Curated security research, vulnerabilities, advisories and tools for practitioners.

← back | CVE Intelligence

CVE-2026-90894

Curated 1 security research writeups, vulnerability advisories and exploitation analyses for CVE-2026-90894.

Coverage Span: 2026-09-15
Reports: 1 related reports

Associated Reports & Timeline

[CVE-2026-90894] ParaShells: Parallels Desktop Turns Appliance Install Into a Root Shell

JFrog details CVE-2026-90894 in Parallels Desktop: a world-writable prl_disp_service socket, weak peercred auth, and tar argument injection let unprivileged local users execute code as root.