KEV NEW Linux
100 CISA Adds One Known Exploited Vulnerability to Catalog
This CVE is actively exploited and added to CISA's KEV catalog, requiring immediate patching of affected Linux systems.
Critical
CVSS
7.8
EPSS
3%
Archive view — this data may be outdated.
CTI status
Joel Traber AG
As of:
Last pipeline run:
Status High
All threats
Sorted by KEV · Risk · EPSS KEV NEW Linux
100 Dangerous New Linux Exploit Gives Attackers Root Access to Countless Computers
This alert describes a specific active exploit (CopyFail) with root access capabilities, not just a patch reminder, and highlights that many systems remain unpatched.
Critical
CVSS
7.8
EPSS
3%
KEV NEW Linux
100 Metasploit Wrap-Up 05/01/2026
Public PoC and Metasploit module for a Linux kernel cryptographic API logic flaw enabling local privilege escalation on AMD64/AARCH64 systems.
Critical
CVSS
7.8
EPSS
3%
KEV NEW Dell
50 vSphere and BRICKSTORM Malware: A Defender's Guide
The BRICKSTORM malware exploits vCenter SSO to establish persistence and evade detection, requiring MFA and real-time alerting on SSO account actions.
Critical
CVSS
10.0
EPSS
22%
NEW
100 CVE-2026-22167
This vulnerability allows a non-privileged user to corrupt kernel memory via GPU system calls, which could be exploited in multi-tenant virtualization environments like VMware ESXi to break isolation.
High
CVSS
7.8
EPSS
0%
NEW Linux
0 CVE-2026-31700
This is a newly disclosed Linux kernel vulnerability with a TOCTOU race condition in the packet socket subsystem that could allow local privilege escalation.
Low
EPSS
0%
NEW Linux
0 CVE-2026-31709
This CVE describes a newly discovered vulnerability in the Linux kernel's SMB client that allows a malicious server to corrupt memory via a crafted DACL, going beyond a simple patch reminder by detailing the specific flaw in ACL validation.
Low
EPSS
0%
NEW Linux
0 CVE-2026-31711
An unauthenticated remote attacker can exhaust the max_connections pool by triggering memory allocation failures via crafted TCP connections, causing permanent denial of service until module reload.
Low
EPSS
0%
NEW Linux
0 CVE-2026-31774
This vulnerability describes a specific slab-out-of-bounds read in io_uring that can be triggered by passing large sqe->len values, potentially leading to memory corruption or information disclosure.
Low
EPSS
0%
NEW Linux
0 CVE-2026-43016
This is a newly disclosed use-after-free vulnerability in the Linux kernel's BPF sockmap subsystem that could allow local privilege escalation or denial of service.
Low
EPSS
0%
NEW Linux
0 CVE-2026-43043
This is a newly disclosed vulnerability with no active exploitation reported yet, but it poses a high risk of kernel panic for systems using AF_ALG crypto operations.
Low
EPSS
0%