Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Admin By Request (ABR) Clear all filters
TI-2026-54413 CVE-2026-78237 · GHSA-9v6j-cr5f-p2gx

Insufficient input validation in Admin By Request (ABR)

Priority LOW 35

Insufficient input validation in ABR allows a low-privileged user to inject malicious entries into the sudoers file, resulting in persistent root access that remained effective after the ABR session ended.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00151 Published 2026-08-26 No fix listed CWE-20
TI-2026-54412 CVE-2026-78236 · GHSA-733c-6w54-grpx

Insecure PIN derivation mechanism in Admin By Request (ABR)

Priority LOW 39

An insecure PIN derivation mechanism in ABR allows a low-privileged user to escalate privileges to administrator by communicating over Cross-Process Communication (XPC) while masquerading as an Apple-signed process.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00102 Published 2026-08-26 No fix listed CWE-284