Known Vulnerabilities for Su-exec by Ncopa
Listed below are 10 of the newest known vulnerabilities associated with "Su-exec" by "Ncopa".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-82457 json | su-exec through 0.3 fails to validate numeric user and group identifiers parsed with strtol before assigning to uid_t and gid... | Not Provided | 2026-08-29 | 2026-08-29 |
| CVE-2026-82278 json | BISHENG before 2.6.0 contains a remote code execution vulnerability in the workflow run_once endpoint that allows authenticat... | Not Provided | 2026-08-28 | 2026-08-28 |
| CVE-2026-81735 json | startServer.ts in the mcp-http-server package of UI-TARS-desktop defaulted its listen address to '::' when no host was given,... | Not Provided | 2026-08-27 | 2026-08-27 |
| CVE-2026-80713 json | In the Linux kernel, the following vulnerability has been resolved: io_uring: preserve task restrictions across exec Per-ta... | Not Provided | 2026-08-28 | 2026-08-29 |
| CVE-2026-76836 json | AzuraCast exposes the Liquidsoap custom configuration fields through an endpoint that does not require the permission guardin... | Not Provided | 2026-08-24 | 2026-08-24 |
| CVE-2026-76761 json | A vulnerability was identified in chenhg5 cc-connect up to 1.4.1. This affects the function shellExecCommand of the file core... | Not Provided | 2026-08-19 | 2026-08-20 |
| CVE-2026-76760 json | A vulnerability was found in chenhg5 cc-connect up to 1.4.1. Affected by this vulnerability is the function Authenticate of t... | Not Provided | 2026-08-19 | 2026-08-20 |
| CVE-2026-76060 json | An authenticated OS command injection vulnerability exists in ZoneMinder's event export functionality. The exportFile HTTP re... | Not Provided | 2026-08-28 | 2026-08-28 |
| CVE-2026-75926 json | Hugo 0.161.0 placed the Node asset pipelines behind the Node.js permission model so that code running through PostCSS, Babel,... | Not Provided | 2026-08-18 | 2026-08-20 |
| CVE-2026-75486 json | Synk Sweater Comb before 3.8.8 contains a command injection vulnerability that allows an attacker who controls the .vervet.ya... | Not Provided | 2026-08-28 | 2026-08-28 |