Local Privilege Escalation Vulnerability in Exam4 by Extegrity

CVE-2026-4556

What is CVE-2026-4556?

Exam4 by Extegrity is vulnerable to a local privilege escalation issue stemming from the com.extegrity.LogTool privileged helper. This vulnerability allows a local attacker to exploit the [ConsoleLogHelper copyConsoleIntoFileFromStartDate:] method, which executes syslog commands using parameters that are not properly sanitized. By leveraging this flaw, an attacker can execute arbitrary commands with root privileges, facilitating significant control over the affected system.

References