A critical architectural flaw in the Linux IPv4 network stack allows unprivileged guest machines to escape isolation. Specifically, threat actors can seize total root control over the underlying physical host. The vulnerability carries an alarming CVSS rating of 9.3. Consequently, this security defect directly threatens multitenant cloud environments where diverse workloads share hardware resources. Breaking Multi-Tenant Isolation via Raw Packets…

TL;DR PWNAI Research has disclosed PwnEscape (CVE-2026-99999), a critical Linux kernel VM escape flaw in the IPv4 networking stack. In lab tests, a guest VM leaked host memory and then ran code as root on the host. Fixed stable kernels are out, and admins of virtualization hosts should update now. Why It Matters Virtual machines are the main wall between cloud tenants.

TL;DR Security researcher Fourie Zhang from the TencentOS Security Team and Corvus AI disclosed CVE-2026-74580, a high-severity memory corruption flaw dubbed Vghost. Furthermore, the researchers publicly released the full technical details and proof-of-concept exploit code for this Linux vhost vulnerability. Tracked with a CVSS score of 8.8, the flaw enables both local root privilege escalation and virtual machine escape across nearly a decade of Linux kernel releases.

TL;DR Researcher Stan S has published a full analysis and working proof-of-concept for a VMware VMXNET3 vulnerability tracked as CVE-2026-59346. The integer-overflow flaw lets a privileged guest user run code on the host, a classic virtual machine escape. It carries a CVSS score of 9.3, and Broadcom has released a fix in version 26H1u1. Why It Matters VMXNET3 is VMware's paravirtualized network adapter.

The July Linux Kernel KVM vulnerability left numerous server hosting providers on high alert. This critical flaw enabled virtual machine users to escape their isolated environments. Subsequently, they could compromise the host machine. Consequently, this vulnerability introduced enormous risk for virtual private server and cloud hosting providers. Without immediate kernel upgrades, malicious actors could directly invade the underlying host architecture.

CVE-2026-47876 exposes VMware ESXi to critical VM escape. Organizations must patch to close paths for arbitrary code execution on the host.

The now-patched bugs are under active exploit and enable attackers to carry out a wide range of malicious activities, including escaping a virtual machine and gaining access to the underlying host.

More than 41,000 ESXi instances remain vulnerable to a critical VMware vulnerability, one of three that Broadcom disclosed earlier this week.

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread