Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A flaw was found in libcap. A local unprivileged user can exploit a Time-of-check-to-time-of-use (TOCTOU) race condition in the `cap_set_file()` function. This allows an attacker with write access to a parent directory to redirect file capability updates to an attacker-controlled file. By doing so, capabilities can be injected into or stripped from unintended executables, leading to privilege escalation.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
5 versions affected across 3 products
| Date | Total | Labels |
|---|
| 2026-04-07 | 1 | Disclosure1 |
| 2026-04-09 | 1 | Disclosure1 |
| 2026-07-25 | 1 | Patch1 |
| 2026-08-02 | 1 | Patch1 |
| 2026-08-09 | 1 | Patch1 |
CVE-2026-4878: libcap-2.77 (since libcap-2.04) has TOCTOU privilege escalation issue https://www.openwall.com/lists/oss-security/2026/04/07/4
Post summary
CVE-2026-4878 is a TOCTOU privilege escalation vulnerability affecting libcap-2.77 (and earlier). The post announces the issue but provides no PoC, exploit, patch or evidence of active exploitation.
🐛 VULNERABILITIES CVE Notify: 🚨 [CVE-2026-4878](https://access.redhat.com/errata/RHSA-2026:12423) A flaw was found in libcap. A l... https://access.redhat.com/errata/RHSA-2026:12423 #PatchManagement #Vulnerability #CVE
Post summary
RedHat has released a patch for CVE-2026-4878 targeting a flaw in libcap, as indicated by the errata link.
🐛 VULNERABILITIES CVE Notify: 🚨 [CVE-2026-4878](https://access.redhat.com/errata/RHSA-2026:12423) A flaw was found in libcap. A l... https://access.redhat.com/errata/RHSA-2026:12423 #ZeroDay #PatchManagement #Vulnerability
Post summary
Red Hat reports a flaw in libcap (CVE‑2026‑4878) and provides a patch via an errata, with no evidence of active exploitation or proof of concept presented.
🐛 VULNERABILITIES CVE Notify: 🚨 [CVE-2026-4878](https://access.redhat.com/errata/RHSA-2026:12423) A flaw was found in libcap. A l... https://access.redhat.com/errata/RHSA-2026:12423 #Vulnerability #CVE #ZeroDay
Post summary
The tweet announces CVE‑2026‑4878 affecting libcap in Red Hat systems, directing readers to an errata page that provides the relevant patch.
CVE-2026-4878 A flaw was found in libcap. A local unprivileged user can exploit a Time-of-check-to-time-of-use (TOCTOU) race condition in the `cap_set_file()` function. This allows a… https://www.cve.org/CVERecord?id=CVE-2026-4878
Post summary
The post discloses a local TOCTOU flaw in libcap’s cap_set_file() function that allows non‑privileged users to affect file capabilities.
5 of 5 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | libcap_project | libcap | - | - | - |
| OS | redhat | enterprise_linux | 10.0 | - | - |
| OS | redhat | enterprise_linux | 8.0 | - | - |
| OS | redhat | enterprise_linux | 9.0 | - | - |
| App | redhat | openshift_container_platform | 4.0 | - | - |