cve

Linux's stable kernels shipped fixes for CVE-2026-98432, a critical (CVSS 9.8) use-after-free in the IPv4 TCP handshake reachable by remote unauthenticated attackers; Anthropic reported the bug and says its Claude model wrote a working remote root exploit, while Ubuntu and RHEL remain unfixed.

Linux 河修复了 CVE-2026-98432，一个 CVSS 9.8 严重的 IPv4 TCP 握手 use-after-free 漏洞，可被远程未认证攻击者利用；Anthropic 的 Claude 生成了可远程 root 的 PoC，而 Ubuntu 和 RHEL 等主流发行版仍未发布修复补丁。

CVE-2026-116155 discloses a memory leak in ImageMagick's ParseInternalDoctype, where parameter-entity values from crafted XMP DOCTYPE internal subsets are never freed; users are advised to upgrade to ImageMagick 7.1.2-33 or 6.9.13-58 or block XMP profiles via policy.xml.

Akamai/Linode published a customer security advisory regarding CVE-2026-98432, a recently disclosed remote code execution vulnerability, stating that it is actively investigating and applying mitigations while monitoring its platform.

HuggingModels 分享了一个基于 RoBERTa 的模型，可自动对漏洞报告的严重程度进行分类，训练数据来自真实的漏洞评分，旨在帮助安全团队更高效地处理海量 CVE。

CVE-2026-98432 is a use-after-free in the Linux kernel's IPv4 TCP handshake path that could allow remote exploitation, with a Linux CNA CVSS of 9.8 and Red Hat's preliminary 8.1 score, while Anthropic's Frontier Red Team demonstrated remote root execution against an MPTCP listener; the article reviews patch validation and distribution-specific remediation steps.

Linux 内核 MPTCP TCP 缺陷被评为 9.8 CVSS，Anthropic 演示了可在服务器上以 root 权限执行命令的漏洞利用，Ubuntu 和 RHEL 尚未修复，而 Debian、Oracle 等已发布部分补丁。

Alpine Linux reported a security incident in which an attacker attempted to exploit critical GitLab vulnerability CVE-2026-97229 (a CVSS 10.0 bug in Ruby's Onigmo regex engine affecting CI configuration parsing), prompting a full rebuild of its GitLab instance and password resets. The post warns that upgrading GitLab alone is insufficient because the fix lives in a bundled Ruby patch, requiring Ruby 3.3.13/3.4.12/4.0.9 or later.

A critical 9.5-rated memory-corruption vulnerability (CVE-2026-97631) in the TianoCore EDK II UEFI firmware codebase affects most servers worldwide, exposing the pre-boot chain of trust after an accidental premature disclosure via an AMI pull request.

一个评分 9.5/10 的严重 UEFI 固件漏洞（CVE-2026-97631）出现在几乎所有服务器厂商使用的 TianoCore EDK2 代码库的 ICMP 组件中，可在 Secure Boot 生效前执行代码，且补丁已提前泄露。

Gentoo developer Michał Górny reflects on the worsening state of open-source security maintenance, arguing that AI-generated vulnerability reports and automated scanners are overwhelming maintainers with low-signal CVEs and unnecessary stabilization work. He warns the ecosystem is sliding into a new 'circle of security hell' where projects lack the processes to handle security releases properly.

FoxIO披露了GoAhead嵌入式Web服务器中三个独立的TLS漏洞：OpenSSL后端未强制执行CRL吊销检查（CVSS 9.1）、LibreSSL旧版验证器可绕过证书链深度限制（CVSS 7.4），以及Mbed TLS后端的DH参数缓冲区错误导致TLS 1.2会话可被解密（CVSS 5.9），影响数亿台IoT、防火墙和工业控制设备，建议升级至6.1.1或更高版本。

OpenAI 的红队演练发现 Brotli 压缩库存在未认证远程代码执行漏洞，影响 Node.js、Bun、Envoy 等广泛部署的软件；相关修复已通过 CVE 和下游安全更新发布。

pwn.watch 实时安全事件汇总：美国主要银行发现客户账户中存在未经授权的第三方 AI 代理，GitLab 披露 CVSS 10.0 未认证 RCE 漏洞（CVE-2026-110264），以及多个未修补的 Linux 内核高危漏洞细节被意外公开至公共邮件列表。

Trend Micro's Zero Day Initiative accidentally disclosed multiple high-severity Linux kernel vulnerabilities (up to CVSS 9.0) on the public LKML instead of the private security list, prompting responses from Greg Kroah-Hartman as patches are expedited.

A Hacker News poster apologizes for unknowingly breaking the embargo on two critical PHP remote code execution vulnerabilities (CVE-2026-109618 and CVE-2026-109619), disrupting the coordinated disclosure schedule.

A tweet speculating about the unknown CVEs and zero-day vulnerabilities that national agencies or large AI companies may have discovered and kept undisclosed for months or longer.

Two PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619, were independently discovered by a frontier AI model after being given only the prompt "find bad vulnerabilities in PHP".

The author argues that the latest high-profile PHP vulnerability is far less exploitable than Log4Shell or Heartbleed, and that the thousands of circulating 'PoC' exploits are largely broken artifacts generated by LLMs that modify test environments instead of chaining the real bug.

CZ warns users to be cautious browsing the web after two critical PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619) affecting WordPress and Magento servers were exploited in the wild following an early leak, prompting patches and WAF protections.