
Unpatched Linux KSMBD flaws disclosed, including two remote code execution bugs
Neither CVSS 9.0 KSMBD issue had a CVE or a mainline fix as of October 23, 2026.
1
4 stories, newest first · one card per story

Neither CVSS 9.0 KSMBD issue had a CVE or a mainline fix as of October 23, 2026.

One flaw needs no authentication on port 445; neither has a CVE or a confirmed mainline fix.

Pwn2Own Ireland day three lists 17 scheduled attempts, led by three Google Pixel 10 entries.
ZDI disclosed CVE-2026-19820, a CVSS 6.1 local link-following denial-of-service flaw in the bzbackup component of Backblaze Personal Computer Backup.
Today 1.6K readers · 2.5K views · 778 reads · all time 189K views