#ParsedReport #CompletenessLow
15-09-2026

ParaShells: Parallels Desktop Turns Appliance Install Into a Root Shell

https://jfrog.com/blog/parallels-desktop-turns-appliance-install-into-root-shell/

Report completeness: Low

Threats:
Parashells

Victims:
Parallels desktop for mac users, Developer laptops, Universities, Corporate training rooms

Industry:
Education

CVEs:
CVE-2026-90894 [Vulners]
CVSS V3.1: 7.8,
Vulners: Exploitation: Unknown


TTPs:
Tactics: 2
Technics: 0

ChatGPT TTPs:
do not use without manual check
T1059.006, T1068, T1202, T1559

IOCs:
File: 1

Soft:
Unix, macOS, sudo

Algorithms:
md5

Functions:
InstallAppliance

Languages:
python

Platforms:
arm, apple