Tailscale warns of SSH flaws allowing root privilege escalation
Teaser from the source
The Tailscale security team is working to patch almost a dozen security vulnerabilities that could be exploited to steal credentials, crash servers, gain root privileges, and more. [...]
This is the RSS-feed teaser. Read the full article at the original source.
Read at BleepingComputerMore on escalation
Other advisories
- Not ratedosv:CVE-2026-56828Shopper: read-only team permissions allow administrator creation and permission escalation
- Not ratedosv:CVE-2026-57203Asterisk: Local privilege escalation through ast_loggrabber's world-writable helper location
- Highghsa:GHSA-3w55-933p-8pv5Strands Agents: Local Privilege Escalation via Symlink Attack in Default Session File Storage
- Not ratedosv:GHSA-3w55-933p-8pv5Strands Agents: Local Privilege Escalation via Symlink Attack in Default Session File Storage
- CriticalCVE-2026-114612LiteLLM: Privilege Escalation to Proxy Admin via Cross-Domain Reuse of the Salt Key
- CriticalCVE-2026-114612LiteLLM: Privilege Escalation to Proxy Admin via Cross-Domain Reuse of the Salt Key
- Not ratedosv:CVE-2026-117536REDAXO before 5.21.3 CSRF Token Bypass via users/users Privilege Escalation
- Not ratedosv:CVE-2026-116896REDAXO before 5.21.5 Privilege Escalation via Backup Export of Authentication Tables
Other news entries
- CISA warns of Fragnesia Linux flaw chained in PHP2Shell attacksNewsBleepingComputer
- Adobe, Veeam, Juniper Networks Patch Critical VulnerabilitiesNewsSecurityWeek
- Adobe Fixes 8 Critical Campaign Classic Flaws Allowing Code Execution and Security BypassNewsThe Hacker News
- Warp says attackers exploited a vendor in its infrastructure and accessed agent trace and telemetry dataBreachpwn.watch
- Researchers Demonstrate OpenBSD Root Exploit Chaining 37-Year-Old Shared-Memory BugNewsThe Hacker News
- Ivanti patches Connect Secure zero-day after researchers confirm in-the-wild attacksNewsThe Register — Security
- Hirudo Android Trojan Uses Patched Banking Apps to Bypass Their Built-In Security ChecksNewsThe Hacker News
- [Webinar] How to Stop AI-Driven Privilege Escalation With Runtime Identity ControlsEventThe Hacker News
ID