CVE-2026-104018
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk49th percentile - higher than 49% of all known CVEs
Summary
An improper privilege management vulnerability (CWE-269) exists in the command shell of Wind River VxWorks 7 when configured to enforce per-user command privileges. Under certain shell operations, a command may be evaluated without the normally applied privilege check, allowing an authenticated user with limited privileges to execute commands they are not authorized to run. The issue affects all versions of VxWorks 7 prior to 26.09 and has been fixed in 26.09.
Risk Assessment
Successful exploitation results in privilege escalation and impacts the confidentiality, integrity, and availability of the affected device. In multi-user environments it may allow an attacker to take control of the device.
Recommendation
Upgrade VxWorks 7 to version 26.09 or later. Until patched, restrict shell access and grant privileges only to trusted users.
Other vulnerabilities in Wind River VxWorks 7
See all- CVE-2026-102006Medium
In Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in the process management subsystem failing to properly release allocated kernel memory before terminating the calling application. Fixed in Version 26.09.
- CVE-2026-102005Medium
In Wind River VxWorks 7 versions 24.03 through 26.03, a memory leak occurs under specific non-default configurations when processing certain service routines, causing the system to terminate operations before releasing allocated memory pools. Fixed in VxWorks 7 26.09.
- CVE-2026-102004High
In Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in memory corruption within the memory management subsystem. Fixed in Version 26.09.
- CVE-2026-97686Medium
In Wind River VxWorks 7 prior to 26.09, specific system call arguments can cause the IPNET subsystem to fail to properly release allocated kernel memory and file descriptors before terminating the calling application. Fixed in Version 26.09.
Original NVD description (English source)
An improper privilege management vulnerability (CWE-269) exists in the command shell of Wind River VxWorks 7 when configured to enforce per-user command privileges. Under certain shell operations, a command may be evaluated without the privilege check that is normally applied, allowing an authenticated user with limited privileges to execute commands they are not authorized to run. Successful exploitation can result in privilege escalation, with impact to the confidentiality, integrity, and availability of the affected device. The issue affects all versions of VxWorks 7 prior to 26.09. It has been fixed in 26.09.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS