EVERYONE GETS AN LPE

Windows:
#BlueHammer (#CVE 2026 33825)
#RedSun (#CVE 2026 41091)
#UnDefend (#CVE 2026 45498)
#WindowsInstaller (#CVE 2026 27910):

Linux:
#CopyFail (#CVE 2026 31431)
#SSHKeysignPwn (#CVE 2026 46333)

FreeBSD:
#FatGid (#CVE 2026 45250)
#ExecveBug (#CVE 2026 7270)

Oh no, please don't tell me again that Linux is now insecure on the net?!

«Linux's Latest Vulnerability Allows Reading Root-Owned Files By Unprivileged Users»

⛓️‍💥 phoronix.com/news/Linux-ssh-ke…
⛓️‍💥 github.com/0xdeadbeefnetwork/s…

#sshkeysignpwn #pwn #ssh #linux #0day #keysigning #sshkeys #itsecurity #itsec #itsecurity #zeroday

GitHub - 0xdeadbeefnetwork/ssh-keysign-pwn: Steal SSH host private keys and /etc/shadow via the ptrace_may_access mm-NULL bypass + pidfd_getfd. Pre-31e62c2ebbfd kernels.

Steal SSH host private keys and /etc/shadow via the ptrace_may_access mm-NULL bypass + pidfd_getfd. Pre-31e62c2ebbfd kernels. - 0xdeadbeefnetwork/ssh-keysign-pwn

^GitHub