What’s Vulnerable › Vulnerabilities

CVE-2026-7270: Local privilege escalation via execve()

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-04-30 · updated 2026-06-17
• Weakness: CWE-783

Description

An operator precedence bug in the kernel results in a scenario where a buffer overflow causes attacker-controlled data to overwrite adjacent execve(2) argument buffers. The bug may be exploitable by an unprivileged user to obtain superuser privileges.

Affected products

• FreeBSD: 13.5, 13.5-beta3, 13.5-p1, 13.5-p10, 13.5-p11, 13.5-p12 (+31)

References

• https://security.freebsd.org/advisories/FreeBSD-SA-26:13.exec.asc
• https://blog.calif.io/p/cve-2026-7270-how-i-get-root-on-freebsd
• https://news.ycombinator.com/item?id=48077971

Get alerted when CVE-2026-7270 or the next vulnerability affects your stack