Update your Veeam Software Appliance and Backup & Replication servers now to fix CVE-2026-98432, a critical 9.8 CVSS Linux kernel flaw.

Related Posts:

• Penpot File Takeover Flaw Details and PoC Exploit Publicly Disclosed
• Attackers Exploit SonicWall SonicOS SSLVPN Flaw CVE-2026-19868 in the Wild
• JetBrains Patches 61 Flaws Across Hub, Datalore, YouTrack, and IntelliJ IDEA

The post Veeam Releases Kernel Updates to Fix Critical CVE-2026-98432 Flaw Across Backup Appliances appeared first on Daily CyberSecurity.

An upcoming OpenAI cyber model found 1,724 Linux kernel vulnerabilities and built 948 local root exploits to help maintainers patch critical bugs.

Related Posts:

• Linux 7.4 Merge Window Sets Record with AI Patches
• OpenBSD 8.0 Release Introduces Kernel Hardening and Day-One Errata
• GNOME OS Preview Brings GNOME 51.1 to the Public

The post OpenAI Cyber Model Uncovers 1,724 Linux Kernel Vulnerabilities and Builds 948 Root Exploits appeared first on Daily CyberSecurity.

Ubuntu puts fixes for CVE-2026-98432, a Linux kernel TCP flaw rated CVSS 9.8, in the proposed pocket for 22.04 LTS and newer. Older releases wait.

Related Posts:

• cPGuard Supply Chain Attack Pushes Backdoor Through Update Channel
• TeamViewer Client Vulnerability Enables Remote Code Execution
• 7 Unpatched phpMyAdmin Vulnerabilities Exposed

The post Ubuntu Kernel Fixes for CVE-2026-98432 (CVSS 9.8) Land in Proposed Pocket appeared first on Daily CyberSecurity.

Arista fixed critical Arista security vulnerabilities CVE-2026-111497 and CVE-2026-98432 that allow unauthenticated remote code execution. Update now.

Related Posts:

• Ubuntu Kernel Fixes for CVE-2026-98432 (CVSS 9.8) Land in Proposed Pocket
• cPGuard Supply Chain Attack Pushes Backdoor Through Update Channel
• TeamViewer Client Vulnerability Enables Remote Code Execution

The post Arista Security Vulnerabilities Risk Remote Code Execution appeared first on Daily CyberSecurity.

Details and a Linux kernel vulnerability PoC exploit are public for CVE-2026-31419. Patch this high-severity flaw to prevent local privilege escalation.

Related Posts:

• Critical MediaTek Vulnerabilities Patched in Chipsets
• Critical FreePBX Vulnerabilities Patched in User Manager
• Apache Wicket Fixes 19 Vulnerabilities in 8.20.0, 9.25.0 and 10.12.0

The post Public PoC Exploit Disclosed for Linux Kernel Bonding Vulnerability appeared first on Daily CyberSecurity.

A critical Linux kernel CVE-2026-98432 flaw enables remote root execution via MPTCP race conditions, impacting multiple distributions including Ubuntu.

Related Posts:

• Android SMS of Death Bug Triggers Remote Reboots
• JetBrains Patches Critical Flaws in IDEs and Background Services After Certificate Breach
• CERT/CC Warns of Xerj Authentication Bypass Flaw CVE-2026-97406

The post Linux Kernel CVE-2026-98432 Flaw Enables Remote Root appeared first on Daily CyberSecurity.

CISA adds Linux kernel vulnerability CVE-2026-46300, chained with PHP2Shell for root, and VMware ESX flaw CVE-2026-41709 to KEV. Patch now.

Related Posts:

• Kerio Connect Vulnerability CVE-2026-112353 Exploited in the Wild to Steal Mailboxes
• Apache Kafka Fixes 12 Vulnerabilities, Including a JWT Bypass That Grants Full Cluster Access
• FreeSWITCH Vulnerability CVE-2026-116779 Exploited in the Wild to Run Commands

The post CISA Adds Linux Kernel Flaw Chained With PHP2Shell and VMware ESX Bug to KEV appeared first on Daily CyberSecurity.

PoC and full details are public for the Linux nf_tables vulnerability CVE-2026-23111. The kernelCTF exploit gains root and escapes containers. Patch now.

Related Posts:

• Intelbras Camera Vulnerability Lets Attackers Knock Mibo Cameras Offline
• Body-Parser Flaw CVE-2026-111181 Lets One Request Crash Express Servers, PoC Public
• Unauthenticated File Read Leaks Master Key in LiteLLM Enterprise Proxy, CVSS 10.0

The post Details and PoC Exploit Released for Linux nf_tables Vulnerability CVE-2026-23111 appeared first on Daily CyberSecurity.

ZDI publicly posted details of unpatched Linux kernel vulnerabilities, including two CVSS 9.0 KSMBD remote code execution flaws. Fixes are pending.

Related Posts:

• Palo Alto Networks Confirms PHP2Shell Flaws Affect PAN-OS and Panorama
• PHP Warns of New Session Upload Progress Flaw CVE-2026-115560, Urges Mitigation
• LiteSpeed Cache Flaws Expose 7 Million WordPress Sites to Stored XSS

The post ZDI Posts Unpatched Linux Kernel Flaw Details and Attack Chains on Public Mailing List appeared first on Daily CyberSecurity.

The Linux Assisted-by tag is going away after maintainers agreed it misreports AI use, but human accountability stays.

Related Posts:

• GNOME OS Preview Brings GNOME 51.1 to the Public
• Ubuntu 26.10 Release Brings Rust Core and GNOME 51
• Claude Code Linux Kernel Patch Triples Read Speeds

The post Linux Assisted-by Tag Dropped for AI Patches appeared first on Daily CyberSecurity.

PwnEscape (CVE-2026-99999) is a critical Linux kernel VM escape that let a guest run code as root on the host in lab tests. Update your kernel now.

Related Posts:

• Roundcube 1.6.20 and 1.7.5 Fix 20 Security Flaws, Including IMAP Command Injection
• CISA Warns of Critical Flaws in dcm4chee Medical Archive and Unpatched EseeCloud IP Cameras
• Six Linux Kernel Flaws Disclosed With Public PoC Exploits for Root Access and Container Escape

The post PwnEscape Linux Kernel Flaw CVE-2026-99999 Lets VM Guests Escape to the Host appeared first on Daily CyberSecurity.

Details and PoC exploits are public for six Linux kernel vulnerabilities, including CVE-2026-98260, enabling privilege escalation. Patch now.

Related Posts:

• Roundcube 1.6.20 and 1.7.5 Fix 20 Security Flaws, Including IMAP Command Injection
• PwnEscape Linux Kernel Flaw CVE-2026-99999 Lets VM Guests Escape to the Host
• CISA Warns of Critical Flaws in dcm4chee Medical Archive and Unpatched EseeCloud IP Cameras

The post Six Linux Kernel Flaws Disclosed With Public PoC Exploits for Root Access and Container Escape appeared first on Daily CyberSecurity.

Linus Torvalds used a Claude Code Linux kernel patch to triple small data read speeds via RCU memory management, though the experimental code needs testing.

Related Posts:

• Epic Games Launcher Update Sparks Vibe Coding Backlash
• Ubuntu 27.04 Release Schedule: Tenacious T-Rex
• Raspberry Pi OS Update: Squashing Desktop Bugs

The post Claude Code Linux Kernel Patch Triples Read Speeds appeared first on Daily CyberSecurity.

Technical details and PoC exploit code for CVE-2026-74580 (Vghost), an 8.8-severity Linux vhost vulnerability allowing root LPE and VM escape, are out.

Related Posts:

• Public PoC Exploit Disclosed for CVSS 10.0 GitLab Remote Code Execution Flaw CVE-2026-97229 Affecting 25,766 Hosts
• Critical Nextcloud Collabora Online Flaw CVE-2026-110447 Actively Exploited in the Wild to Deploy Webshells
• CERT/CC Warns of Critical CVE-2026-110005 OS Command Injection in Komodo Periphery Agent

The post Public PoC Exploit Code and Technical Details Disclosed for CVE-2026-74580 Linux vhost Vulnerability (Vghost) appeared first on Daily CyberSecurity.

VUSec released details and PoC code for Branch Target Reuse, a Spectre-v2 attack on JIT engines that leaked Linux root password hashes. Patch now.

Related Posts:

• Critical Apache PLC4X Flaw Lets Attackers Hijack OPC UA Connections to PLCs
• TeamViewer Fixes Five High-Severity Flaws in Full Client and Host
• Electron Fixes Five High-Severity Sandbox and Isolation Vulnerabilities

The post Branch Target Reuse Spectre-v2 Attack: Full Details and PoC Code Released appeared first on Daily CyberSecurity.

Details for a critical Linux container escape flaw are public. Discover how this Linux container escape flaw works and review key mitigation steps.

Related Posts:

• macOS SMB Kernel Flaw CVE-2026-84543: Details and PoC Exploit Released
• Octopus Server Flaw CVE-2026-101169 Allows Code Execution via Insecure Deserialization
• Exploited Citrix NetScaler Flaw CVE-2026-88771: Details and PoC Now Public

The post Linux Container Escape Flaw Details and PoC Disclosed appeared first on Daily CyberSecurity.

Learn why Canonical accelerated Ubuntu kernel updates. A surge in CVEs prompted a shift to an overlapping two-week SRU cycle for faster vulnerability patching.

Related Posts:

• Ubuntu Desktop Stability Under Memory Pressure
• Debian 13.7 Released With 107 Security Updates
• Ubuntu 24.04.5 LTS Arrives With the Linux 7.0 Kernel

The post Canonical Overhauls Ubuntu Kernel Release Cycle appeared first on Daily CyberSecurity.

RustyTux is a public PoC for a Linux kernel privilege escalation via an ESP-in-TCP use-after-free (CVE-2026-23239). Details and exploit code are now public.

Related Posts:

• Critical ViewSonic vCast Vulnerabilities Enable Device Takeover
• MongoDB Driver Vulnerabilities Fixed Across Ecosystem
• High-Severity Apache Qpid Broker-J Vulnerabilities Fixed

The post RustyTux: Public PoC Exploit Targets Linux Kernel Privilege Escalation Flaw appeared first on Daily CyberSecurity.

This weekly CVE report tracks 4,378 new flaws and 10 exploited vulnerabilities, checked against the live CISA KEV catalog. See which bugs to patch first.

Related Posts:

• Daily Cybersecurity Flagged 9 Exploited Flaws Before CISA KEV
• Weekly CVE Report: Daily Cybersecurity Beats CISA KEV on Exploited Flaws
• Weekly CVE Report: 11 Exploited Flaws Added to KEV

The post Weekly CVE Report: 4,378 New Flaws and 10 Exploited Bugs appeared first on Daily CyberSecurity.

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Linux Kernel flaws to its Known Exploited Vulnerabilities catalog.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added [1, 2] the following vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog:

• CVE-2025-39682 – Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability
• CVE-2025-39964 Linux Kernel Race Condition Vulnerability
• CVE-2026-53266 Linux Kernel Out-of-Bounds Write Vulnerability

Below are detailed descriptions of the flaws:

• CVE-2025-39682 (CVSS score: 9.8) – A flaw in the TLS receive path that fails to properly handle unexpected conditions, potentially allowing authenticated local users to expose sensitive memory contents or cause a denial-of-service (DoS).
• CVE-2026-53266 (CVSS score: 8.8) – A memory corruption issue in the ebtables SNAT ARP rewrite path that could let a local attacker cause unexpected system behavior, crash the system, or gain elevated privileges.
• CVE-2025-39964 (CVSS score: 7.8) – A synchronization flaw affecting AF_ALG sockets that could allow simultaneous writes to interfere with each other, potentially crashing the system or affecting the integrity of cryptographic operations.

At the time of this writing, there are currently no details on how the three vulnerabilities are being exploited in the wild, or whether they are being used together as part of a single attack chain.

According to Binding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities, FCEB agencies have to address the identified vulnerabilities by the due date to protect their networks against attacks exploiting the flaws in the catalog.

Experts also recommend that private organizations review the Catalog and address the vulnerabilities in their infrastructure.

CISA orders federal agencies to fix the above vulnerabilities by September 21, 2026.

Follow me on Twitter: @securityaffairs and Facebook and Mastodon

Pierluigi Paganini

(SecurityAffairs – hacking, CISA)