Improper Privilege Management in Wind River VxWorks 7

CVE-2026-104018

What is CVE-2026-104018?

An improper privilege management flaw exists in Wind River VxWorks 7's command shell across all versions up to 26.09 when configured for per-user command privileges. This vulnerability enables an authenticated user with limited privileges to execute commands without undergoing the necessary privilege checks during specific shell operations. Exploiting this flaw can lead to unauthorized privilege escalation, potentially compromising the confidentiality, integrity, and availability of the affected device. The issue has been addressed in version 26.09.

References