Easy

CCTV, an easy Linux machine that exposes a real-world camera management stack where default credentials open the door and a misconfigured service hands you root.

Planning, an easy level Linux machine exploiting a Grafana RCE CVE, escaping Docker via leaked SSH creds, and abusing a cron web panel to execute commands as root.