ESET reviews a week of PHP, kernel, and LiteLLM incidents
PHP fixes shipped October 21; nine firms, including ESET, told NBC News they had seen no successful PHP2Shell attacks.
1
Stories per day · 30 days
1 RSS
Relatedlinux-kernel6privilege-escalation3zdi3litellm2remote-code-execution2zero-day-initiative2bind1disclosure1gitlab1kernel1linux1nodejs1php1proof-of-concept1rce1smb1smb-direct1supply-chain1
10 stories, newest first · one card per story
Stories tagged #ksmbd
Public Linux kernel root exploit appears before a CVE or fix
Sysdig says six ZDI reports went to lists on October 20–21, and several still lack a released-kernel fix.
1
Unpatched Linux KSMBD flaws disclosed, including two remote code execution bugs
Neither CVSS 9.0 KSMBD issue had a CVE or a mainline fix as of October 23, 2026.
1
Unpatched Linux KSMBD flaws rated CVSS 9.0 posted before fixes
ZDI reports describe remote code execution in the kernel SMB server; no CVE or mainline fix is named.
1
Two unfixed Linux KSMBD flaws allow remote code execution, CVSS 9.0
One flaw needs no authentication on port 445; neither has a CVE or a confirmed mainline fix.
pwn.watch lists GitLab RCE, leaked kernel bugs and LiteLLM compromise
The same live feed also covers BIND GSS-TSIG memory corruption, Node.js security releases, bank AI-agent logins and a Railway environment-variable incident.
14
Unpatched Linux kernel flaws posted to the public LKML
Trend Micro ZDI reports include two CVSS 9.0 remote code execution issues; mainline fixes are not out, though some patches are in testing.
ZDI-26-684: Linux Kernel KSMBD Query Directory Request Race Condition Remote Code Execution Vulnerability
ZDI discloses CVE-2026-64397, a CVSS 9.0 unauthenticated remote code execution race condition in Linux Kernel KSMBD.
ZDI-26-693: Linux Kernel ksmbd Share Configuration Race Condition Remote Code Execution Vulnerability
ZDI-26-693: authenticated race condition in Linux kernel ksmbd share configuration allows remote code execution on ksmbd-enabled systems; CVSS 8.5.
ZDI-26-573: Linux Kernel KSMBD Response Header Out-Of-Bounds Read Information Disclosure Vulnerability
ZDI disclosed an unauthenticated out-of-bounds read (CVE-2026-68431) in Linux Kernel KSMBD causing sensitive information disclosure, CVSS 9.3.