HIGH/ OCTOBER 16, 2026TODAY’S BRIEFING — #210
PwnEscape kernel RCE, Nextcloud backdoors, ShinyHunters arrests
Critical Linux kernel flaw (CVE-2026-99999) allows VMs to read host memory; Nextcloud servers actively backdoored via Collabora RCE; ShinyHunters leadership arrested as remaining members escalate attacks.
CVE-2026-99999Linux Kernel — PwnEscape: VM-to-host memory disclosure; [exploitation unverified] against Vercel cloud sandboxesCVE-2026-110447Collabora Online (richdocumentscode) for Nextcloud — Remote code execution; [exploitation unverified] to backdoor Nextcloud serversCVE-2026-105134Ahsay AhsayCBS — Command injection; CISA KEV added; federal remediation due 2026-10-17CVE-2026-0322Palo Alto Networks PAN-OS — Code injection with root privileges; CISA KEV added; federal remediation due 2026-10-17
Read the full briefing →