{"schema_version":"1","data":[{"id":7832,"advisory_id":"ab787f5a-7721-4235-b5e2-64ade33775ce","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-104018","source_published_at":"2026-10-01T17:35:20.063+00:00","published_at":"2026-10-24T22:50:38.960236+00:00","extraction_method":"structured","technologies":["core-cve","vxworks-7"],"cve_ids":["CVE-2026-104018"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"VxWorks 7 improper privilege management","summary":"An improper privilege management vulnerability (CWE-269) exists in the command shell of Wind River VxWorks 7 when configured to enforce per-user command privileges. Under certain shell operations, a command may be evaluated without the privilege check that is normally applied, allowing an authenticated user with limited privileges to execute commands they are not authorized to run. Successful exploitation can result in privilege escalation, with impact to the confidentiality, integrity, and availability of the affected device. The issue affects all versions of VxWorks 7 prior to 26.09. It has been fixed in 26.09.","evidence":"cve:CVE-2026-104018","products":[{"name":{"value":"VxWorks 7","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-104018","aliases":["CVE-2026-104018"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.8,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"vendor":"Wind River Systems Inc","product":"VxWorks 7","versions":[{"status":"affected","version":"VxWorks 7"}],"defaultStatus":"unaffected"}],"modified":"2026-10-02T03:55:35.132Z","provider":"cve","references":["https://support2.windriver.com/index.php?page=cve&on=view&id=CVE-2026-104018"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-104018","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-01T00:00:00+00:00"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-269","description":"CWE-269 Improper Privilege Management"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-02T03:55:35.132Z"}}],"cna":{"orgId":"0bf9931a-6ebf-4f48-bd14-39ee5e1d61f8","shortName":"WindRiver","dateUpdated":"2026-10-01T18:07:25.396Z"}}},"related_cves":[{"value":"CVE-2026-104018","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"context_update":false},{"id":4367,"advisory_id":"532eca12-dde2-48ed-aa17-b38d4c84ff14","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-102006","source_published_at":"2026-09-28T20:46:35.447+00:00","published_at":"2026-10-24T21:50:52.423964+00:00","extraction_method":"structured","technologies":["core-cve","vxworks-7"],"cve_ids":["CVE-2026-102006"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"VxWorks 7 Memory allocation","summary":"In Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in the process management subsystem failing to properly release allocated kernel memory before terminating the calling application. Fixed in Version 26.09","evidence":"cve:CVE-2026-102006","products":[{"name":{"value":"VxWorks 7","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-102006","aliases":["CVE-2026-102006"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"NONE"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"vendor":"Wind River Systems Inc","product":"VxWorks 7","versions":[{"status":"affected","version":"VxWorks 7"}],"platforms":["RTOS"],"defaultStatus":"unaffected"}],"modified":"2026-09-30T13:42:51.624Z","provider":"cve","references":["https://support2.windriver.com/index.php?page=cve"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-102006","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-30T13:42:38.718375Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-30T13:42:51.624Z"}}],"cna":{"orgId":"0bf9931a-6ebf-4f48-bd14-39ee5e1d61f8","shortName":"WindRiver","dateUpdated":"2026-09-28T20:46:35.447Z"}}},"related_cves":[{"value":"CVE-2026-102006","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"context_update":false},{"id":3772,"advisory_id":"a9f03628-c074-435c-9727-7fb68f38bbb7","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-102004","source_published_at":"2026-09-28T19:47:18.64+00:00","published_at":"2026-10-24T21:40:35.689205+00:00","extraction_method":"structured","technologies":["core-cve","vxworks-7"],"cve_ids":["CVE-2026-102004"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"VxWorks 7","summary":"Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in memory corruption within the memory management subsystem. Fixed in Version 26.09","evidence":"cve:CVE-2026-102004","products":[{"name":{"value":"VxWorks 7","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-102004","aliases":["CVE-2026-102004"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.8,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"vendor":"Wind River Systems Inc","product":"VxWorks 7","versions":[{"status":"affected","version":"VxWorks 7"}],"platforms":["RTOS"],"defaultStatus":"unaffected"}],"modified":"2026-09-29T15:39:42.551Z","provider":"cve","references":["https://support2.windriver.com/index.php?page=cve"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-102004","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-29T03:55:29.801701Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-29T15:39:42.551Z"}}],"cna":{"orgId":"0bf9931a-6ebf-4f48-bd14-39ee5e1d61f8","shortName":"WindRiver","dateUpdated":"2026-09-28T19:47:18.640Z"}}},"related_cves":[{"value":"CVE-2026-102004","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"context_update":false},{"id":3349,"advisory_id":"a3ab5fc0-27e0-4374-9626-c93ba0d60e49","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97686","source_published_at":"2026-09-28T18:48:23.773+00:00","published_at":"2026-10-24T21:33:51.31284+00:00","extraction_method":"structured","technologies":["core-cve","vxworks-7"],"cve_ids":["CVE-2026-97686"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"VxWorks 7 Memory Resource leak","summary":"Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in the IPNET subsystem failing to properly release allocated kernel memory and system file descriptors before terminating the calling application. Fixed in Version 26.09.","evidence":"cve:CVE-2026-97686","products":[{"name":{"value":"VxWorks 7","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-97686","aliases":["CVE-2026-97686"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"NONE"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"vendor":"Wind River","product":"VxWorks 7","versions":[{"status":"affected","version":"VxWorks 7"}],"platforms":["RTOS"],"defaultStatus":"unaffected"}],"modified":"2026-09-28T21:41:50.103Z","provider":"cve","references":["https://support2.windriver.com/index.php?page=cve&order_by=cve_modified_date&order_way=asc#list"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-97686","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-28T19:25:35.769605Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-28T19:25:43.054Z"}}],"cna":{"orgId":"0bf9931a-6ebf-4f48-bd14-39ee5e1d61f8","shortName":"WindRiver","dateUpdated":"2026-09-28T21:41:50.103Z"}}},"related_cves":[{"value":"CVE-2026-97686","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"context_update":false},{"id":3343,"advisory_id":"d8f36bf6-d1a7-4aaf-b96c-05f411c655d8","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-102005","source_published_at":"2026-09-28T20:15:52.709+00:00","published_at":"2026-10-24T21:33:47.783723+00:00","extraction_method":"structured","technologies":["core-cve","vxworks-7"],"cve_ids":["CVE-2026-102005"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"VxWorks Memory Allocation","summary":"Wind River VxWorks 7 24.03 through 26.03, a memory leak occurs under specific, non-default configuration states when processing specific service routines, causing the system to terminate operations before releasing allocated memory pools. Fixed in VxWorks 7 26.09","evidence":"cve:CVE-2026-102005","products":[{"name":{"value":"VxWorks 7","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-102005","aliases":["CVE-2026-102005"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"NONE"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"vendor":"Wind River Inc","product":"VxWorks 7","versions":[{"status":"affected","version":"VxWorks 7"}],"platforms":["RTOS"],"defaultStatus":"unaffected"}],"modified":"2026-09-28T20:43:19.687Z","provider":"cve","references":["https://support2.windriver.com/index.php?page=cve"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-102005","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-28T20:43:09.369982Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-28T20:43:19.687Z"}}],"cna":{"orgId":"0bf9931a-6ebf-4f48-bd14-39ee5e1d61f8","shortName":"WindRiver","dateUpdated":"2026-09-28T20:15:52.709Z"}}},"related_cves":[{"value":"CVE-2026-102005","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"context_update":false}],"next_after":7832,"next_before":3343}