- Published
- Source
- CSO Online UK
- Reported by
- 2 publishers
- Filed under
- UK industry
- Vulnerabilities
- 1 CVE
Security researchers have found a critical flaw in the Linux kernel’s networking stack that can let attackers escape a KVM virtual machine and execute code on the host system. The weakness could also potentially let attackers compromise systems running other Linux-based virtualization and sandbox platforms. Tracked as CVE-2026-99999 and dubbed PwnEscape, the vulnerability was discovered by researchers from AI-powered pentesting startup Pwn.ai during a $1 million challenge to hack Vercel’s sandbox platform, which uses KVM-based Firecracker microVMs. Rather than exploiting…
If you run the affected product
- Find every instance – especially the ones reachable from the internet.
- Apply the vendor's patch or mitigation now: exploited flaws are fixed in days, not at the next patch cycle.
- Then check for signs it was used before you patched: web shells, new accounts, unusual outbound traffic.
More helpCISA's Known Exploited Vulnerabilities catalogue (opens in a new tab)
Also reported by 1 more publisher
The vulnerabilities in this story
CVE-2026-99999 in the NVD (opens in a new tab)
- CVSS9.3Critical
- CISA KEVNot listedno confirmed exploitation on CISA’s list (yet)
Exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog (CC0). Exploit prediction: EPSS by FIRST. This product uses the NVD API but is not endorsed or certified by the NVD.
MyCyberWay Premium Jobs
Premium Jobs · our UK cyber job feed
Every UK cyber security role, scored against your CV.
Our job engine reads the UK's job boards and employer career sites every hour, takes out anything that isn't cyber security, removes duplicates and closed adverts, and scores every role it keeps against your CV.
184 UK cyber security roles in the last run · 86 at employers with a sponsor licence
- Cyber security roles only
- A CV match on every role
- Emails at the times you choose
Explore Premium JobsHow it works
Rather start free?WhatsApp channel (opens in a new tab)Telegram channel (opens in a new tab)
Headlines and short summaries only, except where a public body publishes under an open licence. Every story links to its publisher, who owns it. MyCyberWay does not edit or endorse third-party reporting.
