The Lix and Nix projects have jointly disclosed a set of vulnerabilities that can be used to escalate privileges to root on systems running the Lix or Nix daemons. "All systems that build untrusted derivations are affected." Releases with fixes from each project are available today. CVE IDs have not yet been requested. See the announcement for... Weiterlesen: Nix and Lix local root-privilege-escalation vulnerabilities
Intelligence View
⚡ tsecurity.de Intelligence
Nix and Lix local root-privilege-escalation vulnerabilities
The Lix and Nix projects have jointly disclosed a set of vulnerabilities that can be used to escalate privileges to root on systems running the Lix or Nix…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — free The top security news daily · unsubscribe anytime
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
No reader ratings yet
Was this page helpful?
0
Powered by tsecurity.de
tsecurity.de Hub
Related story clusters & sources (vector AI)
15 sources
CVE-2026-109701 | PAYCOMET Plugin up to 5.45 on WordPress cross site scripting (EUVD-2026-103285)
14 more sources
VVulDB Updates5 hours agoCVE-2026-109985 | wpdevteam xSpeed Cache Plugin up to 1.4.2 on WordPress content cross site scripting (EUVD-2026-103220) VVulDB Updates5 hours agoCVE-2026-109208 | ThimPress LearnPress Plugin up to 4.4.10 on WordPress Guest Checkout quantity/order_comments cross site scripting (EUVD-2026-103216) VVulDB Updates5 hours agoCVE-2026-110653 | LatePoint Appointment Booking Plugin up to 5.7.4 on WordPress verifyOTP toctou (EUVD-2026-103217) VVulDB Updates5 hours agoCVE-2026-111601 | Hippooo Hippoo Mobile App Plugin up to 1.12.0 on WordPress token_id cross site scripting (EUVD-2026-103215) VVulDB Updates5 hours agoCVE-2026-104734 | meum Kirki Plugin up to 6.3.2 on WordPress Import Endpoint deserialization (EUVD-2026-103214) VVulDB Updates7 hours agoCVE-2022-46785 | SquaredUp Dashboard Server SCOM Edition up to 5.7.0 cross site scripting (EUVD-2022-49567)
+8
13 sources
CDU-Account gehackt – E-Mail an Friedrich Merz und Tausende weitere
12 more sources
GGoogle Alert7 hours agoPhishing-Angriff auf CDU-Account! Hacker schicken Kanzler Merz eine Mail - TAG24 GGoogle Alert6 hours agoFriedrich Merz Opfer von Cyber-Angriff: Hacker nehmen Bundeskanzler ins Visier - News.de GGoogle Alert6 hours agoHacker senden über CDU-Mail-Account Nachricht an Merz | BR24 Hheise security News6 hours agoPhishing-Angriff auf Merz und viele andere: CDU-Mailkonto in Heilbronn gehackt Hheise online News6 hours agoPhishing-Angriff auf Merz und viele andere: CDU-Mailkonto in Heilbronn gehackt GGoogle Alert8 hours agoHacker brechen in CDU-Account ein und senden Mail an Merz - Finanznachrichten
+6
12 sources
CVE-2026-111918 | Vikunja up to 2.6.x RecalculateTaskPositions improper authorization (EUVD-2026-103303)
11 more sources
VVulDB Updates2 hours agoCVE-2026-111917 | go-vikunja Vikunja up to 2.6.x Session Validation /api/v2/ws handleAuth sid improper authentication (EUVD-2026-103304) VVulDB Updates2 hours agoCVE-2026-111912 | Admidio up to 5.0.15 ForumService ForumService::saveTopic topic_uuid authorization (EUVD-2026-103308) VVulDB Updates2 hours agoCVE-2026-111913 | Admidio up to 5.0.15 Pdf Export lists_show.php mode authorization (EUVD-2026-103307) VVulDB Updates2 hours agoCVE-2026-111910 | thorsten phpMyFAQ up to 4.1.8/4.2.0-alpha Attachment attachment.php improper authorization (EUVD-2026-103310) VVulDB Updates2 hours agoCVE-2026-111911 | thorsten phpMyFAQ up to 4.1.8 WebAuthn Registration improper authentication (EUVD-2026-103309) VVulDB Updates5 hours agoCVE-2026-12547 | Red Hat Enterprise Linux SoupAuthManager improper authorization (Nessus ID 366750)
+5
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/en/4272357/linux-security-tips/nix-and-lix-local-root-privilege-escalation-vulnerabilities/