ZeroDay Findings
Sign inSign up

Findings

CVE-2026-104618

On request the script creates a world-readable debug log in /var/log/sdbootutil.log.

Published Oct 15, 2026 · updated Oct 15, 2026

On request the script creates a world-readable debug log in /var/log/sdbootutil.log. The log file is created world-readable, however, which means that arbitrary low-privileged users in the system will be able to extract secrets from it.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Oct 15, 2026 · NIST NVD

    Detected

    On request the script creates a world-readable debug log in /var/log/sdbootutil.log. The log file is created world-readable, however, which means that arbitrary low-privileged users in the system will be able to extract secrets from it.

  2. Oct 15, 2026 · NIST NVD

    Updated

    On request the script creates a world-readable debug log in /var/log/sdbootutil.log. The log file is created world-readable, however, which means that arbitrary low-privileged users in the system will be able to extract secrets from it.

Sources

  • CVE.orgVulnerability recordCVE-2026-104618

    Official CVE identifier

    cve.org
  • FIRST EPSSExploitation probabilityCVE-2026-104618

    30-day exploitation probability 0.1%

    first.org
  • NIST NVDVulnerability recordCVE-2026-104618

    On request the script creates a world-readable debug log in /var/log/sdbootutil.log. The log file is created world-readable, however, which means that arbitrary low-privileged users in the system will be able to extract secrets from it.

    nvd.nist.gov

References