Vulnerability Overview
Exploitation Activity
Exploitation Intelligence
A newly disclosed Linux kernel vulnerability, named Bad Epoll (CVE-2026-46242), allows unprivileged local users to escalate to root privileges on systems running kernel version 6.4 or later. This use-after-free vulnerability resides in the epoll subsystem, which is critical for I/O event notificatio...
A series of vulnerabilities, including CVE-2025-49144, CVE-2025-31702, and CVE-2026-46333, have been identified, affecting systems like Notepad++ and FortiWeb devices. These vulnerabilities allow for local privilege escalation, SQL injection, and remote code execution. Attackers exploit these flaws...
A critical vulnerability in Linux KVM, named Januscape (CVE-2026-53359), has been discovered after lying dormant for 16 years. This flaw allows attackers with root access in a guest virtual machine to escape to the host and execute arbitrary code, affecting both Intel and AMD systems. The vulnerabil...
The traditional 90-day vulnerability disclosure policy is deemed ineffective as AI accelerates bug detection and exploitation. Security expert Himanshu Anand highlights that AI tools can convert security patches into working exploits in as little as 30 minutes, undermining the rationale for the leng...
