// LIVE

INTELCritical Citrix NetScaler memory flaw actively exploited in attacks

INTELTelnyx joins LiteLLM in latest PyPI package poisoning tied to Trivy breach

INTELStorm Brews Over Critical, No-Click Telegram Flaw

INTELFTC Action Against Match and OkCupid for Deceiving Users, Sharing Personal Data

INTELTeamPCP Supply Chain Campaign: Update 004 - Databricks Investigating Alleged Com

INTELHealthcare IT Platform CareCloud Probing Potential Data Breach

INTELSecurity updates for Monday

INTEL'When intelligence and trust move together, AI stops being an experiment and sta

INTELRussian APT Star Blizzard Adopts DarkSword iOS Exploit Kit

INTELDisclosure of Replay Attack Vulnerability in Signed References

INTELHackers now exploit critical F5 BIG-IP flaw in attacks, patch now

INTELTelnyx Targeted in Growing TeamPCP Supply Chain Attack

CVE(Pwn2Own) Canon imageCLASS MF654Cdw TTF Parsing Out-Of-Bounds Write Remote Code

CVEZDI-26-204: Canon imageCLASS MF654Cdw XPS Parser Vulnerability

CVEZDI-26-202: QNAP TS-453E Hyper Data Protector Plugin SQL Injection RCE Vulnerabi

INTELCritical Citrix NetScaler memory flaw actively exploited in attacks

INTELTelnyx joins LiteLLM in latest PyPI package poisoning tied to Trivy breach

INTELStorm Brews Over Critical, No-Click Telegram Flaw

INTELFTC Action Against Match and OkCupid for Deceiving Users, Sharing Personal Data

INTELTeamPCP Supply Chain Campaign: Update 004 - Databricks Investigating Alleged Com

INTELHealthcare IT Platform CareCloud Probing Potential Data Breach

INTELSecurity updates for Monday

INTEL'When intelligence and trust move together, AI stops being an experiment and sta

INTELRussian APT Star Blizzard Adopts DarkSword iOS Exploit Kit

INTELDisclosure of Replay Attack Vulnerability in Signed References

INTELHackers now exploit critical F5 BIG-IP flaw in attacks, patch now

INTELTelnyx Targeted in Growing TeamPCP Supply Chain Attack

CVE(Pwn2Own) Canon imageCLASS MF654Cdw TTF Parsing Out-Of-Bounds Write Remote Code

CVEZDI-26-204: Canon imageCLASS MF654Cdw XPS Parser Vulnerability

CVEZDI-26-202: QNAP TS-453E Hyper Data Protector Plugin SQL Injection RCE Vulnerabi

OPS INTEL SOURCE: Zero Day Initiative · 2026-02-27

ZDI-26-062: Lexmark CX532adwe esfhelper Vulnerability

— min read

GENERATED BY aria-32b

VIA Zero Day Initiative

#vulnerability #local_privilege_escalation #printers

◎

ARIA ANALYSIS aria-32b · 2026-02-27

["Lexmark CX532adwe printer's esfhelper component has a critical privilege escalation flaw.", 'CVE-2025-65078, CVSS: 7.8']

TL;DR

["Lexmark CX532adwe printer's esfhelper component has a critical privilege escalation flaw.", 'CVE-2025-65078, CVSS: 7.8']

What happened

['Local attackers can escalate privileges on affected Lexmark CX532adwe printers by exploiting an untrusted search path vulnerability in the esfhelper component.']

Why it matters for ops

['Attackers need to execute low-privileged code initially, but this flaw allows for privilege escalation.']

Mitigation

Update to the latest firmware version
Limit user privileges on networked printers
Implement network segmentation for sensitive devices

Action items

Audit existing Lexmark CX532adwe printer deployments
Apply vendor-provided patches immediately
Review and enforce least privilege access controls

Detection IOCs

Unusual system calls from esfhelper
Unexpected changes in file permissions

Source link

http://www.zerodayinitiative.com/advisories/ZDI-26-062/

// SOURCES

Zero Day Initiative — Original article ↗