CVE-2026-43284

🚨 CVE-2026-43284 — Dirty Frag 🚨 Universal Linux Kernel Local Privilege Escalation Overview Field| Detail ---|--- CVE| CVE-2026-43284 xfrm/ESP + CVE-2026-43500 RxRPC Nickname| Dirty Frag CVSS| 7.8 HIGH Type| Local Privilege Escalation LPE Introduced| Linux kernel 4.10 2017, commit cac2661c53f3...

Dirty-Frag-CVE-2026-43284

Dirty Frag CVE-2026-43284 and CVE-2026-43500 Exploit Reproduction and Detection Lab for a Linux kernel local privilege escalation chain. Status: VERIFIED. I completed the reproduction, the fileless verification, and the syscall-level detection in the lab kernel 6.18.9+kali-amd64. This document is...

CVE-2026-109386: wpmudev: The Hustle – Email Marketing, Lead Generation, Optins, Popups plugin for WordPress is vulnerable to authorization…

The Hustle – Email Marketing, Lead Generation, Optins, Popups plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 7.8.14.3. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for...

PT-2026-134443

Name of the Vulnerable Software and Affected Versions The Hustle – Email Marketing, Lead Generation, Optins, Popups plugin for WordPress versions prior to 7.8.15 Description An authorization bypass exists because the plugin fails to properly verify if a user is authorized to perform specific...

CVE-2026-43284-DIRTY-FRAG-

CVE-2026-43284-DIRTY-FRAG- Detailed technical analysis of CVE-2026-43284 Dirty Frag local privilege escalation flaw in the Linux kernel. CVE-2026-43284 commonly referred to as part of the Dirty Frag vulnerability suite is a critical local privilege escalation LPE flaw in the Linux kernel. It stem...

SG-2026-0024

Dirty Frag primitive-only PoC Readable N4C demonstrator for CVE-2026-43284 XFRM/ESP and CVE-2026-43500 RxRPC/RXKAD. The PoC answers one question: can an unprivileged process change the page cache of a root-owned, read-only file through a sharedskbuff fragment? It does not overwrite /usr/bin/su or...

WordPress Hustle – Email Marketing, Lead Generation, Optins, Popups plugin <= 7.8.14.3 - Missing Authorization to Authenticated (Custom+) ESP Credential Overwrite and Irreversible OAuth Token Deletion vulnerability

Missing Authorization to Authenticated Custom+ ESP Credential Overwrite and Irreversible OAuth Token Deletion vulnerability discovered by Ekene Umegakwe in WordPress Plugin Hustle versions = 7.8.14.3...

Linux Kernel Missing Initialization of a Variable Vulnerability

Linux Kernel contains a missing initialization of a variable vulnerability that could allow for unintended modification of page-cache-backed data via failure to preserve the shared-fragment marker during socket buffer coalescing, causing ESP input processing to decrypt shared fragments in place...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146617)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146617 advisory. In the Linux kernel, the following vulnerability has been resolved: net: skbuff: don't touch shared zerocopy state in skbtxerror skbtxerror completes the zerocopy ua...

CVE-2026-117567

esp-mcp through commit 28afddf contains an OS command injection vulnerability that allows attackers to run arbitrary commands by supplying shell metacharacters in MCP tool parameters. Attackers influencing agent tool calls through prompt injection can inject metacharacters into target, port,...

CVE-2026-117567

The esp-mcp software (through commit 28afddf ) is vulnerable to an OS command injection vulnerability. The root cause is the insecure use of asyncio.create_subprocess_shell when processing MCP tool parameters. An attacker can inject shell metacharacters into the target , port , project_path , or ...

CVE-2026-117567 esp-mcp through commit 28afddf OS Command Injection via MCP Tool Parameters

esp-mcp through commit 28afddf contains an OS command injection vulnerability that allows attackers to run arbitrary commands by supplying shell metacharacters in MCP tool parameters. Attackers influencing agent tool calls through prompt injection can inject metacharacters into target, port,...

EUVD-2026-110845

esp-mcp through commit 28afddf contains an OS command injection vulnerability that allows attackers to run arbitrary commands by supplying shell metacharacters in MCP tool parameters. Attackers influencing agent tool calls through prompt injection can inject metacharacters into target, port,...

CVE-2026-117567 esp-mcp through commit 28afddf OS Command Injection via MCP Tool Parameters

esp-mcp through commit 28afddf contains an OS command injection vulnerability that allows attackers to run arbitrary commands by supplying shell metacharacters in MCP tool parameters. Attackers influencing agent tool calls through prompt injection can inject metacharacters into target, port,...

PT-2026-126426

Name of the Vulnerable Software and Affected Versions esp-mcp versions prior to commit 28afddf Description An OS command injection flaw exists where attackers can execute arbitrary commands by providing shell metacharacters within MCP tool parameters. This occurs when values for target, port,...

Copy_Fail2-Electric_Boogaloo

Copy Fail 2: Electric Boogaloo Unprivileged Linux LPE via xfrm ESP-in-UDP MSGSPLICEPAGES no-COW fast path. Page-cache write into any readable file. Overwrites a nologin line in /etc/passwd with sick::0:0:...:/:/bin/bash and sus into it. Same class as Copy Fail CVE-2026-31431, different subsystem...

CVE-2026-80846

A flaw was found in the Linux kernel's xfrm subsystem, which handles ESP-in-TCP packets. When queued ESP-in-TCP data is processed after its ingress network device has been removed, the system attempts to dereference a null pointer. This can lead to a system crash, resulting in a Denial of Service...

CLSA-2026-1779202181 Fix CVE(s): CVE-2022-50067, CVE-2026-46300, CVE-2026-46333

Ubuntu: 4.15.0-256.267 CVE-2026-46333 - ptrace: require CAPSYSPTRACE when task has no mm CVE-2026-46333 CVE-2026-46300 - net: skbuff: propagate shared-frag marker through copy/coalesce/gro/shift paths CVE-2026-46300 CVE-2026-43284 - xfrm: esp: avoid in-place decrypt on shared skb frags...

Exploit for Write-what-where Condition in Linux Linux_Kernel

GalaxyCrash Root on a locked bootloader. No custom kernel, no O...

CVE-2026-98417

A flaw was found in the Linux kernel's XFRM IPsec encryption framework subsystem. A remote attacker could exploit this issue by sending specially crafted ESP-in-TCP Encapsulating Security Payload over Transmission Control Protocol packets with invalid transport header offsets. This improper...