Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

[CVE-2026-90894] ParaShells: Parallels Desktop Turns Appliance Install Into a Root Shell

jfrog.com | vulnerability | CVE-2026-90894

Summary

A flaw in Parallels Desktop for Mac (CVE-2026-90894) allows unprivileged local users to gain root privileges via argument injection during appliance installation.
Published
Collected

original ↗

Related coverage

  1. CVE-2026-82329: Unauthenticated Administrative Access in JFrog Artifactory via an Empty Cluster Join Key (bishopfox.com)
  2. Mind the Config: Detecting and Weaponizing NetScaler CVE-2026-19490 (bishopfox.com)
  3. Signature Optional - Analysis of CVE-2026-28323 (bishopfox.com)
  4. A GUID is Not a Credential: Unauthenticated RCE in Veeam Service Provider Console (bishopfox.com)
  5. AppFlowy Authenticated SQL Injection (projectblack.io)
  6. James Kettle’s ‘autonomous research cascade’, CRLF-powered desync attacks, RCE on humanoid robots – ethical hacker news roundup (yeswehack.com)

back