Skip to content

CVE-2026-12505

CVE

Threat entity extracted from intelligence sources

Frequency
2
occurrences
First Seen
July 17, 2026
Last Seen
July 17, 2026
API
Exploited in Wild
Ransomware Use
Public Exploits
Attack Vector

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Oracle has released important bug fixes for CVE-2026-12505 affecting cifs-utils in both Oracle Linux 8 and 9. The vulnerability allows local privilege escalation (LPE) through cifs.spnego, impacting users of both distributions. The CVE was published on 2026-06-18, and the fixes were released on 2026...

Public Exploits

Checking GitHub for proof-of-concept code…