Exploit discussion active in current signal (1 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the mailer, is not a fatal error and can lead to privilege escalation.
Priority
MEDIUM
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 3 products
| Date | Total | Labels |
|---|
| 2026-04-03 | 2 | Disclosure1General1 |
| 2026-04-06 | 1 | Disclosure1 |
| 2026-04-25 | 2 | Patch1PoC1 |
| 2026-04-26 | 1 | General1 |
| 2026-05-03 | 1 | Patch1 |
SIOSセキュリティブログを更新しました。 sudoの脆弱性(High: CVE-2026-35535) #sios_tech #security #vulnerability #セキュリティ #脆弱性 #sudo https://security.sios.jp/vulnerability/sudo-security-vulnerability-20260407/
Post summary
The post announces the discovery of a high‑severity CVE‑2026-35535 affecting sudo, without providing further technical details, PoC, or mitigation information.
#Fedora just patched sudo (CVE-2026-35535). You updated. Great. Now learn how that patch works -> https://tinyurl.com/48jmxp7m https://t.co/m5kUDG3oNs
Post summary
The tweet announces that Fedora has patched sudo for CVE-2026-35535 and includes a link for readers to review how the patch addresses the issue.
A sudo vulnerability (CVE-2026-35535) could let any local user gain root on Rocky Linux. Here's how to check, patch, and automate updates: Read more -> https://tinyurl.com/2kd8ztbp #Security https://t.co/DLuGKrRLmk
Post summary
The tweet highlights the sudo local privilege escalation vulnerability CVE-2026-35535 on Rocky Linux and directs readers to resources for checking and applying patches, with no PoC, exploit, or active exploitation claims.
Top 5 Trending CVEs: 1 - CVE-2014-6271 2 - CVE-2026-35535 3 - CVE-2024-7399 4 - CVE-2025-29635 5 - CVE-2026-0628 #cve #cvetrends #cveshield #cybersecurity https://www.cveshield.com/dashboard
Post summary
The tweet simply lists five trending CVEs with a link to a dashboard, offering no further technical details, exploits, or remediation information.
How to check CVE-2026-35535 on Fedora: $ sudo -u '#-1' id If it prints uid=0(root) → VULNERABLE. Update sudo to 1.9.17-8.p2.fc44 or use the iptables block. Read more-> https://tinyurl.com/bbfzmmph https://t.co/YwreJ7elam
Post summary
The post describes a method to verify CVE-2026-35535 on Fedora by running a sudo command that triggers privilege escalation, and offers mitigation steps via an updated sudo package or iptables block.
CVE-2026-35535 In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the mailer, is not a fatal error and… https://www.cve.org/CVERecord?id=CVE-2026-35535
Post summary
The post references CVE-2026-35535, detailing a non-fatal failure of setuid/setgid/setgroups during privilege drop in sudo, with a link to the CVE record.
⚡ New CVE Alert: CVE-2026-35535 📊 Severity: 7.4 🚨 Risk Level: High 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-35535 #CVE-2026-35535 #CVE #High #CyberSecurity #InfoSec https://t.co/C6NLZ4sa02
Post summary
The tweet announces CVE-2026-35535 with a 7.4 severity score and high risk level but offers no further technical details, exploitation evidence, or remediation information.
6 of 6 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | siemens | ruggedcom_rst2428p | - | - | - |
| OS | siemens | sinec_os | - | - | - |
| App | sudo_project | sudo | - | - | - |
| App | sudo_project | sudo | 1.9.17 | - | - |
| App | sudo_project | sudo | 1.9.17 | - | - |
| App | sudo_project | sudo | 1.9.17 | - | - |