PT-2026-45914
CVE-2025-41259
·
Published
2026-06-03
·
Updated
2026-06-04
Description by
CVSS 4.0
7.3
HighMetricsAV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions
SWUpdate versions prior to 2026.05
Description
A time-of-check time-of-use (TOCTOU) race condition exists, which is a software bug where a system checks a condition (such as a security credential) and then uses the result of that check, but the condition changes between the check and the use. This allows local unprivileged attackers to escalate privileges to root or install untrusted contents using a signed update.
Recommendations
Update to version 2026.05.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾