PwnEscape (CVE-2026-99999): Patch Your Linux VM Hosts
If you host VMs for anyone you don’t fully trust, this one’s for you. CVE-2026-99999, nicknamed PwnEscape by the researchers, is a guest-to-host escape. Someone who…
Tag
CVE
CISA KEV: Atlassian CVE-2026-21589 + Linux TCP UAF
Two October 15 threads belong in one ops pass. CISA added CVE-2026-21589 — Atlassian multiple products, files/directories accessible to external parties — to the KEV catalog…
CISA Adds Four KEVs (Oct 14): PAN-OS, Cisco Email, AhsayCBS
On October 14, 2026, CISA added four CVEs to the Known Exploited Vulnerabilities catalog: CVE-2026-0322 (Palo Alto Networks PAN-OS code injection), CVE-2026-76519 (Cisco Secure Email Gateway…
Patch BeyondTrust Remote Support: Chinese APT Used CVE-2026-102764 as a Zero-Day
If you run self-hosted BeyondTrust Remote Support, stop and check your version. Per SecurityWeek, a China-linked espionage group has been exploiting CVE-2026-102764 (CVSS 9.3) as a…
Cisco Oct 7 Advisories: SSM On-Prem and NX-OS Hardening
Cisco published a cluster of advisories on October 7, including Smart Software Manager On-Prem access issues alongside NX-OS hardening notes. On the SSM advisory page, Cisco…