Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2026-78236

Insecure PIN derivation mechanism in Admin By Request (ABR)

An insecure PIN derivation mechanism in ABR allows a low-privileged user to escalate privileges to administrator by communicating over Cross-Process Communication (XPC) while masquerading as an Apple-signed process.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Admin By Request (abr)
Products
Admin By Request (abr)
CVE-2026-78237

Insufficient input validation in Admin By Request (ABR)

Insufficient input validation in ABR allows a low-privileged user to inject malicious entries into the sudoers file, resulting in persistent root access that remained effective after the ABR session ended.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Admin By Request (abr)
Products
Admin By Request (abr)