CVE Intelligence

Ncopa vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Ncopa products: 1 record(s), with severity, exploitation and fixes.

Su-exec 1

Exploited only (KEV) →

CVE-2026-82457 High · 7.8 CWE-681 Aug 29, 2026
su-exec through 0.3 Privilege Escalation via Numeric User ID
su-exec through 0.3 fails to validate numeric user and group identifiers parsed with strtol before assigning to uid_t and gid_t, allowing truncation of out-of-range values to zero. Attackers can supply large numeric identifiers that truncate to root's identifier, causing su-exec to execute target programs with root privileges instead of intended unprivileged accounts.