Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The PAM module pam_cap.so of libcap configuration supports group names starting with “@”, during actual parsing, configurations not starting with “@” are incorrectly recognized as group names. This may result in nonintended users being granted an inherited capability set, potentially leading to security risks. Attackers can exploit this vulnerability to achieve local privilege escalation on systems where /etc/security/capability.conf is used to configure user inherited privileges by constructing specific usernames.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-03-23 | 1 | Patch1 |
| 2026-04-15 | 1 | Disclosure1 |
🔐 Critical security update for the #Ubuntu community! USN-8114-1 addresses CVE-2025-1390, a privilege escalation flaw in the gvfs package. Read more: 👉 https://tinyurl.com/mupkdd5p #Security https://t.co/KFB1GCuQut
Post summary
Ubuntu issues a critical patch for CVE‑2025‑1390, a privilege‑escalation flaw in gvfs.
🔒 #CyberSecurity CVE-2025-1390: Schneider Electric Modicon M241, M251, M262 DoS Vulnerability — … "CISA has released ICSA-26-078-01, detailing a significant vulnerability (CVE-2025-1390)…" 🔗 https://securityarsenal.com/blog/cve-2025-1390-schneider-electric-modicon-m241-m251-m262-dos-vulnerability-detection-and-hardening-guide #CyberSecurity #ThreatIntel #soc #threatintel #managedsoc
Post summary
The tweet announces CVE‑2025‑1390—a DoS vulnerability in Schneider Electric Modicon devices—while referencing a CISA KEV advisory, but it offers no PoC, exploit, patch, or detailed technical information.