Apache Airflow example Dag allows shell injection via IPv6 zone (CVE-2026-101031)
The example_dag_decorator Dag places IPv6 zone identifiers into shell commands when triggered with load_examples enabled.
Stories per day · 30 days
2 RSS
Related6to41airflow1aisuru1botnet1carpet-bombing1ddos1denial-of-service1example-dag1extension-headers1gre1integer-underflow1linux-kernel1local1netscout1privilege-escalation1residential-proxy1shell-injection1tunneling1
22 stories, newest first · one card per story
Stories tagged #ipv6
Linux kernel IPv6 AH routing header bug enables local privilege escalation
ZDI rates CVE-2026-80844 at CVSS 8.8; an attacker needs low-privileged code execution first.
Researchers turn permissive IPv6 tunnels into pulsing denial-of-service lines
Forty-four scans found 1,909,440 forwarding tunnel hosts; a controlled test peaked above 180 times the average send rate inside 20 ms.
DDoS attacks can knock services offline before links reach capacity
NETSCOUT logged 9.1 million DDoS attacks in H1 2026, with terabit-scale floods up 1,286%.
Explainable Rule Mining of IPv6 Extension-Header Presence Patterns from Paired-Vantage Captures
IPv6 Fragment extension-header rules from JAMES captures reflect within-packet co-occurrence, not temporal dynamics.
USN-8864-1: Linux kernel vulnerabilities
Ubuntu patched Linux kernel flaws in NFS, IPv6, and Netfilter that could let an attacker compromise the system.
USN-8851-2: Linux kernel (Raspberry Pi) vulnerabilities
Ubuntu patched Raspberry Pi Linux kernel flaws in NFS, IPv6, and Netfilter that could compromise systems.
USN-8851-1: Linux kernel vulnerabilities
Ubuntu USN-8851-1 patches three Linux kernel flaws in NFS server daemon, IPv6, and Netfilter that could allow system compromise.
USN-8819-4: Linux kernel (FIPS) vulnerabilities
Ubuntu FIPS kernel update fixes NFS, IPv6, and Netfilter flaws CVE-2025-38724, CVE-2026-53131, and CVE-2026-53221.
USN-8819-3: Linux kernel vulnerabilities
Ubuntu kernel update fixes NFS, IPv6, and Netfilter flaws tracked as three CVEs.
Metasploit Wrap Up: Belgian Waffles, Chocolates, and…Modules-Frites?
Metasploit 6.5.5 adds modules for in-the-wild GitLab file read, IPv6 DNS takeover, and Langflow RCE.
6
USN-8819-2: Linux kernel vulnerabilities
Ubuntu kernel notice USN-8819-2 patches NFS, IPv6, and Netfilter flaws, including three CVEs.
USN-8819-1: Linux kernel vulnerabilities
Ubuntu patches Linux kernel flaws in NFS server, IPv6, and Netfilter that could let attackers compromise systems.
USN-8730-5: Linux kernel vulnerability
Ubuntu patches a Linux kernel flaw affecting IPv6 networking and Netfilter that could compromise systems.
USN-8730-4: Linux kernel vulnerability
Ubuntu patches unspecified vulnerabilities in the Linux kernel's IPv6 and Netfilter components.
USN-8730-3: Linux kernel (Azure) vulnerability
Ubuntu USN-8730-3 updates the Azure Linux kernel to fix security issues in the IPv6 networking and Netfilter subsystems.
MacOS 27 - First Boot, (Tue, Sep 15th)
SANS ISC documents the expected network traffic macOS 27 'Golden Gate' generates on first boot to help defenders baseline their networks.
USN-8730-2: Linux kernel (Azure) vulnerability
Ubuntu fixes a Linux kernel (Azure) vulnerability in the IPv6 networking and Netfilter subsystems.
ZDI-26-683: Linux Kernel IPv6 VTI Subsystem Use-After-Free Local Privilege Escalation Vulnerability
ZDI discloses CVE-2026-72463, a CVSS 7.5 use-after-free in the Linux Kernel IPv6 VTI subsystem enabling privilege escalation.
ZDI-26-682: Linux Kernel IPv6 Neighbour Discovery Uninitialized Memory Information Disclosure Vulnerability
ZDI discloses an uninitialized-memory flaw in Linux kernel IPv6 neighbor discovery (CVE-2026-43040, CVSS 6.0) allowing information disclosure by already-privileged local attackers.
ZDI-26-623: Linux Kernel IPv6 Multicast Routing Use-After-Free Local Privilege Escalation Vulnerability
ZDI-26-623 details a use-after-free in Linux kernel IPv6 multicast routing enabling local privilege escalation, rated CVSS 8.8.
USN-8730-1: Linux kernel vulnerability
Ubuntu issued USN-8730-1 fixing Linux kernel flaws in IPv6 networking and Netfilter that could allow system compromise.