Critical PwnEscape Linux Kernel Vulnerability Lets Guest VMs Read Host Memory
2026-10-16T01:24:00Z•338e4c078ae461665a48f4a3a65844fedd16053c1a43df87a133e9e07946fa4b
CVE-2026-0322CVE-2026-104935CVE-2026-105133CVE-2026-105134CVE-2026-105740CVE-2026-99999active-exploitationauthentication-bypasscloud-securitycontainer-escapecredential-theftcryptominingguest-to-host-escapelinux-kernelmalwarenetwork-appliancesphishingransomwareremote-code-executionsoftware-updatesspywarestate-sponsored-threatssupply-chain-securityvirtualization-securityweb-application-securityzero-click-exploit
What happened
The feed reports multiple critical and actively exploited vulnerabilities and campaigns, including guest-to-host memory disclosure in the Linux kernel, unauthenticated or authenticated remote code execution in Next.js, Drupal, PAN-OS, Langflow, AhsayCBS, Cisco Secure Email Gateway, and Nextcloud-related software, plus Ivanti authentication bypass. It also covers major phishing, credential theft, spyware, malware, supply-chain, cloud, and state-linked threat activity. Several entries involve exploitation in the wild or confirmed attacks, creating substantial risk for exposed internet-facing, un
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- the_hacker_news
- Record identifier
- 338e4c078ae461665a48f4a3a65844fedd16053c1a43df87a133e9e07946fa4b
- Enrichment time
- 2026-10-16T01:24:00Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.