CLN Login
Featured
bridge-stp-uaf (CVE-2026-72389) local root vulnerability: kernel update and mitigation for CloudLinux
📋 TL;DR — last updated September 18, 2026, 13:30 UTC bridge-stp-uaf (CVE-2026-72389, CVSS 7.0, Moderate per Red Hat) is a...
Learn More
bridge-stp-uaf (CVE-2026-72389) local root vulnerability: kernel update and mitigation for CloudLinux
📋 TL;DR — last updated September 18, 2026, 13:30 UTC bridge-stp-uaf (CVE-2026-72389, CVSS 7.0, Moderate per Red Hat)...
Read More
SCTPhantom (CVE-2026-64564) Local Root Exploit: Status and Fixes for CloudLinux
SCTPhantom (CVE-2026-64564) is a vulnerability in the Linux kernel's SCTP code that lets a local unprivileged user become...
Read More
AccelerateWP security advisory: wp-config.php.backup exposure fixed in December 2025, most installations already updated
Security advisory about a fixed vulnerability in AccelerateWP's Object Cache feature. Fixed in 1.9-38 in December 2025; affected...
Read More
VsockDrop (CVE-2026-53365): CloudLinux is not affected on stock configuration
VsockDrop (CVE-2026-53365) lets an unprivileged local user become root. We checked every CloudLinux version, and none is exposed...
Read More
RtabRace (CVE-2026-68138): unprivileged local users can crash the host — mitigation and kernel update for CloudLinux
RtabRace (CVE-2026-68138) is a Linux kernel race in the traffic-control subsystem that lets an unprivileged local user corrupt...
Read More
BadGarbage (CVE-2026-53361) Local Root and Container Escape: Kernel Update for CloudLinux 10
BadGarbage (CVE-2026-53361) is a Linux kernel race condition that lets any local user, including a process inside a...
Read More
Januscape, Then Zapscape: Do KVM Fleets Just Reboot Every Month Now?
A month after Januscape forced mass reboots, Zapscape puts the same question to every KVM fleet: patch and...
Read More
OVSwrap (CVE-2026-64531) local root exploit: mitigation for CloudLinux 9, 10, and CloudLinux for Ubuntu
OVSwrap (CVE-2026-64531): a Linux kernel flaw giving local root on CloudLinux 9, 10 and CloudLinux for Ubuntu. No...
Read More
GhostLock (CVE-2026-43499) Local Root Exploit: Kernel Update for CloudLinux
GhostLock (CVE-2026-43499) is a use-after-free bug in the Linux kernel's futex priority-inheritance code that lets any unprivileged local...
Read More
Bad epoll (CVE-2026-46242) Local Root Exploit: Kernel Update for CloudLinux
Bad epoll (CVE-2026-46242) is a use-after-free bug in the Linux kernel's epoll subsystem that lets an unprivileged local...
Read More