Access Control

Every one of the 5 is a mark on the map. Named now: 1 to 5, most at risk first.

1. In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environment variables (SUDO_EDITOR, VISUAL, and EDITOR), allowing a l…CVE-2023-22809Sudo Project · CVSS 7.8 · 55% likely

   CWE-269

2. Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines.CVE-2025-32462Sudo project · CVSS 2.8 · 4.5% likely

   CWE-863

3. sudoedit in Sudo before 1.8.15 allows local users to gain privileges via a symlink attack on a file whose full path is defined using multiple wildcards in /etc/sudoers, as demonst…CVE-2015-5602Sudo Project · 1.5% likely

   CWE-264

4. Sudo: improper handling of ipa_hostname leads to privilege mismanagementCVE-2023-7090Sudo Project · CVSS 6.6 · 0.7% likely

   CWE-269

5. In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the mailer, is not a fatal error and can lead to…CVE-2026-35535Sudo project · CVSS 7.4 · 0.2% likely

   CWE-271

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.