CVE-2026-35370 — The id utility in uutils coreutils miscalculates the groups= section of its output. The implementation uses a user's real GID instead of their effective GID to compute the group list, leading to p — CVE Database · The Intelligence Room