CVE Catalog

CVE-2026-78237

HighCVSS 7.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.13%

2th percentile - higher than 2% of all known CVEs

Summary

Insufficient input validation in ABR allows a low-privileged user to inject malicious entries into the sudoers file, resulting in persistent root access that remained effective after the ABR session ended.

Risk Assessment

Risk of persistent unauthorized root access, potentially leading to full system compromise and integrity violation.

Recommendation

Apply the vendor patch that strengthens input validation in ABR and prevents injection of entries into the sudoers file.

Other vulnerabilities in ABR

Original NVD description (English source)

Insufficient input validation in ABR allows a low-privileged user to inject malicious entries into the sudoers file, resulting in persistent root access that remained effective after the ABR session ended.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS