WID-SEC-W-2026-3704

DeutschShown in its original language — a full translation is planned for a future version.

Wind River VxWorks: Schwachstelle ermöglicht Privilegieneskalation

view advisory published 2026-10-01

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Wind River VxWorks ausnutzen, um beliebigen Code auszuführen und erhöhte Berechtigungen zu erlangen.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2026-104018US	—	0.64% (50th)	—	2026-10-01
An improper privilege management vulnerability (CWE-269) exists in the command shell of Wind River VxWorks 7 when configured to enforce per-user command privileges. Under certain s…

references

External citations — patches, advisories, analysis.

GitHub Security Advisory GHSA-fjrv-5j96-cvhx vom 2026-10-01external
WindRiver Safety and Security Notices vom 2026-10-01external
WID-SEC-W-2026-3704 - CSAF Versionself
WID-SEC-2026-3704 - Portal Versionself

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan