Public Exploit for Linux Kernel ‘Vghost’ Bug Shows Route From Local Access to Root, and Possibly VM Escape
Researchers have released a working proof-of-concept exploit for CVE-2026-74580, a high-severity Linux kernel flaw in the vhost networking subsystem that can let a local user escalate to root,...
AI-Driven Zammad Attack Chained Two Zero-Days to Reach Root in Seconds
An AI-assisted intruder compromised the Dutch Institute for Vulnerability Disclosure by chaining two previously unknown Zammad flaws. The incident moved from session hijacking to root access in seconds...
Red Hat Satellite Authorization Flaw Can Expose Root Passwords and Enable Code Execution
Red Hat has patched a CVSS 9.1 authorization flaw in Satellite's Foreman component that lets low-privileged users view protected host data, potentially including root passwords. Unsafe Safemode configurations...
Debian’s Massive 1,313-CVE Kernel Update: What Administrators Actually Need to Know
Debian's DSA-6528-1 advisory bundles fixes for 1,313 CVEs into a single kernel update for Trixie, addressing privilege escalation, denial-of-service, and information-leak risks. The headline number is less alarming...
CopyEscape Flaw Turns Docker File Copies Into a Route to Host Root
A flaw in Docker’s archive extraction path can let a hostile container write beyond the destination chosen for a file copy. On Linux systems where the command runs...
Actively Exploited Linux Kernel Race Condition Enables Root and Container Escape
A race condition in Linux’s AF_ALG cryptographic interface can give an unprivileged local attacker root access and may support Docker container escape. CISA lists CVE-2025-39964 as exploited in...
cPanel Security Update Closes Root Escalation and Cross-Tenant Data Access Flaws
cPanel has fixed three flaws that break tenant isolation, including a root-level privilege escalation and cross-account access to calendars, contacts, and WordPress databases. Hosting providers need both current...
Steam Windows Zero-Day Turns Local Access Into Full SYSTEM Control
A newly disclosed weakness in the Steam Client Service reportedly lets a standard Windows user execute code with SYSTEM privileges. With no confirmed vendor fix at publication time,...