Threat Watch– active
All incidents
More on Threat Watch
More Linux kernel incidents
- PHP2Shell / Fragnesia: Palo Alto Networks PAN-OS management interfaces — China-linked actors chain PHP RCE with kernel privesc to root firewalls (CVE-2026-109618, CVE-2026-109619, CVE-2026-46300) Critical · Breach
- VMware ESX insufficient logging zero-day (CVE-2026-41709) exploited by Warp Panda; PHP2Shell/Fragnesia chains root firewalls High · Patch now
- Linux KSMBD: Two CVSS 9.0 pre-auth/transport RCE flaws disclosed publicly before kernel fixes available Critical · Patch now
- Linux KVM: guest-to-host escape via malformed IPv4 checksum metadata lets guest VMs compromise the host (CVE-2026-99999) Critical · Patch now
- Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability (CVE-2025-39682) Critical · Patch now · Closed
- Linux Kernel Out-of-Bounds Write Vulnerability (CVE-2026-53266) High · Patch now · Closed
Browse
Helix Cyber
Is your stack exposed? Get it tested.
The incidents above hit someone else first. A Helix pentest finds what an attacker would use against your web apps, APIs and cloud. A second agent verifies each finding, and retests run from the same portal.