type: cve · created: 2026-10-27 · updated: 2026-10-27 · tags: [cve] · confidence: medium · severity: critical · affected_sectors: [global] · au_impact: false
CVE-2026-77055 is rated 9.3 Critical: the Debian image grants the boneio service account passwordless sudo and docker-group membership, so anything that compromises that account escalates straight to root.
| Attribute | Detail |
|---|---|
| CVE | CVE-2026-77055 |
| CVSS | 9.3 (CRITICAL) |
| Vendor / product | Not stated |
| Reported | 2026-10-27 |