Threats tagged 'ghsa-fjrv-5j96-cvhx'

CVE-2026-104018 is an improper privilege management vulnerability in the command shell of Wind River VxWorks 7 when configured to enforce per-user command privileges. This flaw allows an authenticated user with limited privileges to execute commands without the usual privilege checks, leading to privilege escalation. The vulnerability affects all versions of VxWorks 7 prior to 26.09 and has been fixed in version 26.09. The CVSS score is 8.8, indicating a high severity impact on confidentiality, integrity, and availability.