CVE-2026-78237

EUVD-2026-66332
Insufficient input validation in ABR allows a low-privileged user to inject malicious entries into the sudoers file, resulting in persistent root access that remained effective after the ABR session ended.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.8 HIGH
LOCAL
HIGH
LOW
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 3.2%
Common Weakness Enumeration
References
https://docs.adminbyrequest.com/security-advisories/abr-mac-26-02.htm
https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-110/