CVE-2026-67609

Name of the Vulnerable Software and Affected Versions Telenia Software TVox versions prior to 26.5.4 Telenia Software TVox versions prior to 24.9.22

Description An insecure sudoers configuration in /etc/sudoers.d/telenia allows attackers with access to the apache account to escalate privileges. The configuration grants the apache user the ability to execute /bin/nice with the NOPASSWD option, which can be leveraged to invoke arbitrary commands as root without providing a password.

Recommendations Update Telenia Software TVox to a version later than 26.5.3. Update Telenia Software TVox to a version later than 24.9.21.