Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and session PAM modules, and can cause incorrect logging, by invoking sudo with a crafted user ID. For example, this allows bypass of !root configuration, and USER= logging, for a "sudo -u \#$((0xffffffff))" command.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
30 versions affected across 15 products
| Date | Total | Labels |
|---|
| 2026-01-27 | 1 | General1 |
| 2026-02-24 | 1 | General1 |
| 2026-03-13 | 1 | Exploit1 |
| 2026-04-02 | 2 | General2 |
| 2026-04-07 | 1 | General1 |
| 2026-08-19 | 1 | Disclosure1 |
| 2026-09-08 | 1 | General1 |
（解説） 特定の旧バージョンの sudo には、sudoers 設定で ALL と !root を組み合わせた場合に、-1 や 4294967295 を指定することで root 権限でコマンドを実行できてしまう脆弱性が存在していました。これは広く知られる CVE-2019-14287 に該当します。
Post summary
The text explains how older sudo versions can be abused to gain root privileges by combining ALL and !root in sudoers, identifying CVE‑2019‑14287.
In this quick lab, I gained root privileges by exploiting an outdated sudo version. To check the version of sudo, you can use the command "sudo -V." If the version is earlier than 1.8.28, you can utilize CVE-2019-14287 to gain root access with a single command. https://t.co/YCR64YVwcR
Post summary
The post briefly describes how exploiting CVE-2019-14287 in older sudo versions allows a single-command privilege escalation to root, without providing detailed exploit code or patch guidance.
[Agent Sudo] HTTP User-Agent Enumeration, Hidden Data Extraction & CVE-2019-14287 Privilege Escalation Link: https://meetcyber.net/agent-sudo-http-user-agent-enumeration-hidden-data-extraction-cve-2019-14287-privilege-f57ec13095ef #privilegeescalation #cve201914287 https://t.co/S6Z66DIDvt
Post summary
The tweet references an exploit method for CVE‑2019‑14287 involving HTTP User‑Agent enumeration and hidden data extraction, but it lacks any code, patch information, or evidence of real‑world use.
I just completed Sudo Security Bypass room on TryHackMe! A tutorial room exploring CVE-2019-14287 in the Unix Sudo Program. Room One in the SudoVulns Series https://tryhackme.com/room/sudovulnsbypass?utm_campaign=social_share&utm_medium=social&utm_content=room&utm_source=twitter&sharerId=66457951599dd28bfb000ded #tryhackme via @tryhackme #Tryhackme #Learning
Post summary
The post notes completion of a TryHackMe tutorial room focused on CVE‑2019‑14287, but provides no technical, exploit, or patch details.
I just completed Sudo Security Bypass room on TryHackMe! A tutorial room exploring CVE-2019-14287 in the Unix Sudo Program. Room One in the SudoVulns Series https://tryhackme.com/room/sudovulnsbypass?utm_campaign=social_share&utm_medium=social&utm_content=room&utm_source=twitter&sharerId=662fb6411f3680a87baf9e1f #tryhackme via @tryhackme
Post summary
The tweet announces completion of a TryHackMe tutorial room for CVE-2019-14287, offering a learning resource but providing no technical exploitation, patch, or contextual details.
I just completed Sudo Security Bypass room on TryHackMe! A tutorial room exploring CVE-2019-14287 in the Unix Sudo Program. Room One in the SudoVulns Series https://tryhackme.com/room/sudovulnsbypass?utm_campaign=social_share&utm_medium=social&utm_content=room&utm_source=twitter&sharerId=61eac99b5af18f0042650fad #tryhackme via @tryhackme
Post summary
A user posted that they completed a TryHackMe tutorial room about CVE-2019-14287, including a link to the room, but the post does not provide any PoC, exploit code, patch information, or technical vulnerability details.
Yet Another CVE analysis (CVE-2019-14287) via http://Dev.to https://flarestart.com/article/yet-another-cve-analysis-cve-2019-14287-20260223 #DevNews #Security #Tutorial https://t.co/HY2KSGRol6
Post summary
The tweet merely links to an article titled 'Yet Another CVE analysis (CVE-2019-14287)' without providing additional technical or exploit information.
I just completed Sudo Security Bypass room on TryHackMe. A tutorial room exploring CVE-2019-14287 in the Unix Sudo Program. Room One in the SudoVulns Series https://tryhackme.com/room/sudovulnsbypass?utm_campaign=social_share&utm_medium=social&utm_content=room&utm_source=twitter&sharerId=684d724b80fe1af75347f3e4 #tryhackme via @tryhackme
Post summary
The user references completing a TryHackMe tutorial room on CVE‑2019‑14287, but no PoC, exploit details, patch, or technical specifics are provided.
47 of 47 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | canonical | ubuntu_linux | 12.04 | - | - |
| OS | canonical | ubuntu_linux | 14.04 | - | - |
| OS | canonical | ubuntu_linux | 16.04 | - | - |
| OS | canonical | ubuntu_linux | 18.04 | - | - |
| OS | canonical | ubuntu_linux | 19.04 | - | - |
| OS | debian | debian_linux | 10.0 | - | - |
| OS | debian | debian_linux | 8.0 | - | - |
| OS | debian | debian_linux | 9.0 | - | - |
| OS | fedoraproject | fedora | 29 | - | - |
| OS | fedoraproject | fedora | 30 | - | - |
| OS | fedoraproject | fedora | 31 | - | - |
| App | netapp | element_software_management_node | - | - | - |
| OS | opensuse | leap | 15.0 | - | - |
| OS | opensuse | leap | 15.1 | - | - |
| OS | redhat | enterprise_linux | 8.0 | - | - |
| OS | redhat | enterprise_linux_desktop | 6.0 | - | - |
| OS | redhat | enterprise_linux_desktop | 7.0 | - | - |
| OS | redhat | enterprise_linux_eus | 7.5 | - | - |
| OS | redhat | enterprise_linux_eus | 7.6 | - | - |
| OS | redhat | enterprise_linux_eus | 7.7 | - | - |
| OS | redhat | enterprise_linux_eus | 8.1 | - | - |
| OS | redhat | enterprise_linux_eus | 8.2 | - | - |
| OS | redhat | enterprise_linux_eus | 8.4 | - | - |
| OS | redhat | enterprise_linux_server | 5.0 | - | - |
| OS | redhat | enterprise_linux_server | 6.0 | - | - |
| OS | redhat | enterprise_linux_server | 7.0 | - | - |
| OS | redhat | enterprise_linux_server_aus | 6.5 | - | - |
| OS | redhat | enterprise_linux_server_aus | 6.6 | - | - |
| OS | redhat | enterprise_linux_server_aus | 7.2 | - | - |
| OS | redhat | enterprise_linux_server_aus | 7.3 | - | - |
| OS | redhat | enterprise_linux_server_aus | 7.4 | - | - |
| OS | redhat | enterprise_linux_server_aus | 7.6 | - | - |
| OS | redhat | enterprise_linux_server_aus | 7.7 | - | - |
| OS | redhat | enterprise_linux_server_aus | 8.2 | - | - |
| OS | redhat | enterprise_linux_server_aus | 8.4 | - | - |
| OS | redhat | enterprise_linux_server_tus | 7.2 | - | - |
| OS | redhat | enterprise_linux_server_tus | 7.3 | - | - |
| OS | redhat | enterprise_linux_server_tus | 7.4 | - | - |
| OS | redhat | enterprise_linux_server_tus | 7.6 | - | - |
| OS | redhat | enterprise_linux_server_tus | 7.7 | - | - |
| OS | redhat | enterprise_linux_server_tus | 8.2 | - | - |
| OS | redhat | enterprise_linux_server_tus | 8.4 | - | - |
| OS | redhat | enterprise_linux_workstation | 6.0 | - | - |
| OS | redhat | enterprise_linux_workstation | 7.0 | - | - |
| App | redhat | openshift_container_platform | 4.1 | - | - |
| App | redhat | virtualization | 4.2 | - | - |
| App | sudo_project | sudo | - | - | - |