CVE-2025-71263

In UNIX Fourth Research Edition (v4), the su command is vulnerable to a buffer overflow due to the 'password' variable having a fixed size of 100 bytes. A local user can exploit this to gain root privileges. It is unlikely that UNIX v4 is running anywhere outside of a very small number of lab environments. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

• CWE-120

• https://discuss.systems/@ricci/115747843169814700Issue Tracking
• https://sigma-star.at/blog/2025/12/unix-v4-buffer-overflow/Press/Media Coverage
• https://www.spinellis.gr/blog/20251223/Technical Description
• https://www.tuhs.org/pipermail/tuhs/2026-January/032991.htmlIssue Tracking, Mailing List
• http://www.openwall.com/lists/oss-security/2026/03/20/6Issue Tracking, Mailing List
• http://www.openwall.com/lists/oss-security/2026/03/21/4Issue Tracking, Mailing List

Published

Mar 13, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-71257BMC FootPrints ITSM versions 20.20.02 through 20.24.01.001 c…9.1
• CVE-2025-71258BMC FootPrints ITSM versions 20.20.02 through 20.24.01.001 c…7.1
• CVE-2025-71259BMC FootPrints ITSM versions 20.20.02 through 20.24.01.001 c…7.1
• CVE-2025-7126A vulnerability, which was classified as critical, has been …7.2
• CVE-2025-71260BMC FootPrints ITSM versions 20.20.02 through 20.24.01.001 c…8.8
• CVE-2025-71261An attacker with network-level access between the SUSE Virtu…8.6
• CVE-2025-71264Mumble before 1.6.870 is prone to an out-of-bounds array acc…5.3
• CVE-2025-71265In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-71266In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-71267In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-71268In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-71269In the Linux kernel, the following vulnerability has been re…5.5