HIGHVulnerability
Verified
Global

NVD HIGH: CVE-2026-82457 — su-exec through 0.3 fails to validate numeric user and group identifiers parsed ...

·Source: NIST NVD

Updated:

Executive Summary

su-exec through 0.3 fails to validate numeric user and group identifiers parsed with strtol before assigning to uid_t and gid_t, allowing truncation of out-of-range values to zero. Attackers can supply large numeric identifiers that truncate to root's identifier, causing su-exec to execute target programs with root privileges instead of intended unprivileged accounts.

Analysis

su-exec through 0.3 fails to validate numeric user and group identifiers parsed with strtol before assigning to uid_t and gid_t, allowing truncation of out-of-range values to zero. Attackers can supply large numeric identifiers that truncate to root's identifier, causing su-exec to execute target programs with root privileges instead of intended unprivileged accounts. CVSS Score: 7.8. Published: 2026-08-29T14:16:38.910.

Indicators of Compromise (1)

CVE (1)
CVE-2026-82457
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Aug 29, 2026. Verified by: NIST.

Related Threats

CRITICALVulnerability

NVD CRITICAL: CVE-2026-82593 — A flaw has been found in D-Link DIR-825M 1.1.8. This impacts the function sub_41...

A flaw has been found in D-Link DIR-825M 1.1.8. This impacts the function sub_41802C of the file /boafrm/formLtefotaUpgradeFibocom of the component LTE Module Firmware Upgrade. This manipulation of the argument fota_url causes stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been published and may be used.

CVE-2026-82593
NIST NVD
MEDIUMVulnerability

South Korea's Shinhan signs for Visa stablecoin platform

South Korean conglomerate Shinhan Financial Group has signed a memorandum of understanding with Visa to use the American firm's new stablecoin platform and explore AI-based payment models.

Finextra
CRITICALVulnerability

NVD CRITICAL: CVE-2026-82592 — A vulnerability was detected in D-Link DIR-825M 1.1.8. This affects the function...

A vulnerability was detected in D-Link DIR-825M 1.1.8. This affects the function sub_46725C of the file /boafrm/formDiskFormat of the component Disk Formatting Handler Endpoint. The manipulation of the argument partition results in stack-based buffer overflow. The attack can be executed remotely. The exploit is now public and may be used.

CVE-2026-82592
NIST NVD