven/npm)
MEDIUMVulnerability

Hackers stole Pentagon personnel records of over 3 million people

The Pentagon's Defense Manpower Data Center (DMDC) is notifying millions of military service members that hackers stole their data after breaching the Pentagon's human resources management system in October 2025. [...]

BleepingComputer