CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Ivanti Connect Secure Local Privilege Escalation Vulnerability (CVE-2026-111357)
[Affected Scope] Ivanti Connect Secure 22.8R2.4 and prior versions.
[Impact] Local attackers can manipulate DSCache configuration to gain root privileges and full system control.
[Mitigation] Apply the latest security patches from Ivanti and run the Integrity Checker Tool (ICT).
Langflow exec_globals Parameter Validation Flaw Leading to Unauthenticated Remote Code Execution (CVE-2026-0770)
[Affected Scope] Active deployments of Langflow utilizing the validate API endpoint.
[Impact] Unauthenticated remote attackers can execute arbitrary code with root privileges by exploiting untrusted resource inclusion.
[Mitigation] Immediately upgrade Langflow to the latest patched version and restrict external access to the validation endpoint.
Sudo Local Privilege Escalation Vulnerability (CVE-2025-32463) Security Advisory
[Affected Scope] All systems running Sudo versions prior to 1.9.17p1
[Impact] A local attacker can exploit the '--chroot' option to force Sudo to load a user-controlled nsswitch.conf file, leading to full root privilege escalation
[Mitigation] Immediately upgrade Sudo to version 1.9.17p1 or later, or restrict the use of the chroot option via sudoers configuration