Bringing AI Code Security into Qualys ETM
2026-05-12T08:51:55Z•d7897e1a3ecc739fb887189d251d9bcd95683c14d33d0e53f019154e7e9eabaf
ai-code-securitydirty-fraglinuxlocal-privilege-escalationmicrosoft-defenderoracle-cpu-april-2026patch-managementqualys-totalairedsunremediationtotalcloudvmdrvuln-researchvulnerability-managementzero-day
What happened
The feed highlights multiple high-risk vulnerabilities and product/security updates: a newly disclosed Linux local privilege escalation chain called “Dirty Frag” (combining two kernel issues) with CVE-2026-43284 patched in mainline Linux and related reporting for CVE-2026-43500; a Microsoft Defender zero-day LPE dubbed “RedSun” that enables SYSTEM access and requires mitigation prior to a vendor patch; Oracle’s April 2026 Critical Patch Update addressing 481 vulnerabilities; and several Qualys product/security announcements (Qualys TotalAI FedRAMP Moderate authorization, AI-code-security work,
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- qualys_blog
- Record identifier
- d7897e1a3ecc739fb887189d251d9bcd95683c14d33d0e53f019154e7e9eabaf
- Enrichment time
- 2026-05-12T08:51:55Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.