Feed
Upwind Feed
Feed
Grid
MDR
November 2, 2026
CVE-2026-98432: Inside the Critical Linux TCP Use-After-Free That Fires Before Your App Sees a Byte
A use-after-free in the Linux kernel's IPv4 TCP handshake (CVE-2026-98432, CVSS 9.8) was fixed upstream in October and is still landing in distribution kernels. What we found: any unauthenticated peer can reach it on any IPv4 TCP port; the working root exploit has been described but not published; and the setup it needs is more…
October 24, 2026
HTTP2Shell (CVE-2026-111497): one Brotli bug, RCE across the HTTP stack
TL;DR HTTP2Shell (CVE-2026-111497) is an out-of-bounds write in Google's Brotli decoder, versions 1.0.3 through 1.2.0. An unauthenticated attacker who gets crafted Brotli data into a vulnerable decoder can crash the process, read its memory, or in some cases run code. It was first reported as a Node.js bug ("Node2Shell"), but the flaw is in the…
CVE-2026-98432: Inside the Critical Linux TCP Use-After-Free That Fires Before Your App Sees a Byte
A use-after-free in the Linux kernel's IPv4 TCP handshake (CVE-2026-98432, CVSS 9.8) was fixed upstream in October and is still landing in distribution kernels. What we found: any unauthenticated peer can reach it on any IPv4 TCP port; the working root exploit has been described but not published; and the setup it needs is more…
HTTP2Shell (CVE-2026-111497): one Brotli bug, RCE across the HTTP stack
TL;DR HTTP2Shell (CVE-2026-111497) is an out-of-bounds write in Google's Brotli decoder, versions 1.0.3 through 1.2.0. An unauthenticated attacker who gets crafted Brotli data into a vulnerable decoder can crash the process, read its memory, or in some cases run code. It was first reported as a Node.js bug ("Node2Shell"), but the flaw is in the…