CVE-2026-35535
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-35535
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the mailer, is not a fatal error and can lead to privilege escalation.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
特权放弃/降低错误
Source: NVD (National Vulnerability Database)
Vulnerability Title
Sudo 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Sudo是Sudo Project开源的一款使用于类Unix系统的，允许用户通过安全的方式使用特殊的权限执行命令的程序。 Sudo 1.9.17p2及之前版本存在安全漏洞，该漏洞源于权限丢弃失败未被视为致命错误，可能导致权限提升。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Sudo project | Sudo | 0 ~ 3e474c2f201484be83d994ae10a4e20e8c81bb69 | - |
II. Public POCs for CVE-2026-35535
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
Qwen3.6-35B-A3B · 9583 chars
Paid plan includes:
In-depth vulnerability mechanism
Trigger conditions & impact
Full executable POC code
Exploit chain & mitigation
POC zip download
100+ AI POC generations per month
III. Intelligence Information for CVE-2026-35535
请登录查看更多情报信息。
IV. Related Vulnerabilities
Same weakness: CWE-271
- CVE-2026-25704
Incomplete privilege drop for com.system76.CosmicGreeter.Get - CVE-2025-53819
Nix's privilege dropping to build user broke for macOS - CVE-2025-23395
Local root exploit via `logfile_reopen()` in screen 5.0.0 wi - CVE-2024-35179
Unprivileged Stalwart Mail Server user can read files as roo - CVE-2024-0985
PostgreSQL non-owner REFRESH MATERIALIZED VIEW CONCURRENTLY
V. Comments for CVE-2026-35535
No comments yet