CVE Intelligence

Admin By Request (ABR) Admin By Request (ABR) vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Admin By Request (ABR) Admin By Request (ABR): 2 record(s), with affected versions and fixes.

CVE-2026-78237 High · 7.8 CWE-20 Aug 26, 2026
Insufficient input validation in Admin By Request (ABR)
Insufficient input validation in ABR allows a low-privileged user to inject malicious entries into the sudoers file, resulting in persistent root access that remained effective after the ABR session ended.
CVE-2026-78236 High · 8.8 CWE-284 Aug 26, 2026
Insecure PIN derivation mechanism in Admin By Request (ABR)
An insecure PIN derivation mechanism in ABR allows a low-privileged user to escalate privileges to administrator by communicating over Cross-Process Communication (XPC) while masquerading as an Apple-signed process.