Tag: root access
28 articles
Ivanti Zero-Days Exploited for Root Access
Hackers are on the loose, exploiting three Ivanti zero-day vulnerabilities to gain root access to sensitive systems - and they don't even need a login to do it. This alarming exploit chain allows attackers to run commands with full system privileges, putting organizations at serious risk.
LG Smart TVs Exposed to Local Network Takeover via WebOS Flaws
Your LG Smart TV may be vulnerable to a local network takeover due to three critical flaws in webOS, allowing hackers to gain root access without needing a PIN or your interaction. This startling exploit begins with a simple connection to the TV's pairing service on port 3001, typically used by the LG ThinQ app.
Exploit Published for AnyDesk Linux Flaw Granting Root Access
A recently discovered flaw in AnyDesk's Linux version has been exploited, allowing attackers to gain root access on vulnerable systems - and a working exploit, called AnyPwn, has even been published on GitHub. This security gap was initially downplayed by AnyDesk as a simple bug that could lead to a crash.
Citrix NetScaler Flaw Exploited for Root Access, Web Shell Deployment
Security experts have uncovered a critical Citrix NetScaler flaw, CVE-2026-88772, that's being exploited to gain root access and deploy web shells, with attackers targeting ADC and Gateway appliances worldwide. This severe vulnerability, scoring 9.5 on the CVSS scale, allows for a devastating memory overflow that bypasses authentication and hands over total control.
cPanel Flaw Lets Hosting Accounts Run Code as Root
A critical cPanel flaw gives any hosting account user unrestricted power over the server, allowing them to run code as root and take full control. This urgent vulnerability was disclosed by cPanel on September 22, along with two other significant security issues.
Parallels Desktop Flaw Exposes Macs to Root Access
A newly discovered flaw in Parallels Desktop, tracked as CVE-2026-90894, leaves Macs vulnerable to root access, allowing ordinary local accounts to run code as root. This security gap, dubbed ParaShells, was uncovered by JFrog's vulnerability team and rated 7.8 out of 10 in severity.
LiteSpeed Web Server Flaw Enables Root Access Across Shared Hosting Accounts
A critical vulnerability in LiteSpeed Web Server Enterprise could allow a low-privilege website user to gain root access on a shared-hosting server, putting all hosted sites at risk. This flaw affects versions before 6.3.7 and can bypass key security controls, including CageFS.
Linux Flaw Exposes Host to Root Access
A critical 18-year-old flaw in Linux's SCTP networking code, dubbed "SCTPhantom," has been discovered, allowing hackers to gain root access to a host; the vulnerability, tracked as CVE-2026-64564, has been present in every Linux kernel released since 2008.
Ubuntu Flaw Exposes Local Users to Root Access on Default Desktop Installs
A newly discovered security flaw, CVE-2026-8933, can give local users full root control of Ubuntu Desktop installs, posing a significant threat to default installations of Ubuntu Desktop 24.04, 25.10, and 26.04. This high-severity vulnerability highlights the importance of staying vigilant about system security.
Linux Flaw Exposes Unprivileged Users to Root Access
A newly discovered Linux flaw, CVE-2026-46242, allows ordinary users to gain root access to a machine, and even Android devices are vulnerable. This alarming vulnerability, known as Bad Epoll, can be exploited with ease, but thankfully, a working fix is now available.
Linux Kernel Flaw Exposes Local Users to Root Privilege Escalation
A newly discovered Linux Kernel flaw, CVE-2026-43503, allows local users to easily escalate their privileges to root level, putting systems at risk. This vulnerability, dubbed DirtyClone, lets attackers corrupt file-backed memory and gain unrestricted access with just a few clever steps.
Mandiant Exposes Cisco SD-WAN Zero-Day Attacks' Root Access Methods
Cisco's SD-WAN system was exploited in active attacks using a high-severity flaw, allowing hackers to create a rogue root account and take full control of targeted devices. This vulnerability, tracked as CVE-2026-20245, was triggered through a simple tenant-upload feature in the command-line interface.
CISA Warns of LiteSpeed cPanel Plugin Flaw Exploited for Root Access
A critical vulnerability in the LiteSpeed cPanel Plugin, known as CVE-2026-54420, has been flagged by CISA for its high risk of exploitation, with a CVSS score of 8.5, and federal agencies have until June 18, 2026, to apply the necessary fix. This flaw allows for privilege escalation and has been added to the Known Exploited Vulnerabilities catalog, requiring swift action to prevent potential root access attacks.
Cisco SD-WAN Vulnerability Exploited for Root Access
Cisco has warned of a critical vulnerability in its SD-WAN system that allows attackers to gain root access by sending a malicious HTTP request. This flaw, now patched, could have let hackers create or overwrite files and ultimately elevate their privileges.
Cisco Patches Critical Unified CM Flaw Exploitable for Root Access
Cisco has patched a critical flaw in its Unified Communications Manager (Unified CM) that allowed hackers to remotely gain root access - a vulnerability that could be exploited with a simple, crafted HTTP request. This security gap could have let attackers take full control of affected devices, so it's crucial that the patch is applied ASAP.
Linux Flaw Exposes Multiple Distributions to Root Privilege Escalation
A single misstep in the Linux CIFS subsystem, dating back nearly two decades, leaves multiple distributions vulnerable to a devastating root privilege escalation attack, dubbed CIFSwitch. This flaw allows attackers to exploit the kernel's keyring mechanism and gain control of modern Linux systems.
LiteSpeed Plugin Flaw Exploited to Run Scripts as Root
A critical flaw in the LiteSpeed plugin, CVE-2026-48172, is being actively exploited to give cPanel users unlimited power, allowing them to run scripts as root. This severe vulnerability, rated 10.0 on the CVSS scale, puts your online security at risk and demands immediate attention.
DirtyDecrypt Flaw Exposes Linux Systems to Root Access Risk
A newly patched Linux kernel flaw, dubbed DirtyDecrypt, has been exposed through a public proof-of-concept exploit that can grant root access to vulnerable systems. This critical vulnerability was recently patched, but a public exploit is now available, putting Linux systems at risk.
Fragnesia Exploits Linux Systems, Grants Attackers Root Access
Linux systems are under attack by Fragnesia, a malicious actor that's exploiting vulnerabilities to grant attackers root-level access - a digital equivalent of handing over the keys to the kingdom. This latest incident is a disturbing sequel to the earlier Dirty Frag episode, highlighting a growing threat to Linux users.
Social Engineering Tactics Expose Company's Vulnerability
A simple request from "the boss" was all it took for a threat actor to gain root access to a company's system, exposing a shocking vulnerability in their security - one that was exploited through a clever social engineering tactic. Human IT managers, trying to be helpful, inadvertently handed over the keys to the kingdom.
Linux Flaw Exposes Root Access Risk
A newly discovered Linux kernel flaw, nicknamed Dirty Frag, poses a serious risk of root access to major Linux distributions, allowing attackers to exploit vulnerabilities and gain control. Security researcher Hyunwoo Kim found the flaw, which can be chained with other vulnerabilities to obtain root privileges.
Linux Flaw Enables Root Access Across Major Distributions
A newly discovered Linux flaw, dubbed Dirty Frag, allows hackers to gain root access across major distributions by exploiting a chain of vulnerabilities in the kernel codebase. This unpatched local privilege escalation is a deterministic logic bug, making it a particularly potent threat.
CISA Warns of Actively Exploited Linux Root Access Bug
A nine-year-old Linux kernel bug, known as Copy Fail, is being actively exploited in the wild, allowing unprivileged users to gain root access with a simple 732-byte Python-based exploit. The Cybersecurity and Infrastructure Security Agency has added this vulnerability to its Known Exploited Vulnerabilities catalog, warning of potential security risks.
AI Uncovers Nine-Year-Old Linux Kernel Zero-Day Flaw
A shocking nine-year-old flaw in the Linux kernel, dubbed "Copy Fail," allows unprivileged users to secretly alter readable files and potentially gain root access to affected systems. This vulnerability, tracked as CVE-2026-31431, has been lurking in Linux kernels since 2017, putting countless machines at risk.