Resultados

2 casos · pág. 1/1

yokai.hakaisecurity.io · há 2d high

CVE-2026-4802: Cockpit command injection lets low-privilege authenticated users gain RCE via journal log filters; public PoC released

A command injection vulnerability, CVE-2026-4802, was disclosed in Cockpit, the web-based Linux administration tool from Red Hat. It was found by Hakai's Research team. Any authenticated user, including low-privilege accounts such as viewer, can inject OS commands through the system logs filter feature and obtain remote code execution on …

CVE-2026-4802

thehackernews.com · há 2d · 2 fontes · 2 atualizações high

PwnEscape (CVE-2026-99999): Linux kernel networking flaw lets guest VMs leak host memory, demonstrated on Vercel sandboxes

A critical Linux kernel networking flaw, CVE-2026-99999 (nicknamed PwnEscape, CVSS 9.3), lets code inside a guest VM read host memory, crash the host and, in lab conditions, run code on it. Researcher Paulos Yibelo of pwn.ai demonstrated the memory leak against Vercel's production sandboxes, which Vercel confirmed. The flaw was found in a…

CVE-2026-99999 cloud computing