VulnRadar

Data against noise.

Page generated: 06 Nov 2026, 03:51 UTC

CVE-2026-99999

PwnEscape

In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksum_start before completing checksum If a packet with bad checksum metadata gets into the ipv4 stack, skb_checksum_help can corrupt the network header and cause a bunch of mischief. This was d…

Read full description

In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksum_start before completing checksum If a packet with bad checksum metadata gets into the ipv4 stack, skb_checksum_help can corrupt the network header and cause a bunch of mischief. This was discovered and reported by Paulos, and has been reporoduced by others independently since. We really shouldn't allow such packets in, but as a defence in depth measure, let's also check before we complete the checksum. A more complete validation at input is forthcoming, but needs more work.

CVSS 9.3 (CRITICAL)

Attention and evidence

HYPE SCORE

5.8/10

REALITY · THREAT PRIORITY

3.3/10

General review priority; not probability

Evidence confidence: Repository candidate

Why this priority?

Technical severity: CVSS 9.3: +3.26
Fresh EPSS: 0.79%: +0.02

General review priority, not probability, victim count or asset-specific risk. A range covers missing CVSS/EPSS inputs within the current evidence state.

Sources: 23 documents and public datasets.

Hype components

Headline sample (25%)

50/100

Press, 30 days (60%)

50/100

Grounded branding (15%)

100/100

HYPE TOTAL58/100

Sources and documents

Press · 30 Oct 2026, 23:47 · PwnEscape CVE-2026-99999: Linux Kernel Guest-to-Host Escape, Patch VM Hosts Now - Rescana

Business Upturn

Press · 30 Oct 2026, 12:45 · PwnEscape: CVE-2026-99999 Linux kernel VM escape explained - Business Upturn

Pasquale Pillitteri

Press · 21 Oct 2026, 07:00 · PwnEscape Linux kernel vulnerability forces Contabo to reboot its VPS hosts - Pasquale Pillitteri

Press · 20 Oct 2026, 13:59 · CVE-2026-110936: Siemens Software Center Zero-Day - SOC Prime

Press · 19 Oct 2026, 07:00 · PwnEscape: Critical Linux kernel flaw allows VM escape - heise online

See all 23 source documents

Press · 19 Oct 2026, 07:00 · Linux KVM guest-host escape rated critical, may represent a new way to attack penguin-powered networking - The Register

Press · 16 Oct 2026, 07:00 · CVE-2026-99999: Critical PwnEscape Linux Kernel Flaw Enables Guest-to-Host Escape - SOC Prime

Press · 15 Oct 2026, 07:00 · PwnEscape Linux Kernel Flaw Lets Guests Escape to Host - Cyber Kendra

The Hacker News

Press · 15 Oct 2026, 07:00 · Critical PwnEscape Linux Kernel Vulnerability Lets Guest VMs Read Host Memory - The Hacker News

Press · 15 Oct 2026, 07:00 · CVE-2026-76519: Cisco SEG Zero-Day Exploited - SOC Prime

Press · 01 Oct 2026, 07:00 · CVE-2026-84782: High-Severity OpenSSL DTLS Flaw Exposes Heap Memory and Enables DoS - SOC Prime

Press · 01 Oct 2026, 07:00 · CVE-2026-76504: Cisco SD-WAN Authentication Bypass - SOC Prime

Press · 24 Sep 2026, 07:00 · CVE-2026-94545 Next.js ImageResponse RCE Flaw - SOC Prime

Press · 23 Sep 2026, 07:00 · CVE-2026-94127: Critical F5 BIG-IP APM Zero-Day Exploited for Remote Code Execution - SOC Prime

Press · 03 Sep 2026, 07:00 · CVE-2026-83548 & CVE-2026-83549: SonicWall Zero-Days - SOC Prime

Press · 20 Aug 2026, 07:00 · CVE-2026-19490: Critical Citrix NetScaler Flaw - SOC Prime

Press · 12 Aug 2026, 07:00 · CVE-2026-20349: Cisco ASA and FTD VPN DoS Flaw - SOC Prime

Press · 23 Jul 2026, 07:00 · CVE-2026-64600: RefluXFS Linux Kernel Flaw Can Lead to Root Privilege Escalation - SOC Prime

Press · 16 Jul 2026, 07:00 · CVE-2026-15410 & CVE-2026-15409 in SonicWall SMA - SOC Prime

Press · 04 May 2026, 07:00 · CVE-2026-23918: Apache HTTP/2 Vulnerability - SOC Prime

Press · 13 Mar 2026, 07:00 · CVE-2026-3910: Chrome V8 Zero-Day Used for In-the-Wild Attacks - SOC Prime

Press · 29 Jan 2026, 08:00 · CVE-2025-15467: OpenSSL Vulnerability Leads to Denial-of-Service, Remote Code Execution - SOC Prime

Press · 15 Jan 2026, 08:00 · CVE-2026-20805: Microsoft Fixes Actively Exploited Windows Desktop Manager Zero-Day - SOC Prime

Score evolution

● Hype ● Reality

Earlier evidence-support scores are retained in history; this chart shows only the current priority definition.

━ Hype Score (Perceived) ━ Reality threat priority. Definition changes are not new attacks.

Public exploit evidence

6

Public exploit entries / repo candidates

See 6 repos with metrics

Repository	Stars	Forks	Language	Updated
PeronGH/CVE-2026-99999	22	3	Go	17 Oct 2026, 07:36
01luyicheng/CVE-2026-99999	5	1	Python	20 Oct 2026, 05:18
01luyicheng/CVE-2026-99999-analysis	0	1	Python	20 Oct 2026, 09:26
01luyicheng/CVE-2026-99999-exploit	0	3	C	21 Oct 2026, 11:52
24520597-blip/CVE-2026-999999	0	0	—	27 May 2026, 10:39
shizuku198411/CVE-2026-99999-KVM-checksum-metadata-non-destructive-PoC	0	0	Shell	19 Oct 2026, 09:45

Evidence context and dated references

Reality is general threat/review priority, combining observed exploitation, CVSS severity and fresh EPSS. Evidence confidence is separate. This is not calibrated risk, a victim count or an asset-specific assessment. A range reflects missing numeric inputs. Published 21 days ago. Exploitation evidence usually takes weeks to show up: a low reality score can mean there is no data yet, not that the flaw is mild.

Evidence in context

Confidence in exploitation evidence: Repository candidate
Priority basis: Exploitation in attacks unconfirmed; CVSS 9.3; EPSS 0.8%
Attention, last 30 days: 10 distinct story titles; 10 press documents; 1 publisher domains.
Technical potential: local access, no prior privileges, no user interaction.
Observed activity: Public exploit repositories reference this CVE; none is corroborated.
Known scale: Not quantified.
Evidence confidence basis: Repository candidate; functionality unverified

Score evaluated: 2026-11-05 14:00:34.806270+00:00 · EPSS snapshot: 2026-11-05T12:03:04Z

Source event timeline

First press mention

15 Jan 2026, 08:00

Published

15 Oct 2026, 12:19

Latest press mention

30 Oct 2026, 23:47

Score calculated

05 Nov 2026, 14:00

Name

PwnEscape

PoCs on GitHub

6 repositories