CVE-2026-41651

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

April 24, 2026

Last Seen

May 8, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical Vulnerabilities Discovered in CrowdStrike LogScale and Other Security Tools74.0

CrowdStrike disclosed a critical vulnerability (CVE-2026-40050) in its LogScale product, allowing unauthenticated attackers to exploit a path traversal flaw to access sensitive files. This vulnerability affects self-hosted LogScale customers, while SaaS users have been mitigated. Additionally, Tenab...

Critical Linux Vulnerability 'Copy Fail' Grants Root Access Across Major Distros72.9

A newly disclosed vulnerability in the Linux kernel, tracked as CVE-2026-31431 and named 'Copy Fail', allows unprivileged local users to gain root access on virtually all major Linux distributions released since 2017. The exploit, which is a 732-byte Python script, modifies the page cache of any rea...

Multiple CVEs Addressed in Recent Oracle9 Security Updates70.5

Oracle9 has released security updates addressing several vulnerabilities, including CVE-2026-4786 and CVE-2026-6100, which were published on April 13, 2026. The updates also include fixes for CVE-2026-4519, published on March 20, 2026, and CVE-2026-0865, CVE-2025-15366, CVE-2025-15367, and CVE-2026-...

Critical Pack2TheRoot Vulnerability Exposes Linux Systems to Local Privilege Escalation70.5

A high-severity vulnerability identified as CVE-2026-41651 affects the PackageKit daemon, allowing local unprivileged users to gain root access on Linux systems. Discovered by Deutsche Telekom's Red Team, the flaw enables unauthorized installation and removal of system packages. The vulnerability ha...