{
  "cveId": "CVE-2026-82474",
  "url": "https://patchblox.com/security/cve/CVE-2026-82474",
  "summary": "CVE-2026-82474 is fixed in 4 products on 1 platform, first by libnss-sudo 1.9.17p2-1ubuntu3.1, released August 29, 2026. It is not reported as exploited. Patch Radar priority: High.",
  "title": "Sudo through 1.9.17p2 Intercept Policy Bypass via execveat",
  "description": "The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root.\n\nSecurity Fix(es):\n\n* sudo: Sudo: Policy bypass allows unauthorized program execution via execveat (CVE-2026-82474)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
  "published": "2026-08-29T10:17:00Z",
  "severity": "Important",
  "cvss": 7.8,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
  "cwe": "Protection Mechanism Failure",
  "epss": 0.00193,
  "epssPercentile": 0.09076,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "vendorAdvisory": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-82474",
  "fixes": [
    {
      "platform": "linux",
      "product": "libnss-sudo",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "1.9.15p5-3ubuntu5.24.04.3",
      "fix": "libnss-sudo 1.9.15p5-3ubuntu5.24.04.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-libnss-sudo-1.9.15p5-3ubuntu5.24.04.3",
      "released": "2026-09-23T19:19:15Z"
    },
    {
      "platform": "linux",
      "product": "libnss-sudo",
      "release": "Ubuntu 26.04.1 LTS (resolute)",
      "fixedVersion": "1.9.17p2-1ubuntu3.1",
      "fix": "libnss-sudo 1.9.17p2-1ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-resolute-libnss-sudo-1.9.17p2-1ubuntu3.1",
      "released": "2026-08-29T10:17:00Z"
    },
    {
      "platform": "linux",
      "product": "sudo",
      "release": "RHEL 10",
      "fixedVersion": "1.9.15-8.p5.el10_0.4",
      "fix": "RHSA-2026:71354",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-71354",
      "released": "2026-09-18T18:21:37Z"
    },
    {
      "platform": "linux",
      "product": "sudo",
      "release": "RHEL 9",
      "fixedVersion": "0:1.9.17p2-3.el9_8.1",
      "fix": "RHSA-2026:69123",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-69123",
      "released": "2026-09-22T19:09:12Z"
    },
    {
      "platform": "linux",
      "product": "sudo",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "1.9.15p5-3ubuntu5.24.04.3",
      "fix": "sudo 1.9.15p5-3ubuntu5.24.04.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-sudo-1.9.15p5-3ubuntu5.24.04.3",
      "released": "2026-09-23T19:19:15Z"
    },
    {
      "platform": "linux",
      "product": "sudo",
      "release": "Ubuntu 26.04.1 LTS (resolute)",
      "fixedVersion": "1.9.17p2-1ubuntu3.1",
      "fix": "sudo 1.9.17p2-1ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-resolute-sudo-1.9.17p2-1ubuntu3.1",
      "released": "2026-08-29T10:17:00Z"
    },
    {
      "platform": "linux",
      "product": "sudo",
      "release": "almalinux 10",
      "fixedVersion": "1.9.17-10.p2.el10_2.6",
      "fix": "ALSA-2026:68692",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-68692",
      "released": "2026-09-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "sudo",
      "release": "almalinux 9",
      "fixedVersion": "1.9.17p2-3.el9_8.1",
      "fix": "ALSA-2026:69123",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-69123",
      "released": "2026-09-21T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "sudo",
      "release": "ol 10",
      "fixedVersion": "0:1.9.17-10.p2.el10_2.6",
      "fix": "ELSA-2026-68692",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-68692",
      "released": "2026-09-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "sudo",
      "release": "ol 9",
      "fixedVersion": "0:1.9.17p2-3.el9_8.1",
      "fix": "ELSA-2026-69123",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-69123",
      "released": "2026-09-21T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "sudo",
      "release": "rocky 10",
      "fixedVersion": "0:1.9.17-10.p2.el10_2.6",
      "fix": "RLSA-2026:68692",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2026-68692",
      "released": "2026-09-19T12:09:22Z"
    },
    {
      "platform": "linux",
      "product": "sudo",
      "release": "rocky 9",
      "fixedVersion": "0:1.9.17p2-3.el9_8.1",
      "fix": "RLSA-2026:69123",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2026-69123",
      "released": "2026-09-22T18:04:11Z"
    },
    {
      "platform": "linux",
      "product": "sudo-ldap",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "1.9.15p5-3ubuntu5.24.04.3",
      "fix": "sudo-ldap 1.9.15p5-3ubuntu5.24.04.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-sudo-ldap-1.9.15p5-3ubuntu5.24.04.3",
      "released": "2026-09-23T19:19:15Z"
    },
    {
      "platform": "linux",
      "product": "sudo-python-plugin",
      "release": "RHEL 9",
      "fixedVersion": "0:1.9.17p2-3.el9_8.1",
      "fix": "RHSA-2026:69123",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-69123",
      "released": "2026-09-22T19:09:12Z"
    },
    {
      "platform": "linux",
      "product": "sudo-python-plugin",
      "release": "almalinux 10",
      "fixedVersion": "1.9.17-10.p2.el10_2.6",
      "fix": "ALSA-2026:68692",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-68692",
      "released": "2026-09-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "sudo-python-plugin",
      "release": "almalinux 9",
      "fixedVersion": "1.9.17p2-3.el9_8.1",
      "fix": "ALSA-2026:69123",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-69123",
      "released": "2026-09-21T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "sudo-python-plugin",
      "release": "ol 10",
      "fixedVersion": "0:1.9.17-10.p2.el10_2.6",
      "fix": "ELSA-2026-68692",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-68692",
      "released": "2026-09-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "sudo-python-plugin",
      "release": "ol 9",
      "fixedVersion": "0:1.9.17p2-3.el9_8.1",
      "fix": "ELSA-2026-69123",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-69123",
      "released": "2026-09-21T00:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-09T13:31:49Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}