New Zapscape KVM Flaw Could Let Privileged L1 Guest Code Escape to Linux Hosts
A newly disclosed Linux kernel vulnerability, dubbed Zapscape and tracked as CVE-2026-64561, could allow an attacker with kernel privileges inside an L1…
Tag: Debian
Nine-Year-Old RefluXFS Linux Flaw Gives Local Users Root on Default RHEL Installs
A critical Linux kernel vulnerability, tracked as CVE-2026-64600 and named RefluXFS, has been disclosed by Qualys. The flaw, present in Linux kernels…
Debian — Cybersecurity product profile
Debian was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
Public PoC Released for Critical libssh2 CVE-2026-55200 Client-Side SSH Flaw
A public proof-of-concept (PoC) has been released for CVE-2026-55200, a critical vulnerability in the libssh2 client-side SSH library. The flaw, with a…
New Linux ‘pedit COW’ Exploit Grants Root Access by Poisoning Cached Binaries
A critical vulnerability in the Linux kernel's traffic-control subsystem, tracked as CVE-2026-46331 and nicknamed 'pedit COW,' allows a local unprivileged user to…
Debian Security Tracker for Zapscape KVM Flaw
Debian's security tracker listed bullseye, bookworm, trixie, and forky kernel packages as vulnerable to CVE-2026-64561, with sid fixed at version 7.1.6-1.
29-Year-Old Squid Proxy Bug ‘Squidbleed’ Leaks Cleartext HTTP Requests
A critical heap over-read vulnerability in the Squid web proxy, dubbed 'Squidbleed' (CVE-2026-47729), can leak cleartext HTTP requests—including credentials and session tokens—to…