CVE-2021-3156

nvd.nist.gov • August 20, 2026

Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via "sudoedit -s" and a command-line argument that ends with a single backslash character.

Reference CISA's BOD 22-01 and Known Exploited Vulnerabilities Catalog for further guidance and requirements.

Denotes Vulnerable Software Are we missing a CPE here? Please let us know .

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

UAT-10147 Cybercrime Group Integrates AI for Large-Scale Attacks In early 2026, Cisco Talos identified UAT-10147, a Chinese-speaking cybercrime group targeting vulnerable web servers across multiple countries, including Brazil, China, and Canada. The group employs agentic AI to enhance its attack methods, transitioning from simple scripting to semi-autonomous offensive operations. Their activities include SEO fraud and data theft, with a target list of approximately 170,000 URLs. UAT-10147 utilizes various tools, including the custom backdoor SPECTRE and the BadIIS malware, to execute their attacks. The group has been observed exploiting multiple vulnerabilities, including CVE-2021-23758 and CVE-2022-27925, and employs sophisticated techniques for evasion and persistence. The current status indicates ongoing operations with significant implications for affected sectors such as government and technology. 5 sources 75

Extracted Entities

CVE-2021-3156

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

CWE Weaknesses (1)

MITRE ATT&CK (1)