![\"Critical](\"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEgxghtolLODIv167lHKVGNtpEy6egVPNJ874v4Qj9Q6-rcWJFsEigtGzgZtFaH_-P6y9ngP7QVIwi9QLdddSdYxO0rbs0pn6Ruq1_YodP8DYby29LLv1DeyUdlv4KqtaDMHx_KXcxkfOkRGAYzBiPwbPlpNdK231qY9f_y2wBE0heXJFe-QoeJcj5w910Dc\/s728-rw-e365\/linux-root.jpg\" "\\"Critical")
<\/a><\/div>\nThe U.S. Cybersecurity and Infrastructure Safety Company (CISA) on Monday added<\/a> a crucial safety flaw impacting the Sudo command-line utility for Linux and Unix-like working techniques to its Identified Exploited Vulnerabilities (KEV<\/a>) catalog, citing proof of energetic exploitation within the wild.<\/p>\n The vulnerability in query is CVE-2025-32463 (CVSS rating: 9.3), which impacts Sudo variations previous to 1.9.17p1. It was disclosed<\/a> by Stratascale researcher Wealthy Mirch again in July 2025.<\/p>\n “Sudo incorporates an inclusion of performance from an untrusted management sphere vulnerability,” CISA stated. “This vulnerability may permit an area attacker to leverage sudo’s -R (–chroot) choice to run arbitrary instructions as root, even when they aren’t listed within the sudoers file.”<\/p>\n It is presently not identified how the shortcoming is being exploited in real-world assaults, and who could also be behind such efforts. Additionally added to the KEV catalog are 4 different flaws –<\/p>\n In gentle of energetic exploitation, Federal Civilian Govt Department (FCEB) companies counting on the affected merchandise are suggested to use the mandatory mitigations by October 20, 2025, to safe their networks.<\/p>\n<\/div>\n\n","protected":false},"excerpt":{"rendered":" \ue802Sep 30, 2025\ue804Ravie LakshmananVulnerability \/ Linux The U.S. Cybersecurity and Infrastructure Safety Company (CISA) on Monday added a crucial safety flaw impacting the Sudo command-line utility for Linux and Unix-like working techniques to its Identified Exploited Vulnerabilities (KEV) catalog, citing proof of energetic exploitation within the wild. The vulnerability in query is CVE-2025-32463 (CVSS rating: […]<\/p>\n","protected":false},"author":2,"featured_media":7197,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[58],"tags":[1993,2862,1359,420,1994,2705,2026,87,5636,140,5637],"class_list":["post-7195","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity","tag-actively","tag-alarm","tag-cisa","tag-critical","tag-exploited","tag-flaw","tag-linux","tag-sounds","tag-sudo","tag-systems","tag-unix"],"_links":{"self":[{"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/posts\/7195","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=7195"}],"version-history":[{"count":1,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/posts\/7195\/revisions"}],"predecessor-version":[{"id":7196,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/posts\/7195\/revisions\/7196"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/media\/7197"}],"wp:attachment":[{"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=7195"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=7195"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=7195"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}<\/a><\/center><\/div>\n\n