The Hacker News پنجشنبه ۷ آبان ۱۴۰۵ · ۱۹:۲۷

Linux Kernel TCP Flaw With 9.8 CVSS Score Affects Ubuntu, Red Hat and Other Distributions

A flaw in the Linux kernel's TCP code, tracked as CVE-2026-98432, affects Ubuntu, Red Hat Enterprise Linux (RHEL), and other Linux distributions. The kernel's own CVE team rates it 9.8 out of 10 on the CVSS scale. Anthropic said on October 27 that its AI model wrote an exploit that uses the flaw to let a remote attacker with no credentials run commands as root on Linux servers with a

Vulnerabilities & Zero-Day Networking & Internet Operating Systems

Read the full article at The Hacker News Removal request

This page shows only the headline and the short summary. The full text is published by the original source.

Related news

Full archive →

Dark Reading پنجشنبه ۷ آبان ۱۴۰۵ · ۲۱:۴۵

Claude Model Builds Exploits Across Major Browsers & OSes

An unreleased version of the AI model has found and chained multiple vulnerabilities in Chrome, Safari, Android, Windows, and Linux, Anthropic says.

Vulnerabilities & Zero-Day Mobile Development Operating Systems

منبع

Unit 42 (Palo Alto) پنجشنبه ۷ آبان ۱۴۰۵ · ۲۱:۳۰

Threat Brief: Critical Vulnerabilities in PHP: CVE-2026-109618, CVE-2026-109619 (Updated October 29)

CVE-2026-109618 and CVE-2026-109619 are Critical vulnerabilities in PHP, a scripting language used globally for web servers and CMS systems. The post Threat Brief: Critical Vulnerabilities in PHP: CVE-2026-109618, CVE-2026-109619 (Updated October 29) appeared first on Unit 42.

Vulnerabilities & Zero-Day

منبع

AWS Security Bulletins پنجشنبه ۷ آبان ۱۴۰۵ · ۲۰:۱۵

CVE-2026-119115 - Incorrect authorization in issuer resolution in AWS Private CA Connector for Kubernetes

Bulletin ID: 2026-156-AWS Publication Date: 10/29/2026 09:30 AM PDT Description: We are aware of CVE-2026-119115, an incorrect authorization issue in the issuer resolution logic. In affected versions, under certain conditions, an authenticated user whose approval policy only authorizes a namespace-scoped issuer could obtain certificates, including subordinate CA certificates, signed by a cluster-scoped issuer they ar…

Vulnerabilities & Zero-Day Cloud Security Cloud Computing

منبع

Help Net Security پنجشنبه ۷ آبان ۱۴۰۵ · ۱۹:۵۵

Chinese hackers used VMware ESX zero-day; PHP2Shell and Fragnesia chained to root firewalls

China-nexus threat actors have exploited a VMware ESX zero-day to hide their tracks and chained PHP2Shell flaws with the “Fragnesia” Linux kernel bug to root servers and firewalls, cybersecurity researchers claim. Cisco has also confirmed that attackers are crashing its firewalls with a newly disclosed vulnerability. VMware ESX zero-day helped Chinese spies cover their tracks Chinese APT group Warp Panda has leverage…

Vulnerabilities & Zero-Day Threat Intelligence Operating Systems

منبع