VulnSocial

CVE-2026-26422Disclosure

LOWCVSS 8.4 · HIGH

Signal is active with 3 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

clash-verge-service-ipc before 2.3.0 has a world-reachable IPC endpoint, leading to local privilege escalation.

Back to dashboard
0.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-732

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Patch or workaround signal is available
  • 4 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 4 signals
  • Disclosure: 3 classified signals
  • Peaked at 3 mentions on most recent observed day (2026-06-07)
  • 4 total mentions across 2 days

Deep dive

Activity timeline4 mentions / 2d
01223Mentions · 2026-06-06: 1Mentions · 2026-06-07: 3Patch / Workaround · 2026-06-07: 1Technical Details · 2026-06-06: 1Technical Details · 2026-06-07: 306-0606-07
Signal classification2 categories
Disclosure
375.0%
Patch
125.0%
Referenced assets4 URLs
Classification over time
DateTotalLabels
2026-06-061
Disclosure1
2026-06-073
Disclosure2Patch1
Full discourse4 posts
  • ADK Cyber@ADKCyber
    Patch

    CVE-2026-26422 (CVSS 8.4) impacts clash-verge-service-ipc < 2.3.0 with local privilege escalation. Update to 2.3.0+ if this tool is deployed. https://nvd.nist.gov/vuln/detail/CVE-2026-26422 via NVD Recent High CVSS #CyberSecurity #InfoSec #Vulnerability #AI #MachineLearning https://t.co/m4rYypZnBV

    Post summary

    The tweet reports CVE‑2026‑26422 with a high CVSS severity, notes a local privilege escalation risk in clash‑verge‑service‑ipc before version 2.3.0, and recommends upgrading to 2.3.0+ to patch the issue.

    0000059
    87 followersView on X
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-26422 clash-verge-service-ipc before 2.3.0 has a world-reachable IPC endpoint, leading to local privilege escalation. https://www.cve.org/CVERecord?id=CVE-2026-26422 ----- Traducción: CVE-2026-26422 clash-verge-service-ipc antes de la 2.3.0 tiene un punto de … http://infoflow.cloud`

    Post summary

    A new local privilege escalation vulnerability (CVE-2026-26422) was disclosed for clash-verge-service-ipc via a world‑reachable IPC endpoint, with no PoC, exploit, patch, or active exploitation details provided.

    0000051
    79 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-26422 clash-verge-service-ipc before 2.3.0 has a world-reachable IPC endpoint, leading to local privilege escalation. https://www.cve.org/CVERecord?id=CVE-2026-26422

    Post summary

    The post announces CVE‑2026‑26422 as a world‑reachable IPC endpoint in clash‑verge‑service‑ipc prior to version 2.3.0 that allows local privilege escalation.

    00000278
    57.6K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-26422 Local Privilege Escalation via World-Reachable IPC Endpoint in Clash-Verge-Service-IPC Before 2.3.0 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-26422

    Post summary

    The text announces a Local Privilege Escalation vulnerability (CVE-2026-26422) in Clash-Verge-Service-IPC prior to version 2.3.0, without providing exploit details, patches, or evidence of active exploitation.

    0000077
    4.0K followersView on X

Explore more

Back to dashboard