CVE-2026-67609

The record

Telenia Software TVox 26.5.3 and prior 26.x versions, and 24.9.21 and prior 24.x versions, contain a privilege escalation vulnerability that allows attackers with access to the apache account to execute arbitrary commands as root by exploiting an insecure sudoers configuration in /etc/sudoers.d/telenia. The configuration grants the apache user NOPASSWD execution of /bin/nice, which can be leveraged to invoke arbitrary commands, enabling full root-level command execution without supplying a password.

Affected packages

Related vulnerabilities

• CVE-2026-40573 NovumOS is a custom 32-bit operating system written in Zig and x86 Assembly. CWE-250
• CVE-2025-30046 In the CGM CLININET application server, multiple processes responsible for HL7… CWE-250
• CVE-2026-91335 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise… CWE-250
• CVE-2026-104795 The insights-runtime-extractor runs as a privileged DaemonSet (`hostPID: true`) that… CWE-250
• CVE-2026-87709 Improper access control in Windows Host Guardian Service allows an authorized attacker to… CWE-250
• CVE-2026-107176 A flaw was found in the cluster-samples-operator. CWE-250
• CVE-2026-92574 A vulnerability in CRI-O checkpoint restore allows a user who can create a pod from a… CWE-250
• CVE-2026-79942 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions… CWE-250