linuxSecurity
Xen Orchestra Auth Bypass Exploited in the Wild: Patch Now
A crafted empty-token cookie logs attackers into Xen Orchestra as an admin, and Vates confirms it is already being exploited. Patch to 6.9.2 or 6.10.1 now.
11 Nov 20264 min
Security
29 articleslinux
linuxSecurity
CVE-2026-98432: Ubuntu LTS Still Waits for the Kernel Fix
CVE-2026-98432 is a 9.8 kernel TCP flaw with a working AI-written exploit, and Ubuntu LTS still has no released fix. Here is the patch status and what to do.
9 Nov 20265 min
linuxSecurity
OpenSSH 10.6p2 Patches Alpine Password Bypass Flaw
OpenSSH 10.6p2 closes a password bypass that let any long password into key-only accounts on Alpine Linux. Check your exposure, patch, and restart sshd.
8 Nov 20265 min
linuxSecurity
Seven Linux Kernel Releases Patch Xen Guest-to-Host Flaws
Seven stable kernels landed on 6 November with the same three Xen fixes. If your host serves guests, here is how to check exposure and patch today.
7 Nov 20264 min
linuxSecurity
The Two-Line Linux Fix That Exposed a Patching Failure
Upstream fixed CVE-2026-98432 in two lines weeks ago, yet Ubuntu and Red Hat still had no patched kernel on 1 November. The bug is bad; the gap is worse.
1 Nov 20265 min
linuxSecurity
Node2Shell Brotli RCE: Check, Patch, and Verify Before November 10
A crafted Brotli stream can hand a remote attacker code execution on your server, and the patch deadline is November 10. Here is how to check whether you are exposed, patch it, and prove the fix worked.
31 Oct 20267 min
Page 1 of 5 · 29 articles · 6 per page