HIGHVulnerability
Verified
Global

NVD HIGH: CVE-2026-82474 — Sudo through 1.9.17p2 fails to apply intercept policy checks to the execveat sys...

·Source: NIST NVD

Updated:

Executive Summary

Sudo through 1.9.17p2 fails to apply intercept policy checks to the execveat system call in ptrace-based intercept mode. Users permitted to run specific commands can execute denied programs by calling execveat directly or through fexecve, bypassing policy enforcement and logging.

Analysis

Sudo through 1.9.17p2 fails to apply intercept policy checks to the execveat system call in ptrace-based intercept mode. Users permitted to run specific commands can execute denied programs by calling execveat directly or through fexecve, bypassing policy enforcement and logging. CVSS Score: 7.8. Published: 2026-08-29T17:17:59.910.

Indicators of Compromise (1)

CVE (1)
CVE-2026-82474
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Aug 29, 2026. Verified by: NIST.

Related Threats

CRITICALVulnerability

NVD CRITICAL: CVE-2026-82593 — A flaw has been found in D-Link DIR-825M 1.1.8. This impacts the function sub_41...

A flaw has been found in D-Link DIR-825M 1.1.8. This impacts the function sub_41802C of the file /boafrm/formLtefotaUpgradeFibocom of the component LTE Module Firmware Upgrade. This manipulation of the argument fota_url causes stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been published and may be used.

CVE-2026-82593
NIST NVD
MEDIUMVulnerability

South Korea's Shinhan signs for Visa stablecoin platform

South Korean conglomerate Shinhan Financial Group has signed a memorandum of understanding with Visa to use the American firm's new stablecoin platform and explore AI-based payment models.

Finextra
CRITICALVulnerability

NVD CRITICAL: CVE-2026-82592 — A vulnerability was detected in D-Link DIR-825M 1.1.8. This affects the function...

A vulnerability was detected in D-Link DIR-825M 1.1.8. This affects the function sub_46725C of the file /boafrm/formDiskFormat of the component Disk Formatting Handler Endpoint. The manipulation of the argument partition results in stack-based buffer overflow. The attack can be executed remotely. The exploit is now public and may be used.

CVE-2026-82592
NIST NVD