← Database

CVE-2026-35535

HIGH CVSS: 7.4 Published: 2026-04-03 Modified: 2026-07-24

Description

In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the mailer, is not a fatal error and can lead to privilege escalation.

Affected Platforms

Sudo Project SudoSiemens Sinec OsSiemens Ruggedcom Rst2428P

Weakness Type

CWE-271, CWE-272

References