CVE-2026-78237: Admin By Request Abr

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Insufficient input validation in ABR allows a low-privileged user to inject malicious entries into the sudoers file, resulting in persistent root access that remained effective after the ABR session ended.

Affected products

• Admin By Request Abr Admin By Request Abr: up to and including 5.2.2

Published 2026-08-26. Last modified 2026-09-03.