CVE-2019-14257: Zenoss

High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days.

pyraw in Zenoss 2.5.3 allows local privilege escalation by modifying environment variables to redirect execution before privileges are dropped, aka ZEN-31765.

Affected products

• Zenoss Zenoss: version 2.5.3 only

Published 2019-08-21. Last modified 2026-06-17.