CVE-2026-82457: Ncopa Su-Exec

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

su-exec through 0.3 fails to validate numeric user and group identifiers parsed with strtol before assigning to uid_t and gid_t, allowing truncation of out-of-range values to zero. Attackers can supply large numeric identifiers that truncate to root's identifier, causing su-exec to execute target programs with root privileges instead of intended unprivileged accounts.

Affected products

• Ncopa Su-Exec: up to and including 0.3

Published 2026-08-29. Last modified 2026-09-23.