SCHUTZWERK-SA-2025-002: Privilege escalation in Lobster

SCHUTZWERK-SA-2025-002: Privilege escalation in Lobster_pro through request replaying

Summary by Cyber Security News27 Oct 2026, 08:28 CET

About this summary. This is a short excerpt from the description that Full Disclosure published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://seclists.org/fulldisclosure/2026/Oct/35

Posted by David Brown via Fulldisclosure on Oct 27 Privilege escalation via request replaying in Lobster_pro Due to improper permission checks in Lobster_pro, attackers are able to interact with endpoints that should require administrative privileges. This issue affects Lobster_pro version 4.12.12-LTS and potentially other versions prior to 25.1.3. Metadata - Affected product: Lobster_pro - Affected version: 4.12.12-LTS and...

Read the full article at Full Disclosure →

Source attribution: headline and facts are from Full Disclosure (seclists.org). Summary method: excerpt of the source description. See our source attribution policy.

Related coverage

🏴☠️ N0n has just published a new victim : Company #138

CVE-2026-123776: RRD::CGI::Image versions through 0.01 for Perl pass CGI query parameters containting "tz" to tzset(), , so a FIFO or device path blocks the CGI process

CVE-2026-121265: SQL::Abstract versions before 2.000003 for Perl allow SQL injection via an arrayref column value in insert and update

SonicWall Patches Exploited SonicOS Vulnerability That Weakens VPN Logins

U.S. CISA adds SonicWall SonicOS SSLVPN flaw to its Known Exploited Vulnerabilities catalog

Re: "sshole": password authentication bypass: OpenSSH + musl libc