Critical PwnEscape Linux Kernel Vulnerability Lets Guest VMs Read Host Memory

2026-10-16T01:24:00Z•338e4c078ae461665a48f4a3a65844fedd16053c1a43df87a133e9e07946fa4b
CVE-2026-0322CVE-2026-104935CVE-2026-105133CVE-2026-105134CVE-2026-105740CVE-2026-99999active-exploitationauthentication-bypasscloud-securitycontainer-escapecredential-theftcryptominingguest-to-host-escapelinux-kernelmalwarenetwork-appliancesphishingransomwareremote-code-executionsoftware-updatesspywarestate-sponsored-threatssupply-chain-securityvirtualization-securityweb-application-securityzero-click-exploit

What happened

The feed reports multiple critical and actively exploited vulnerabilities and campaigns, including guest-to-host memory disclosure in the Linux kernel, unauthenticated or authenticated remote code execution in Next.js, Drupal, PAN-OS, Langflow, AhsayCBS, Cisco Secure Email Gateway, and Nextcloud-related software, plus Ivanti authentication bypass. It also covers major phishing, credential theft, spyware, malware, supply-chain, cloud, and state-linked threat activity. Several entries involve exploitation in the wild or confirmed attacks, creating substantial risk for exposed internet-facing, un

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
the_hacker_news
Record identifier
338e4c078ae461665a48f4a3a65844fedd16053c1a43df87a133e9e07946fa4b
Enrichment time
2026-10-16T01:24:00Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.