CVE Cybersecurity News

Critical Linux Kernel Flaw Allows Unprivileged Users to Gain Root Access

RedSide Security June 28, 2026 CVE 55 views

Critical Linux kernel vulnerability CVE-2026-46331 allows unprivileged users to gain root access by exploiting a page-cache corruption flaw in the net/sched act_pedit subsystem. The issue affects Linux kernels 5.18 through 7.1-rc6 and has been successfully demonstrated against RHEL, Debian, and Ubuntu systems.

cybersecurity vulnerability patching alerts exploitation privilege escalation CVE threat actors Linux exploit news

Continue reading: Critical Linux Kernel Flaw Allows Unprivileged Use…

Microsoft Patches SharePoint RCE Flaw CVE-2026-45659 Across Server Versions

RedSide Security May 27, 2026 CVE 119 views

cybersecurity infosec vulnerability patching hardening authentication authorization alerts exploitation malware phishing exploit threat-actors news monitoring attack-prevention privilege-escalation endpoint-security-threat-intelligence cve rce data-breach microsoft sharepoint windows security-operations

Continue reading: Microsoft Patches SharePoint RCE Flaw CVE-2026-456…

NGINX CVE-2026-42945 Exploited in the Wild, Causing Worker Crashes and Possible RCE

RedSide Security May 17, 2026 CVE 90 views

A critical NGINX vulnerability tracked as CVE-2026-42945 is now being actively exploited in the wild, just days after public disclosure. The flaw allows attackers to crash NGINX worker processes and potentially achieve remote code execution under specific conditions. At the same time, threat actors have also begun weaponizing multiple critical vulnerabilities in openDCIM to deploy PHP web shells and gain remote access to exposed systems.

cybersecurity infosec vulnerability patching hardening alerts exploitation malware exploit threat-actors news monitoring attack-prevention endpoint-security-threat-intelligence nginx cve rce opensource linux threat-detection

Continue reading: NGINX CVE-2026-42945 Exploited in the Wild, Causin…

Linux Kernel Dirty Frag LPE Exploit Enables Root Access Across Major Distributions

RedSide Security May 10, 2026 CVE 86 views

A newly disclosed Linux kernel vulnerability chain, dubbed **Dirty Frag**, enables unprivileged local users to gain root access across major Linux distributions. The flaw combines two page-cache write issues in the xfrm-ESP and RxRPC subsystems, creating a deterministic and highly reliable privilege escalation method. Limited in-the-wild exploitation has already been observed, with attackers using it in post-SSH compromise scenarios.

cybersecurity vulnerability exploitation privilege escalation Linux

Continue reading: Linux Kernel Dirty Frag LPE Exploit Enables Root A…