NetSight
IP …
high7.4

CVE-2026-35535

In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the mailer, is not a fatal er…

Impact

In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the mailer, is not a fatal error and can lead to privilege escalation.

Affected products

VendorProductAffected versions
Sudo ProjectSudo
before 1.9.17
Version 1.9.17
SiemensSinec Os
before 4.0

Weakness classification

CWE-271CWE-272

References