rootpwn

critical · CVSS v3 9.8 · EPSS 0.005

CVE-2026-91843

CVE‑2026‑91843 is a critical stack overflow that can be triggered during an unauthenticated login attempt, allowing an attacker to execute a

Overview

CVE‑2026‑91843 is a critical stack overflow that can be triggered during an unauthenticated login attempt, allowing an attacker to execute arbitrary code with root privileges on the affected system.

Description

A stack overflow during the unauthenticated login process may allow an attacker to run arbitrary code remotely with root privileges.

Impact

{'confidentiality': 'Compromise of all data stored or processed by the affected service.', 'integrity': 'Full system compromise, enabling modification of files, configuration, and data.', 'availability': 'Potential for denial of service if the attacker crashes the service or installs persistence mechanisms.'}

Remediation

['Apply the vendor‑issued patch or update to the latest version of the login component.', 'If a patch is not yet available, disable the vulnerable login endpoint or enforce authentication via an alternative secure method.', 'Implement runtime stack protection (e.g., stack canaries, ASLR, DEP) to mitigate stack overflows.', 'Conduct a thorough code audit of the authentication flow and review recent changes for unsafe buffer handling.', 'Monitor logs for unusual login activity and anomalous memory usage patterns.']

Risk context

The CVSS score of 9.8 classifies this as critical, but the EPSS of 0.005 indicates a low probability of exploitation in the wild. Immediate patching is recommended to prevent potential remote code execution with root privileges.

Affected products

  • Web‑based login service
  • Authentication gateway
  • Enterprise portal
  • Custom login API
  • Legacy web application
  • Server‑side login handler
  • Open‑source auth module
  • Third‑party login framework

Scores

Severity
critical
CVSS v2
10
CVSS v3
9.8
CVSS v4
—
EPSS
0.005

stack-overflow remote-code-execution root-privileges authentication critical CVE-2026-91843 login-bypass

← All CVEs

Related CVEs

critical

CVE-2026-91039

Authentication Bypass by Spoofing vulnerability in team-alembic ash_authentication allows an attacker who operates one identity-provider connection of a dynamic_oidc strategy to be signed in as a local user established through a different connection. The strategy is meant to keep each connection in its own identity namespace by writing every UserIdentity row's strategy field as " / ", but that namespacing never takes effect. __connection_id__ is populated only on the ephemeral runtime struct built per request in dynamic_oidc/plug.ex, and DynamicOidc.IdentityChange.change/3 re-fetches the strategy from the compile-time DSL through Info.strategy_for_action, yielding the persisted struct whose __connection_id__ is its defstruct default of nil. OAuth2.identity_strategy_name/1 therefore falls back to the bare strategy name for both the identity write and the reads in oauth2/user_resolver.ex and oauth2/sign_in_preparation.ex. Since the identity resource's unique key is (uid, strategy), one row exists per sub across every connection, and the identity-match branch runs before any email check. Neither strategy handles iss, so nothing else distinguishes the issuers: OpenID Connect Core section 5.7 makes sub unique only within an issuer, so two connections numbering subjects independently share one subject space. This issue affects ash_authentication: from 5.0.0-rc.10 before 5.0.0-rc.14.

View analysis

critical

CVE-2026-86341

CVE‑2026‑86341 is a critical access‑control flaw that allows an attacker to bypass deployment approval checks by disabling strict policies after a deployment object has been altered. The vulnerability can silently enable unapproved code changes to reach production, compromising the integrity of the deployment pipeline.

View analysis

critical

CVE-2026-91102

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.

View analysis

critical

CVE-2026-91104

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.

View analysis