CVE-2026-35535

HIGH

In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the mailer, is not a fatal error and can lead to privilege escalation.

CVSS v3.1 Score

7.4
HIGH
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
LOCAL
Complexity
HIGH
Privileges
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH
Published: 4/3/2026Modified: 9/1/2026

Related Intelligence (1)

CRITICALVulnerability

Siemens SINEC OS

<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-188-05.json"><strong>View CSAF</strong></a></p> <h2>Summary</h2> <p><strong>SINEC OS before V4.0 contains multiple vulnerabilities. Siemens has released a new version for RUGGEDCOM RST2428P and recommends to update to the latest version.</strong></p> <p>The following versions of Siemens SINEC OS are affected:

CVE-2025-1352CVE-2025-1376
CISA Advisories

References (34)

https://bugs.debian.org/1130593Broken Linkhttps://bugs.launchpad.net/ubuntu/+source/sudo/+bug/2143042Issue Trackinghttps://github.com/sudo-project/sudo/commit/3e474c2f201484be83d994ae10a4e20e8c81bb69Patchhttps://www.qualys.com/2026/03/10/crack-armor.txtThird Party Advisoryhttps://lists.debian.org/debian-lts-announce/2026/06/msg00003.htmlhttps://access.redhat.com/errata/RHSA-2026:10758https://access.redhat.com/errata/RHSA-2026:11521https://access.redhat.com/errata/RHSA-2026:12310https://access.redhat.com/errata/RHSA-2026:13731https://access.redhat.com/errata/RHSA-2026:13888https://access.redhat.com/errata/RHSA-2026:13889https://access.redhat.com/errata/RHSA-2026:13891https://access.redhat.com/errata/RHSA-2026:13892https://access.redhat.com/errata/RHSA-2026:13895https://access.redhat.com/errata/RHSA-2026:13896https://access.redhat.com/errata/RHSA-2026:14228https://access.redhat.com/errata/RHSA-2026:14437https://access.redhat.com/errata/RHSA-2026:19067https://access.redhat.com/errata/RHSA-2026:19220https://access.redhat.com/errata/RHSA-2026:20040https://access.redhat.com/errata/RHSA-2026:20087https://access.redhat.com/errata/RHSA-2026:21275https://access.redhat.com/errata/RHSA-2026:21656https://access.redhat.com/errata/RHSA-2026:21690https://access.redhat.com/errata/RHSA-2026:21695https://access.redhat.com/errata/RHSA-2026:23233https://access.redhat.com/errata/RHSA-2026:28887https://access.redhat.com/errata/RHSA-2026:30088https://access.redhat.com/errata/RHSA-2026:34098https://access.redhat.com/errata/RHSA-2026:58981https://access.redhat.com/security/cve/CVE-2026-35535https://bugzilla.redhat.com/show_bug.cgi?id=2454714https://cert-portal.siemens.com/productcert/html/ssa-253495.htmlThird Party Advisoryhttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-35535.json