Sudo vulnerabilities and fixes

CVEs that mention Sudo, ranked by priority. 8 tracked.

Sudo has 8 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2026-10-23. Highest priority: CVE-2026-67599 (score 49/100).

• CVE-2026-67599 HIGH 7.2 ClearOS 7.9 contains an OS command injection vulnerability in the Log Viewer component that allows authenticat
• CVE-2026-48097 HIGH 7.8 NexTor IP Changer is a command-line tool that leverages the Tor network to periodically rotate a user's IP add
• CVE-2026-50056 HIGH 7.8 A local privilege escalation vulnerability in the zmmailboxdmgr launcher of Zimbra Collaboration Suite (ZCS) a
• CVE-2026-50057 HIGH 7.8 A local privilege escalation vulnerability in the Zimbra Collaboration Suite (ZCS) MTA package allows the Unix
• CVE-2026-48098 HIGH 7.3 NexTor IP Changer is a command-line tool that leverages the Tor network to periodically rotate a user's IP add
• CVE-2026-93640 HIGH 7.8 A local privilege escalation vulnerability in the optional dnscache package of Zimbra Collaboration Suite (ZCS
• CVE-2026-75857 HIGH 7.0 CodeWhale versions >= 0.8.41 and < 0.8.64 contain a vulnerability in the exec_shell_interact (alias exec_inter
• CVE-2026-53759 LOW 2.0 linuxfabrik-lib provides Python modules for database access, caching, shell execution, and API integrations

FAQ

How do I fix Sudo vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is Sudo being exploited right now?

None of the tracked Sudo CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which Sudo CVE should I patch first?

CVE-2026-67599 currently ranks highest (49/100): ClearOS 7.9 contains an OS command injection vulnerability in the Log Viewer component that allows authenticat.

← Back to latest CVEs