CVE-2026-19584

nist.govSep 10

Velociraptor allows for the creation of notebook backups in its default enabled daily backup feature. When Velociraptor restores the backup, the notebook cell content is interpolated into a template with no ACL checks. This allows a malicious user with NOTEBOOK_EDITOR permission to plant a VQL query which will be evaluated at elevated permissions if the notebook's backup is subsequently restored.

Link

More from nist.gov

CVE-2026-0306nist.govSep 10 CVE-2026-0307nist.govSep 10 CVE-2026-0308nist.govSep 10 CVE-2026-0305nist.govSep 10 CVE-2026-49363nist.govSep 10 CVE-2026-49364nist.govSep 10

Also in Advisories

Friday Squid Blogging: Rotting Squid on a Beached California BoatBruce Schneierschneier.com5d ago
My Talk at DEF CONBruce Schneierschneier.com5d ago
Cliff Stoll’s DEF CON TalkBruce Schneierschneier.com5d ago
AIs Compress Exploit TimelineBruce Schneierschneier.com6d ago
Revised Medical Criteria for Evaluating Cardiovascular Disordersfederalregister.gov
Continuation of the National Emergency With Respect to Persons Who Commit, Threaten To Commit, or Support Terrorismfederalregister.gov