{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/pardus-about--1.2.5/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:pardus:pardus_about:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.8,"id":"CVE-2026-87772"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["pardus-about (\u003c 1.2.5)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["Pardus"],"content_html":"\u003cp\u003eCVE-2026-87772 is a local privilege escalation vulnerability in the Pardus About utility. The vulnerability allows an unprivileged user with an active local desktop session to execute a root-privileged helper without authentication. This helper mounts attached partitions using insecure defaults that fail to set the nosuid flag, enabling the execution of setuid-root binaries.\u003c/p\u003e\n\u003ch2 id=\"attack-chain\"\u003eAttack Chain\u003c/h2\u003e\n\u003col\u003e\n\u003cli\u003eAn unprivileged user with an active desktop session triggers a root helper via Polkit without authentication.\u003c/li\u003e\n\u003cli\u003eThe helper mounts a partition controlled by the user with insecure options.\u003c/li\u003e\n\u003cli\u003eThe user executes a setuid-root binary from the mounted partition to gain root privileges.\u003c/li\u003e\n\u003c/ol\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows an unprivileged local user to obtain root-level control over the target system.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cp\u003eUpgrade the Pardus About utility to version 1.2.5 or later. Alternatively, modify the Polkit policy for the affected action to require administrative authentication.\u003c/p\u003e\n","date_modified":"2026-11-12T09:29:33Z","date_published":"2026-11-12T09:29:33Z","id":"https://feed.craftedsignal.io/briefs/2026-11-pardus-priv-esc-cve-2026-87772/","summary":"The Pardus About utility contains a local privilege escalation vulnerability that allows unprivileged users to execute setuid-root binaries by leveraging improper Polkit authorization and unsafe mount options.","title":"Pardus About: Local privilege escalation (CVE-2026-87772)","url":"https://feed.craftedsignal.io/briefs/2026-11-pardus-priv-esc-cve-2026-87772/"}],"language":"en","title":"CraftedSignal Threat Feed - Pardus-About (\u003c 1.2.5)","version":"https://jsonfeed.org/version/1.1"}