NIST
Every ZeroDayFeed story on NIST — across breaches, zero-days, ransomware, patches, policy, and industry, newest first.
-
Patches & Advisories
PwnEscape: Critical Linux Kernel Flaw CVE-2026-99999 Lets a Guest VM Read Host Memory
A few malformed IPv4 packets from a guest VM can corrupt headers on a Linux host, and a researcher used the bug, dubbed PwnEscape (CVE-2026-99999, CVSS 9.3), to leak host memory from Vercel's production sandboxes. Patch your virtualization hosts now.
-
Patches & Advisories
GitLab fixes CVSS 10 unauthenticated code execution flaw in CI/CD regex compiler
GitLab's Oct. 12 patch release (19.4.2, 19.3.5, 19.2.8) fixes CVE-2026-97229, a CVSS 10.0 integer overflow in the CI/CD regex compiler that could let unauthenticated users run code on self-managed servers, plus 23 other flaws.