CVE-2026-22536CWE-269

PRIVILEGE ESCALATION VIA SUDO COMMAND

High · published January 7, 2026

CVSS v4.0
8.6
EPSS
0%
Percentile
2.5
In the wild
Unconfirmed
What it is

The absence of permissions control for the user XXX allows the current configuration in the sudoers file to escalate privileges without any restrictions

The record
Technical detail
CVSS v4.0
8.6 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00132 · 2.5th percentile
Weakness
CWE-269 · Improper Privilege Management
Published
2026-01-07T16:47Z
EPSS history
Timeline
  • 07 JAN 16:47Z
    PRIVILEGE ESCALATION VIA SUDO COMMAND
    cvelistv5