Vulnerability Overview
Exploitation Activity
Exploitation Intelligence
CVE-2026-98432 is a critical use-after-free vulnerability in the Linux kernel's TCP handshake code, rated 9.8 on the CVSS scale. It affects various Linux distributions, including Ubuntu and Red Hat Enterprise Linux (RHEL), allowing unauthenticated remote code execution under specific conditions, par...
A privilege-escalation vulnerability, CVE-2026-94384, was discovered in AWS's Lambda function, sfExecuteAWSService, which allows IAM principals to bypass permissions and execute unauthorized AWS API operations. AWS patched the flaw in June 2026, but the advisory was only published on September 22, l...
In 2026, container vulnerability scanning has become as 82% of users run Kubernetes in production. The top tools include Trivy, Grype, Snyk Container, and Docker Scout, each offering unique features and pricing structures. The rise of Software Bill of Materials (SBOM) requirements and supply-chain s...