ZeroDay Findings
Sign inSign up

Findings

CVE-2026-35535

In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the mailer, is not a fatal error and…

Published Apr 3, 2026 · updated Sep 1, 2026 · sudo project sudo

In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the mailer, is not a fatal error and can lead to privilege escalation.

Code

The project this record applies to. Exploit listings stay in References.

Timeline

Detection, updates, and resolution for this record.

  1. Apr 3, 2026 · NIST NVD

    Detected

    In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the mailer, is not a fatal error and can lead to privilege escalation.

  2. Sep 1, 2026 · NIST NVD

    Updated

    In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the mailer, is not a fatal error and can lead to privilege escalation.

Affected

  • cpe siemens/sinec osversion unspecified
  • cpe sudo project/sudoversion unspecified
  • cpe sudo project/sudo1.9.17

Sources

  • CVE.orgVulnerability recordCVE-2026-35535

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-35535

    In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the mailer, is not a fatal error and can lead to privilege escalation.

    nvd.nist.gov

References

CVE-2026-35535 · ZeroDay Findings