Vulnerabilities CVE-2026-4018

CVE-2026-4018

Medium

Open

TLP:CLEAR

TOCTOU race condition in the QNX Neutrino kernel impacts versions of the QNX Software Development Platform and QNX OS for Safety

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

TOCTOU Race Condition in specific trace commands of the TraceEvent() system call could allow an attacker with local access and with the PROCMGR_AID_TRACE ability, to cause information disclosure, data tampering or a crash of the QNX Neutrino kernel.

Details

CVSS Score: 6.4
EPSS Score ⓘ: 0.09%

0.6th percentile
CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Confidence: 90%
Published: Jul 14, 2026
Last Modified: Jul 15, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.