{"metadata": {"vulnerability": "cve-2026-99999", "count": 122, "kinds": {"milestone": 6, "sighting": 102, "kev": 0, "other": 14}}, "data": [{"timestamp": "2026-05-21T12:44:45.381Z", "date_only": false, "value": "2026-05-21T12:44:45.381142Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/gonzokata.bsky.social/post/3mmeh53pwfk22", "record": "CVE-2026-99999", "field": "creation_timestamp", "uuid": "aad3b92b-bad6-4668-9246-b0ca2f83084e", "content": "Are they trying to speed run CVE's? We're already up to 41091 this year...\n\nare they trying to overflow the CVE naming convention?? Will no more bugs be tracked after CVE-2026-99999 ????", "url": "https://bsky.app/profile/gonzokata.bsky.social/post/3mmeh53pwfk22"}, {"timestamp": "2026-06-19T12:04:49Z", "date_only": false, "value": "2026-06-19T12:04:49.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/shweta-tripathi-1519/c957e66dd8f0e7892e135a18982c486a", "record": "CVE-2026-99999", "field": "creation_timestamp", "uuid": "22171562-952f-4832-8f6f-c2e1b1ab93f8", "content": "{\n    \"_schema\": {\n        \"version\": \"1.0\"\n    },\n    \"_areas\": {\n        \"CE\": {\n            \"description\": \"Commerce Community Edition (always present)\",\n            \"detection\": \"base_version\"\n        },\n        \"EE\": {\n            \"description\": \"Commerce Enterprise Edition\",\n            \"composer_package\": \"magento/product-enterprise-edition\"\n        },\n        \"B2B\": {\n            \"description\": \"B2B for Adobe Commerce\",\n            \"composer_package\": \"magento/extension-b2b\"\n        }\n    },\n    \"patches\": {\n        \"246p15-2026-05-001-CE\": {\n            \"applies_to\": [\"2.4.6-p15\"],\n            \"area\": \"CE\",\n            \"requires\": [],\n            \"cves\": [\"CVE-2026-99999\"],\n            \"released\": \"2026-06-01\",\n            \"file_name\": \"246p15-2026-05-001-CE.patch\",\n            \"sha256\": \"\"\n        }\n    }\n}", "url": "https://gist.github.com/shweta-tripathi-1519/c957e66dd8f0e7892e135a18982c486a"}, {"timestamp": "2026-09-25T10:25:14.451Z", "date_only": false, "value": "2026-09-25T10:25:14.451Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2026-99999", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-15T00:00:00Z", "date_only": false, "value": "2026-10-15T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-99999", "record": "UBUNTU-CVE-2026-99999", "field": "published"}, {"timestamp": "2026-10-15T00:00:00Z", "date_only": false, "value": "2026-10-15T00:00:00Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-99999", "record": "UBUNTU-CVE-2026-99999", "field": "modified"}, {"timestamp": "2026-10-15T12:19:22.784Z", "date_only": false, "value": "2026-10-15T12:19:22.784Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2026-99999", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-15T12:46:18.377Z", "date_only": false, "value": "2026-10-15T12:46:18.377639Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117444993210224646", "record": "CVE-2026-99999", "field": "creation_timestamp", "uuid": "8d97b595-871c-472b-8a57-2a0055bf923a", "content": "CVE-2026-99999 ipv4: validate checksum_start before completing checksum In the Linux kernel, the following vulnerability has been resolved:\nipv4: validate checksum_start before completing checksum\nIf a packet with bad checksum metadata gets into the ipv4 stack,skb_checksum_help can corrupt the network header and cause a bunch ofmischief.\nThis was discovered and reported by Paulos, and has been reporoducedby others independently since.\nWe really shouldn't allow such packets in, but as a defencein depth measure, let's also check before we complete the checksum.\nA more complete validation at input is forthcoming, but needs more work.\nhttps://www.cve.org/CVERecord?id=CVE-2026-99999https://git.kernel.org/stable/c/a464d950f31c89565cbaae038cc60db04fe01956https://git.kernel.org/stable/c/0fab003ef4698e0628060a45a48f14b43ba2a40ahttps://git.kernel.org/stable/c/94524b7b32691de2e2ce162c04d6cbc9106e5cbfhttps://git.kernel.org/stable/c/a65f69e0f38ffbed1b128029e09097436416dc8bhttps://git.kernel.org/stable/c/32a8b0adaa18e52aaa0b246b5ffe683075354dbbhttps://git.kernel.org/stable/c/f3e835af6226f1dd12160cbd696081e9b6155de0https://git.kernel.org/stable/c/c3e33464746166264334641dc850a36eef7e6326https://git.kernel.org/stable/c/6785011f8b16abf40b1e9d8b2e332232b3e68822https://pwn.ai/blog/Pwnescapehttps://vercel.com/blog/findings-from-the-1-million-dollar-vercel-sandbox-challenge#kernel #Linux#CVE_2026_99999#bot", "url": "https://infosec.exchange/users/cve/statuses/117444993210224646"}, {"timestamp": "2026-10-15T13:17:14.137Z", "date_only": false, "value": "2026-10-15T13:17:14.137", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-99999", "record": "FKIE_CVE-2026-99999", "field": "published"}, {"timestamp": "2026-10-15T14:08:29.782Z", "date_only": false, "value": "2026-10-15T14:08:29.782848Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxwaek2ytg24", "record": "CVE-2026-99999", "field": "creation_timestamp", "uuid": "45393573-b37d-4514-9ba4-9a7f3544c452", "content": "\ud83d\udea8 CVE-2026-99999 \u2014 CVSS 9.3 CRITICAL\n\nIn the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksum_start before co...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-99999\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mxwaek2ytg24"}, {"timestamp": "2026-10-15T14:17:17.078Z", "date_only": false, "value": "2026-10-15T14:17:17.078959Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/634miyv7blm2c", "record": "CVE-2026-99999", "field": "creation_timestamp", "uuid": "e3fad3b8-fcc9-4652-9b49-725bee8ee585", "content": "CVE-2026-99999 - ipv4: validate checksum_start before completing checksum\nCVE ID : CVE-2026-99999\n \n Published : Oct. 15, 2026, 1:17 p.m. | 16\u00a0minutes ago\n \n Description : In the Linux kernel, the following vulnerability has been resolved:\n\nipv4: validate checksum_start before...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/634miyv7blm2c"}, {"timestamp": "2026-10-15T17:30:36.679Z", "date_only": false, "value": "2026-10-15T17:30:36.679506Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/telescope.littleplanetlabs.com/post/3mxwlnx6brf2q", "record": "CVE-2026-99999", "field": "creation_timestamp", "uuid": "6ef5cc5f-46cb-4c65-a5af-45fecd96a739", "content": "\u26a0\ufe0f Linode is reporting an incident: Guest-to-Host KVM Escape [CVE-2026-99999]\n\nIdentified: Akamai is aware of the recently published Guest-to-Host KVM Escape (CVE-2026-99999) vulnerability. Our teams have proactively identified its potential impact a\u2026\n\nhttps://status.linode.com/incidents/zp71823t318w", "url": "https://bsky.app/profile/telescope.littleplanetlabs.com/post/3mxwlnx6brf2q"}, {"timestamp": "2026-10-15T17:38:57.282Z", "date_only": false, "value": "2026-10-15T17:38:57.282957Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pingoru.bsky.social/post/3mxwm4uh4x62i", "record": "CVE-2026-99999", "field": "creation_timestamp", "uuid": "94018846-b659-4ca5-a08a-988b2e005bed", "content": "\u26a0\ufe0f Contabo is reporting a Incident since 17:33 UTC\n\n\"Important security update: patching of all VPS/VDS hosts (CVE-2026-99999)\"\n\nLive timeline \u2192 https://pingoru.io/providers/contabo/incidents/12303076\n\n#Contabo #ContaboDown", "url": "https://bsky.app/profile/pingoru.bsky.social/post/3mxwm4uh4x62i"}, {"timestamp": "2026-10-15T18:20:04.900Z", "date_only": false, "value": "2026-10-15T18:20:04.900992Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxwogfhujz2l", "record": "CVE-2026-99999", "field": "creation_timestamp", "uuid": "5fb9e931-0b5a-4732-acea-5c6605ad4606", "content": "CVE-2026-99999 - linux\nThe Debian Linux kernel may mishandle network packets that contain incorrect checksum information, potentially corrupting the packet header and disrupting network communication.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#linux #debian #Debian12 #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mxwogfhujz2l"}, {"timestamp": "2026-10-15T18:59:28.027Z", "date_only": false, "value": "2026-10-15T18:59:28.027915Z", "kind": "sighting", "label": "Seen", "source": "https://mstdn.social/users/jschauma/statuses/117446460481596087", "record": "CVE-2026-99999", "field": "creation_timestamp", "uuid": "862c9245-fb91-4a33-8c52-ff05843cbe0a", "content": "\"PwnEscape\" is the KVM escape for which rumors made the rounds a few days ago.  Getting CVE-2026-99999 assigned is \ud83d\udc68\ud83c\udffb\u200d\ud83c\udf73\ud83d\udc8b.\nhttps://pwn.ai/blog/pwnescape\nKernel patch for this part (because it sounds like there's multiple):https://github.com/torvalds/linux/commit/6785011f8b16abf40b1e9d8b2e332232b3e68822", "url": "https://mstdn.social/users/jschauma/statuses/117446460481596087"}, {"timestamp": "2026-10-15T18:59:32.256Z", "date_only": false, "value": "2026-10-15T18:59:32.256152Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/jschauma.mstdn.social.ap.brid.gy/post/3mxwqmtxhdfn2", "record": "CVE-2026-99999", "field": "creation_timestamp", "uuid": "a4730b54-fe66-45ff-916f-d682f83ab115", "content": "\"PwnEscape\" is the KVM escape for which rumors made the rounds a few days ago. Getting CVE-2026-99999 assigned is \ud83d\udc68\ud83c\udffb\u200d\ud83c\udf73\ud83d\udc8b.\n\nhttps://pwn.ai/blog/pwnescape\n\nKernel patch for this part (because it sounds like there's multiple) [\u2026]", "url": "https://bsky.app/profile/jschauma.mstdn.social.ap.brid.gy/post/3mxwqmtxhdfn2"}, {"timestamp": "2026-10-15T19:47:48.425Z", "date_only": false, "value": "2026-10-15T19:47:48.425461Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stabilitystatus.bsky.social/post/3mxwtdaps7b2q", "record": "CVE-2026-99999", "field": "creation_timestamp", "uuid": "a8acea9b-fce0-445f-9e81-6714eaf66b1d", "content": "Network Update: Linode is reporting Guest-to-Host KVM Escape [CVE-2026-99999].\n\nStatus: Identified\nUpdated: 5:27 PM GMT+0000\n\nCheck your connection: https://stabilitytest.io", "url": "https://bsky.app/profile/stabilitystatus.bsky.social/post/3mxwtdaps7b2q"}, {"timestamp": "2026-10-15T20:10:11.239Z", "date_only": false, "value": "2026-10-15T20:10:11.239478Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/vuldb/statuses/117446738626805938", "record": "CVE-2026-99999", "field": "creation_timestamp", "uuid": "1f7fe823-26ed-483c-8931-24df31e6daf3", "content": "\u26a0\ufe0f There is a new vulnerability with elevated criticality in Linux Kernel (CVE-2026-99999) https://vuldb.com/vuln/420626", "url": "https://infosec.exchange/users/vuldb/statuses/117446738626805938"}, {"timestamp": "2026-10-15T21:00:21.335Z", "date_only": false, "value": "2026-10-15T21:00:21.335487Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/drw5xmz27h4up", "record": "CVE-2026-99999", "field": "creation_timestamp", "uuid": "eced99dd-8cbf-4711-b6c3-9d806e41cbeb", "content": "linux kernel: PwnEscape: Guest-to-Host KVM Escape (CVE-2026-99999)", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/drw5xmz27h4up"}, {"timestamp": "2026-10-15T21:14:29.574Z", "date_only": false, "value": "2026-10-15T21:14:29.574062Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mxwy6b6jiy22", "record": "CVE-2026-99999", "field": "creation_timestamp", "uuid": "0a5577f6-a8bd-4c52-9419-8317efee9d48", "content": "Linux\u30ab\u30fc\u30cd\u30eb\u306ePwnEscape\uff08CVE-2026-99999\uff09\u306f\u3001VM\u304b\u3089\u30db\u30b9\u30c8\u30e1\u30e2\u30ea\u3092\u8aad\u307f\u53d6\u308b\u8106\u5f31\u6027\u3002Vercel\u306e\u30b5\u30f3\u30c9\u30dc\u30c3\u30af\u30b9\u3067\u5b9f\u8a3c\u3055\u308c\u305f\u3002", "url": "https://bsky.app/profile/postac001.bsky.social/post/3mxwy6b6jiy22"}, {"timestamp": "2026-10-15T21:35:06.349Z", "date_only": false, "value": "2026-10-15T21:35:06.349499Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacks.gr/post/3mxwzd4hdrzex", "record": "CVE-2026-99999", "field": "creation_timestamp", "uuid": "620a5177-bf90-4f81-aa9f-383c8bb0d578", "content": "Researchers discovered PwnEscape (CVE-2026-99999), a flaw in the Linux kernel networking code allowing VM-to-host memory access.\n\nFound with AI assistance in\u2026\n\nhttps://en.hacks.gr/sovaro-keno-asfaleias-ston-pyrina-toy-linux-epitrepei-tin-prosvasi-se-kentrikoys-ypologistes/\n\n#Linux #Kernel #PwnEscape", "url": "https://bsky.app/profile/hacks.gr/post/3mxwzd4hdrzex"}, {"timestamp": "2026-10-15T22:07:24.590Z", "date_only": false, "value": "2026-10-15T22:07:24.590Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2026-99999", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-15T22:30:49.905Z", "date_only": false, "value": "2026-10-15T22:30:49.905521Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/edwardk/statuses/117447291667142719", "record": "CVE-2026-99999", "field": "creation_timestamp", "uuid": "46b6fcd1-d99c-4cba-90e0-b2acb3ba34d7", "content": "Critical PwnEscape Linux Kernel Vulnerability Lets Guest VMs Read Host Memory\nA critical flaw in the Linux kernel\u2019s networking code (CVE-2026-99999, nicknamed PwnEscape) lets code inside a virtual machine read host memory, crash the host, or run code on it, The Hacker News reports. The flaw was found through a Vercel security challenge and demonstrated against Vercel\u2019s live cloud sandboxes; there is no sign it has been used in a real attack. https://thehackernews.com/2026/10/critical-pwnescape-linux-kernel.html", "url": "https://infosec.exchange/users/edwardk/statuses/117447291667142719"}, {"timestamp": "2026-10-15T22:30:50.672Z", "date_only": false, "value": "2026-10-15T22:30:50.672726Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/e-kiledjian.bsky.social/post/3mxx4gshp7l2j", "record": "CVE-2026-99999", "field": "creation_timestamp", "uuid": "f5b1429b-352c-43ee-aa79-fc59dbd2136b", "content": "Critical PwnEscape Linux Kernel Vulnerability Lets Guest VMs Read Host Memory\n\nA critical flaw in the Linux kernel\u2019s networking code (CVE-2026-99999, nicknamed PwnEscape) lets code inside a virtual machine read h... https://threatintel.cc/2026/10/15/critical-pwnescape-linux-kernel-vulnerability.html", "url": "https://bsky.app/profile/e-kiledjian.bsky.social/post/3mxx4gshp7l2j"}, {"timestamp": "2026-10-15T23:26:09.928Z", "date_only": false, "value": "2026-10-15T23:26:09.928199Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mxx7jpxnhd2e", "record": "CVE-2026-99999", "field": "creation_timestamp", "uuid": "bcb8f7ec-f195-433e-ad43-9391f54c01e9", "content": "\ud83e\udd16 CVE-2026-99999 (CVSS 9.3, \"PwnEscape\"): Linux kernel ipv4 flaw lets a guest VM read host memory, ~32 bytes/packet. Demoed against Vercel production sandboxes; host crash/RCE lab-only. Patched in kernel stable.\nhttps://thehackernews.com/2026/10/critical-pwnescape-linux-kernel.html", "url": "https://bsky.app/profile/newssecia.bsky.social/post/3mxx7jpxnhd2e"}, {"timestamp": "2026-10-15T23:52:37.363Z", "date_only": false, "value": "2026-10-15T23:52:37.363412Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/tomcat/statuses/117447613283850537", "record": "CVE-2026-99999", "field": "creation_timestamp", "uuid": "1bf67642-6ffa-40bd-b2f2-1be242d6ebc1", "content": "\u203c\ufe0f A newly disclosed critical Linux kernel flaw, PwnEscape (CVE-2026-99999), lets code inside guest VMs read host memory and enabled VM escape with root access in lab tests.\nRead - https://thehackernews.com/2026/10/critical-pwnescape-linux-kernel.html\nVercel confirmed the memory leak in its live production sandboxes during its $1 million security challenge.\nThe flaw lies in Linux networking, not the hypervisor, with implications beyond Vercel.", "url": "https://infosec.exchange/users/tomcat/statuses/117447613283850537"}, {"timestamp": "2026-10-16T00:14:16.018Z", "date_only": false, "value": "2026-10-16T00:14:16.018833Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/vuldb/statuses/117447698389378692", "record": "CVE-2026-99999", "field": "creation_timestamp", "uuid": "9fc3a669-1ea3-45a5-b914-a0c2757efc89", "content": "\ud83d\udea8 A lot of offensive activities were identified targeting Linux Kernel (CVE-2026-99999) https://vuldb.com/vuln/420626/cti", "url": "https://infosec.exchange/users/vuldb/statuses/117447698389378692"}, {"timestamp": "2026-10-16T00:36:27.691Z", "date_only": false, "value": "2026-10-16T00:36:27.691150Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mxxdhfn7oh24", "record": "CVE-2026-99999", "field": "creation_timestamp", "uuid": "f712fa14-48c7-4623-bcb8-bb1a77fe5aea", "content": "CVE-2026-99999 lets code in a Linux guest VM read host memory. Researchers demonstrated the leak in Vercel production sandboxes; host crashes and code execution were shown only in a lab. A kernel fix is available, with no real-world exploitation reported.", "url": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mxxdhfn7oh24"}, {"timestamp": "2026-10-16T00:42:36.654Z", "date_only": false, "value": "2026-10-16T00:42:36.654836Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cybersecurity.page/post/3mxxdnrmqso2w", "record": "CVE-2026-99999", "field": "creation_timestamp", "uuid": "20482356-65a6-457d-83c0-11c91368c3ac", "content": "PwnEscape (CVE-2026-99999): a guest-to-host escape in the kernel's IPv4 fragmentation path, not KVM itself. Exploits can leak host memory in packets, crash the host, and a lab chain reached root. Patched kernels are rolling out; if you run untrusted guests, patch now.", "url": "https://bsky.app/profile/cybersecurity.page/post/3mxxdnrmqso2w"}, {"timestamp": "2026-10-16T01:07:47Z", "date_only": false, "value": "2026-10-16T01:07:47.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99999", "record": "MSRC_CVE-2026-99999", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-16T01:07:47Z", "date_only": false, "value": "2026-10-16T01:07:47.000Z", "kind": "other", "label": "Date", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99999", "record": "MSRC_CVE-2026-99999", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-16T01:07:47Z", "date_only": false, "value": "2026-10-16T01:07:47.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99999", "record": "MSRC_CVE-2026-99999", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-16T01:59:49Z", "date_only": false, "value": "2026-10-16T01:59:49.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.cert.dk/news/2026-10-16/Kritisk-Linux-fejl-giver-virtuelle-maskiner-adgang-til-vaertens-hukommelse", "record": "CVE-2026-99999", "field": "creation_timestamp", "uuid": "a1ec826b-e904-45b6-9bc8-7ef061a4abde", "url": "https://www.cert.dk/news/2026-10-16/Kritisk-Linux-fejl-giver-virtuelle-maskiner-adgang-til-vaertens-hukommelse"}, {"timestamp": "2026-10-16T03:31:21.946Z", "date_only": false, "value": "2026-10-16T03:31:21.946817Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/newsfacts.bsky.social/post/3mxxna5kpbz23", "record": "CVE-2026-99999", "field": "creation_timestamp", "uuid": "c2898469-2c77-4cb1-bb02-5e5c14b1e0b6", "content": "Linux-kwetsbaarheid bedreigt VM-isolatie\n\nEen ernstige kwetsbaarheid, ge\u00efdentificeerd als CVE-2026-99999 en PwnEscape genoemd door onderzoeker Paulos Yibelo, stelt aanvallers in staat om de isolatie tussen virtuele machines (VM's) en hun host-systemen ...", "url": "https://bsky.app/profile/newsfacts.bsky.social/post/3mxxna5kpbz23"}, {"timestamp": "2026-10-16T05:31:46.089Z", "date_only": false, "value": "2026-10-16T05:31:46.089799Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/Hex.kolektiva.social.ap.brid.gy/post/3mxxtxcertpj2", "record": "CVE-2026-99999", "field": "creation_timestamp", "uuid": "cf37d65f-10f1-4239-92bc-96adc9ed67fc", "content": "Oh... That's bad\n\nhttps://app.opencve.io/cve/CVE-2026-99999", "url": "https://bsky.app/profile/Hex.kolektiva.social.ap.brid.gy/post/3mxxtxcertpj2"}, {"timestamp": "2026-10-16T06:01:35.233Z", "date_only": false, "value": "2026-10-16T06:01:35.233988Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/raven-sec.bsky.social/post/3mxxvmphvy4mx", "record": "CVE-2026-99999", "field": "creation_timestamp", "uuid": "e845baad-6244-4702-bb30-0295b7f2758b", "content": "PwnEscape + AI key theft + 1,286% DDoS surge = crisis mode\n\n\u2022 CVE-2026-99999 breaks VM isolation in cloud\n\u2022 Stolen OpenAI/Anthropic keys fuel auto-hacking\n\n5 sources verified \u00b7 hackingallthethings.com\n#infosec #threatintel #cybersecurity #CVE202699999 #PwnEscape", "url": "https://bsky.app/profile/raven-sec.bsky.social/post/3mxxvmphvy4mx"}, {"timestamp": "2026-10-16T06:18:47.206Z", "date_only": false, "value": "2026-10-16T06:18:47.206113Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mxxwlkash52j", "record": "CVE-2026-99999", "field": "creation_timestamp", "uuid": "ce88c68d-2075-448b-9680-f45de5f5c8ac", "content": "Top 3 CVE for last 7 days:\nCVE-2026-92392: 65 interactions\nCVE-2026-104935: 46 interactions\nCVE-2026-97229: 38 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-0322: 21 interactions\nCVE-2026-99999: 15 interactions\nCVE-2026-102764: 14 interactions\n", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3mxxwlkash52j"}, {"timestamp": "2026-10-16T07:25:29.599Z", "date_only": false, "value": "2026-10-16T07:25:29.599107Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cybowl.bsky.social/post/3mxy2cta5pj22", "record": "CVE-2026-99999", "field": "creation_timestamp", "uuid": "2728356c-5ca1-4eb5-8a56-36d32ba6d97b", "content": "Vuln\u00e9rabilit\u00e9s critiques (CVSS \u2265 9) \u00b7 4\n\u2022 Google Chrome (couche ANGLE) (CVE-2026-110152), CVSS 9.6 (Cyberveille Esant\u00e9)\n\u2022 Docker Hub (CVE-2026-105445), CVSS 9.4 (IT-Connect)\n\u2022 Noyau Linux (CVE-2026-99999), CVSS 9.3 (Hacktualit\u00e9s)", "url": "https://bsky.app/profile/cybowl.bsky.social/post/3mxy2cta5pj22"}, {"timestamp": "2026-10-16T07:40:40.604Z", "date_only": false, "value": "2026-10-16T07:40:40.604634Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/matti-sg.bsky.social/post/3mxy35xntge2d", "record": "CVE-2026-99999", "field": "creation_timestamp", "uuid": "e9638d11-9339-4c92-a1fb-d2d56caa72f9", "content": "#PwnEscape (CVE-2026-99999): a hardcore Guest-to-Host escape based only off IPv4 packets, that impacts most #cloud providers. The timeframe for discovery does show how fundamentally usage of #LLMs changes #cybersecurity research (and how effective #BugBounty programs are).\npwn.ai/blog/pwnescape", "url": "https://bsky.app/profile/matti-sg.bsky.social/post/3mxy35xntge2d"}, {"timestamp": "2026-10-16T07:55:09.102Z", "date_only": false, "value": "2026-10-16T07:55:09.102479Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/Larvitz.burningboard.net.ap.brid.gy/post/3mxy3xblkkx42", "record": "CVE-2026-99999", "field": "creation_timestamp", "uuid": "bd69eb2b-85d2-4ed9-af16-cda5cdf26f6b", "content": "Heads up for fellow Linux admins: CVE-2026-99999 (dubbed \"PwnEscape\") is out, and it is a nasty one (CVSS 9.3).\n\nDespite being called a KVM escape, the actual bug lives in the host IPv4 networking stack. Untrusted CHECKSUM_PARTIAL offload metadata from a guest can overwrite already-validated [\u2026]", "url": "https://bsky.app/profile/Larvitz.burningboard.net.ap.brid.gy/post/3mxy3xblkkx42"}, {"timestamp": "2026-10-16T09:13:17.447Z", "date_only": false, "value": "2026-10-16T09:13:17.447372Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/obivan/statuses/117449817910098229", "record": "CVE-2026-99999", "field": "creation_timestamp", "uuid": "8cbe2f58-1506-4a02-abc4-4cc93d3106b0", "content": "PwnEscape: Guest-to-Host KVM Escape (CVE-2026-99999) https://pwn.ai/blog/pwnescape", "url": "https://infosec.exchange/users/obivan/statuses/117449817910098229"}, {"timestamp": "2026-10-16T09:13:21.385Z", "date_only": false, "value": "2026-10-16T09:13:21.385534Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/obivan.infosec.exchange.ap.brid.gy/post/3mxyadombsca2", "record": "CVE-2026-99999", "field": "creation_timestamp", "uuid": "53b1dc9c-3e25-4ce9-b356-7e64f100a597", "content": "PwnEscape: Guest-to-Host KVM Escape (CVE-2026-99999) https://pwn.ai/blog/pwnescape", "url": "https://bsky.app/profile/obivan.infosec.exchange.ap.brid.gy/post/3mxyadombsca2"}, {"timestamp": "2026-10-16T09:53:33.220Z", "date_only": false, "value": "2026-10-16T09:53:33.220427Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/4sterisk.mi.tomadoi.com.ap.brid.gy/post/3mxycfunbvn62", "record": "CVE-2026-99999", "field": "creation_timestamp", "uuid": "747ef60c-5fa5-484b-8062-e498947308d0", "content": "\u3010\u91cd\u8981\u3011Linux\u30ab\u30fc\u30cd\u30eb\u306e\u8106\u5f31\u6027\uff08CVE-2026-99999\uff09\u306b\u95a2\u3059\u308b\u5f53\u793e\u30b5\u30fc\u30d3\u30b9\u3078\u306e\u5f71\u97ff\u306b\u3064\u3044\u3066 | \u3055\u304f\u3089\u30a4\u30f3\u30bf\u30fc\u30cd\u30c3\u30c8 https://www.sakura.ad.jp/corporate/information/announcements/2026/10/16/1968226051/", "url": "https://bsky.app/profile/4sterisk.mi.tomadoi.com.ap.brid.gy/post/3mxycfunbvn62"}, {"timestamp": "2026-10-16T10:14:10.449Z", "date_only": false, "value": "2026-10-16T10:14:10.449377Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kakkokari-gtyih.misskey.io.ap.brid.gy/post/3mxydpvj2kt62", "record": "CVE-2026-99999", "field": "creation_timestamp", "uuid": "45d63cbb-7c47-42f7-822f-3f54f121e681", "content": "CVE-2026-99999\uff1fMisskey\u306f104817\u3060\u3051\u3069\uff08\u8b0e\u306e\u30de\u30a6\u30f3\u30c8\uff09\n\n", "url": "https://bsky.app/profile/kakkokari-gtyih.misskey.io.ap.brid.gy/post/3mxydpvj2kt62"}, {"timestamp": "2026-10-16T10:21:51.813Z", "date_only": false, "value": "2026-10-16T10:21:51.813734Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/trustlist.bsky.social/post/3mxye66were26", "record": "CVE-2026-99999", "field": "creation_timestamp", "uuid": "08d781d1-dcfb-4bad-8723-9d5f722053d1", "content": "Linux kernel flaw lets a guest VM read and crash its host\n\nCVE-2026-99999, nicknamed PwnEscape, scores 9.3 and sits in the IPv4 checksum code every host kernel runs.\n\n#infosec #cybersecurity #VulnerabilityManagement #sysadmin\ntrustlist.uk/security-advisorie\u2026", "url": "https://bsky.app/profile/trustlist.bsky.social/post/3mxye66were26"}, {"timestamp": "2026-10-16T10:38:42.926Z", "date_only": false, "value": "2026-10-16T10:38:42.926784Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/tech-trending.bsky.social/post/3mxyf4ddzt62d", "record": "CVE-2026-99999", "field": "creation_timestamp", "uuid": "a5ece837-95cb-49be-a49c-e4d93f6bb26b", "content": "\u3010\u91cd\u8981\u3011Linux\u30ab\u30fc\u30cd\u30eb\u306e\u8106\u5f31\u6027\uff08CVE-2026-99999\uff09\u306b\u95a2\u3059\u308b\u5f53\u793e\u30b5\u30fc\u30d3\u30b9\u3078\u306e\u5f71\u97ff\u306b\u3064\u3044\u3066 | \u3055\u304f\u3089\u30a4\u30f3\u30bf\u30fc\u30cd\u30c3\u30c8\nhttps://www.sakura.ad.jp/corporate/information/announcements/2026/10/16/1968226051/", "url": "https://bsky.app/profile/tech-trending.bsky.social/post/3mxyf4ddzt62d"}, {"timestamp": "2026-10-16T10:50:34.835Z", "date_only": false, "value": "2026-10-16T10:50:34.835339Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mxyfrkfuww2f", "record": "CVE-2026-99999", "field": "creation_timestamp", "uuid": "51967a02-a2fe-491e-8a32-b321bc2488b6", "content": "\u7814\u7a76\u8005\u304cAI\u3067Linux\u30ab\u30fc\u30cd\u30eb\u306e\u91cd\u5927\u306a\u6b20\u9665\u3092\u767a\u898b\u3001\u4eee\u60f3\u30de\u30b7\u30f3\u304b\u3089\u306e\u8131\u51fa\u304c\u53ef\u80fd\u306b\n\npwn.ai\u306e\u7814\u7a76\u8005\u3089\u306f\u3001AI\u652f\u63f4\u578b\u306e\u8abf\u67fb\u30cf\u30fc\u30cd\u30b9\u3092\u4f7f\u3044\u3001Linux\u30ab\u30fc\u30cd\u30eb\u306e\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u6a5f\u80fd\u306b\u5b58\u5728\u3059\u308b\u91cd\u5927\u306a\u6b20\u9665\u3092\u767a\u898b\u3057\u307e\u3057\u305f\u3002\u3053\u306e\u6b20\u9665\u306f\u300cCVE-2026-99999\u300d\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u304a\u308a\u3001\u300cPwnEscape\u300d\u3068\u3044\u3046\u901a\u79f0\u304c\u4ed8\u3051\u3089\u308c\u3066\u3044\u307e\u3059\u3002 \u3053\u306e\u6b20\u9665\u3092\u60aa\u7528\u3059\u308b\u3068\u3001\u4fe1\u983c\u3067\u304d\u306a\u3044\u30b2\u30b9\u30c8\u4eee\u60f3\u30de\u30b7\u30f3\uff08VM\uff09\u304b\u3089\u30db\u30b9\u30c8\u306e", "url": "https://bsky.app/profile/blackhatnews.tokyo/post/3mxyfrkfuww2f"}, {"timestamp": "2026-10-16T11:04:19.428Z", "date_only": false, "value": "2026-10-16T11:04:19.428268Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/dragonjar/statuses/117450254517525986", "record": "CVE-2026-99999", "field": "creation_timestamp", "uuid": "2981777d-93da-4fc1-9ecf-3cbc6fe24e71", "content": "En las \u00faltimas 24 horas se han revelado vulnerabilidades cr\u00edticas que afectan desde el kernel Linux y OpenBSD hasta entornos virtualizados KVM y software com\u00fan como WinRAR, facilitando desde escapes de m\u00e1quinas virtuales hasta acceso root y espionaje v\u00eda anuncios, demostrando la urgencia de reforzar auditor\u00edas y protecci\u00f3n integral a infraestructuras digitales. Descubre estos y m\u00e1s detalles en el siguiente listado de noticias sobre seguridad inform\u00e1tica:\n\ud83d\uddde\ufe0f \u00daLTIMAS NOTICIAS EN SEGURIDAD INFORM\u00c1TICA \ud83d\udd12====| \ud83d\udd25 LO QUE DEBES SABER HOY \ufeff\ufeff16/10/26\ufeff\ufeff  \ud83d\udcc6 |==== \n\ud83d\udd13 PWNESCAPE: ESCAPE GUEST-TO-HOST EN KVM (CVE-2026-99999)\nUn desaf\u00edo de sandbox valorado en 1 mill\u00f3n de d\u00f3lares revel\u00f3 una grave vulnerabilidad en el kernel Linux que afecta hipervisores KVM est\u00e1ndares. Esta falla permite mutar encabezados IPv4, provocar divulgaci\u00f3n de memoria y, lo m\u00e1s cr\u00edtico, escapar de m\u00e1quinas virtuales invitadas hacia el host, comprometiendo la seguridad completa del sistema. Esta vulnerabilidad CVE-2026-99999 abre la puerta a ataques sofisticados que explotan la confianza en checksums parciales. Profundiza en esta amenaza y sus implicaciones para la seguridad en entornos virtualizados \ud83d\udc49 https://djar.co/EwCBx\n\ud83d\udd75\ufe0f\u200d\u2642\ufe0f EXPOSICI\u00d3N DE ADFECTION: PUBLICAN EL PRIMER CASO DE SPYWARE DE CLIC CERO VIA ANUNCIOS DIRIGIDOS\nInvestigadores de The Citizen Lab han confirmado la existencia de AdFection, un spyware mercenario de \u201cclic cero\u201d distribuido a trav\u00e9s de anuncios segmentados. Este m\u00e9todo fue usado para infectar dispositivos vinculados a Al Jazeera con spyware de Candiru, evidenciando c\u00f3mo plataformas como Discover-Tech habilitan la vigilancia y hackeo global a trav\u00e9s de publicidad dirigida sin interacci\u00f3n del usuario. Conoce c\u00f3mo esta sofisticada t\u00e9cnica redefine las amenazas en la publicidad digital \ud83d\udc49 https://djar.co/qh5AK\n\ud83d\udc1f EXPLOTAN BUG DE 37 A\u00d1OS EN EL KERNEL DE OPENBSD PARA OBTENER ACCESO ROOT\nUn fallo cr\u00edtico que ha permanecido en el kernel de OpenBSD por m\u00e1s de tres d\u00e9cadas fue finalmente explotado para conseguir privilegios root y abrir una shell con control total. Esta vulnerabilidad hist\u00f3rica pone en alerta sobre la importancia de auditor\u00edas continuas en sistemas considerados altamente seguros. Descubre los detalles t\u00e9cnicos y el impacto de esta explotaci\u00f3n en sistemas protegidos \ud83d\udc49 https://djar.co/VVj6k\n\ud83d\udee1\ufe0f VULNERABILIDAD CR\u00cdTICA EN LINUX PERMITE A M\u00c1QUINAS VIRTUALES LEER MEMORIA DEL HOST\nSe identific\u00f3 una vulnerabilidad grave en el kernel de Linux que permite a las m\u00e1quinas virtuales invitadas leer la memoria del sistema host en entornos sandbox activos. Aunque por ahora no se han reportado ataques en producci\u00f3n, pruebas de laboratorio demostraron la posibilidad de ejecutar c\u00f3digo en el host, lo que plantea un alto riesgo en la virtualizaci\u00f3n y aislamiento de sistemas. Inf\u00f3rmate sobre esta amenaza y c\u00f3mo proteger tus infraestructuras virtualizadas \ud83d\udc49 https://djar.co/WHCw\n\ud83e\udd8a SILENT LYNX EXPLOTA FALLA EN WINRAR PARA IMPLANTAR REVERSE SHELL EN ATAQUES A GOBIERNOS CIS\nEl grupo de ciberamenazas Silent Lynx est\u00e1 utilizando la vulnerabilidad CVE-2025-8088 en WinRAR para desplegar reverse shells en las carpetas de inicio de sistemas Windows. Estas acciones forman parte de campa\u00f1as dirigidas a gobiernos de la Comunidad de Estados Independientes (CIS), permitiendo acceso remoto y control persistente a los atacantes. Conoce c\u00f3mo esta t\u00e9cnica aprovecha software com\u00fan para comprometer entornos gubernamentales \ud83d\udc49 https://djar.co/oCw4V", "url": "https://infosec.exchange/users/dragonjar/statuses/117450254517525986"}, {"timestamp": "2026-10-16T11:12:12.490Z", "date_only": false, "value": "2026-10-16T11:12:12.490490Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/baldanders.info/post/3mxygy73ozi2y", "record": "CVE-2026-99999", "field": "creation_timestamp", "uuid": "881ae25f-27ef-4118-acb4-5834bd4d7684", "content": "\uff1e\u3010\u91cd\u8981\u3011Linux\u30ab\u30fc\u30cd\u30eb\u306e\u8106\u5f31\u6027\uff08CVE-2026-99999\uff09\u306b\u95a2\u3059\u308b\u5f53\u793e\u30b5\u30fc\u30d3\u30b9\u3078\u306e\u5f71\u97ff\u306b\u3064\u3044\u3066 | \u3055\u304f\u3089\u30a4\u30f3\u30bf\u30fc\u30cd\u30c3\u30c8 www.sakura.ad.jp/corporate/...\n\nCVE ID \u306e\u65b9\u306b\u9a5a\u3044\u305fw", "url": "https://bsky.app/profile/baldanders.info/post/3mxygy73ozi2y"}, {"timestamp": "2026-10-16T11:12:44.549Z", "date_only": false, "value": "2026-10-16T11:12:44.549957Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/mstdn.baldanders.info/post/3mxygysqzvya2", "record": "CVE-2026-99999", "field": "creation_timestamp", "uuid": "e7a4f62c-641a-47a6-ac0b-8544695e7025", "content": "\uff1e\u3010\u91cd\u8981\u3011Linux\u30ab\u30fc\u30cd\u30eb\u306e\u8106\u5f31\u6027\uff08CVE-2026-99999\uff09\u306b\u95a2\u3059\u308b\u5f53\u793e\u30b5\u30fc\u30d3\u30b9\u3078\u306e\u5f71\u97ff\u306b\u3064\u3044\u3066 | \u3055\u304f\u3089\u30a4\u30f3\u30bf\u30fc\u30cd\u30c3\u30c8 https://www.sakura.ad.jp/corporate/information/announcements/2026/10/16/1968226051/\n\nCVE ID \u306e\u65b9\u306b\u9a5a\u3044\u305fw", "url": "https://bsky.app/profile/mstdn.baldanders.info/post/3mxygysqzvya2"}, {"timestamp": "2026-10-16T11:30:08.100Z", "date_only": false, "value": "2026-10-16T11:30:08.100606Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hatena-bookmark.bsky.social/post/3mxyhybyn2l26", "record": "CVE-2026-99999", "field": "creation_timestamp", "uuid": "08e595ad-079c-4440-99e1-fd81c6e428d4", "content": "#\ud83d\udd16\u30c6\u30af\u30ce\u30ed\u30b8\u30fc\n\u3010\u91cd\u8981\u3011Linux\u30ab\u30fc\u30cd\u30eb\u306e\u8106\u5f31\u6027\uff08CVE-2026-99999\uff09\u306b\u95a2\u3059\u308b\u5f53\u793e\u30b5\u30fc\u30d3\u30b9\u3078\u306e\u5f71\u97ff\u306b\u3064\u3044\u3066 | \u3055\u304f\u3089\u30a4\u30f3\u30bf\u30fc\u30cd\u30c3\u30c8\n\n\u304a\u5ba2\u3055\u307e\u5404\u4f4d \u5e73\u7d20\u3088\u308a\u3055\u304f\u3089\u30a4\u30f3\u30bf\u30fc\u30cd\u30c3\u30c8\u3092\u3054\u5229\u7528\u3044\u305f\u3060\u304d\u3001\u8aa0\u306b\u3042\u308a\u304c\u3068\u3046\u3054\u3056\u3044\u307e\u3059\u3002 Linux\u30ab\u30fc\u30cd\u30eb\u306e\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u51e6\u7406\u306b\u95a2\u3059\u308b\u8106\u5f31\u6027\uff08CVE-2026-99999\uff09\u304c\u516c\u958b\u3055\u308c\u307e\u3057\u305f\u3002 \u672c\u8106\u5f31\u6027\u306b\u3064\u3044\u3066\u306f\u3001\u4eee\u60f3\u5316\u74b0\u5883\u306b\u304a\u3044\u3066\u30db\u30b9\u30c8\u30b7\u30b9\u30c6\u30e0\u3078\u306e\u5f71\u97ff\u306b\u3064\u306a\u304c\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3068\u5831\u544a\u3055\u308c\u3066\u3044\u307e\u3059\u3002\u5f53\u793e\u3067\u306f\u672c\u8106\u5f31\u6027\u3092\u8a8d\u77e5\u3057\u3001...", "url": "https://bsky.app/profile/hatena-bookmark.bsky.social/post/3mxyhybyn2l26"}, {"timestamp": "2026-10-16T11:37:00.371Z", "date_only": false, "value": "2026-10-16T11:37:00.371172Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/tech-trending.bsky.social/post/3mxyiekbgxs2v", "record": "CVE-2026-99999", "field": "creation_timestamp", "uuid": "c3e11ee0-2a0f-480b-9d4f-940e2e6b9d96", "content": "PwnEscape: Guest-to-Host KVM Escape (CVE-2026-99999)\nhttps://pwn.ai/blog/pwnescape", "url": "https://bsky.app/profile/tech-trending.bsky.social/post/3mxyiekbgxs2v"}, {"timestamp": "2026-10-16T11:37:06.410Z", "date_only": false, "value": "2026-10-16T11:37:06.410657Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/girigiribauer.com/post/3mxyiemtcs72p", "record": "CVE-2026-99999", "field": "creation_timestamp", "uuid": "a789c3a0-9207-4b6a-a203-ffd545a34327", "content": "VPS\u3082\u304b\u3042 / \u3055\u304f\u3089\u306eVPS\u306b\u304a\u3051\u308bLinux\u30ab\u30fc\u30cd\u30eb\u306e\u8106\u5f31\u6027\uff08CVE-2026-99999\uff09\u3078\u306e\u5bfe\u5fdc\u72b6\u6cc1\u306b\u3064\u3044\u3066 \u2013 \u3055\u304f\u3089\u306eVPS\u30cb\u30e5\u30fc\u30b9", "url": "https://bsky.app/profile/girigiribauer.com/post/3mxyiemtcs72p"}, {"timestamp": "2026-10-16T11:38:53.803Z", "date_only": false, "value": "2026-10-16T11:38:53.803161Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/girigiribauer.com/post/3mxyihwf6322i", "record": "CVE-2026-99999", "field": "creation_timestamp", "uuid": "5fbfee45-7ffe-4974-aace-152e51e0f105", "content": "PwnEscape (CVE-2026-99999) \u3084\u3070\u3044\u306a\u30fc\n\u30b2\u30b9\u30c8\u304b\u3089\u30db\u30b9\u30c8\u3078\u306eVM\u30a8\u30b9\u30b1\u30fc\u30d7\u304c\u3067\u304d\u3061\u3083\u3046\u306e\u304b\u3042\u3001\u305d\u308a\u3083\u63d0\u4f9b\u5074\u3082\u8b66\u6212\u3059\u308b\u308f\u3051\u3060\n\u78ba\u304b\u306b\u65b0\u898f\u30e6\u30fc\u30b6\u30fc\u3092\u4e00\u65e6\u6b62\u3081\u308b\u306e\u306f\u65b0\u305f\u306b\u653b\u6483\u3057\u3088\u3046\u3068\u3059\u308b\u653b\u6483\u8005\u304b\u3089\u3059\u308b\u3068\u6709\u52b9\u306a\u5bfe\u7b56\u305d\u3046", "url": "https://bsky.app/profile/girigiribauer.com/post/3mxyihwf6322i"}, {"timestamp": "2026-10-16T11:46:00.805Z", "date_only": false, "value": "2026-10-16T11:46:00.805628Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/igalog.bsky.social/post/3mxyiuofjma2d", "record": "CVE-2026-99999", "field": "creation_timestamp", "uuid": "a354d70d-adec-4e84-9364-03c1f6bb9dad", "content": "\u3010\u91cd\u8981\u3011Linux\u30ab\u30fc\u30cd\u30eb\u306e\u8106\u5f31\u6027\uff08CVE-2026-99999\uff09\u306b\u95a2\u3059\u308b\u5f53\u793e\u30b5\u30fc\u30d3\u30b9\u3078\u306e\u5f71\u97ff\u306b\u3064\u3044\u3066 | \u3055\u304f\u3089\u30a4\u30f3\u30bf\u30fc\u30cd\u30c3\u30c8\nhttps://www.sakura.ad.jp/corporate/information/announcements/2026/10/16/1968226051/\n\n\u5185\u5bb9\u304c\u91cd\u3044\u306a\u30fb\u30fb\u30fb\u3057\u304b\u3057\u3001CVE-2026-99999 \u3068\u3044\u3046\u63a1\u756a\u3055\u308c\u305f\u8106\u5f31\u6027\u756a\u53f7\u3082\u3001\u899a\u3048\u3084\u3059\u3059\u304e\u3066\u30e4\u30d0\u30bf\u30cb\u30a8\u30f3", "url": "https://bsky.app/profile/igalog.bsky.social/post/3mxyiuofjma2d"}, {"timestamp": "2026-10-16T11:46:13.988Z", "date_only": false, "value": "2026-10-16T11:46:13.988843Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/byte.cx/post/3mxyiv2kts22v", "record": "CVE-2026-99999", "field": "creation_timestamp", "uuid": "ab65f30a-4315-4543-a129-0b65ad33eaec", "content": "...aber wie geil ist bitte CVE-2026-99999 als identifier", "url": "https://bsky.app/profile/byte.cx/post/3mxyiv2kts22v"}, {"timestamp": "2026-10-16T11:46:25.553Z", "date_only": false, "value": "2026-10-16T11:46:25.553358Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/tech-invariants.bsky.social/post/3mxyivfixnh2j", "record": "CVE-2026-99999", "field": "creation_timestamp", "uuid": "ad3ba777-e2d8-4d8d-a633-f83bfe9eb2ab", "content": "PwnEscape\uff1a\u30b2\u30b9\u30c8\u304b\u3089\u30db\u30b9\u30c8\u3078\u306eKVM\u30a8\u30b9\u30b1\u30fc\u30d7\uff08CVE-2026-99999\uff09\uff08\u82f1\u8a9e\uff09\n\u30b2\u30b9\u30c8\u304c\u6307\u5b9a\u3057\u305f\u30c1\u30a7\u30c3\u30af\u30b5\u30e0\u60c5\u5831\u306b\u3088\u308a\u3001\u691c\u8a3c\u5f8c\u306eIPv4\u30d8\u30c3\u30c0\u304c\u66f8\u304d\u63db\u3048\u3089\u308c\u3001\u30db\u30b9\u30c8\u306e\u30e1\u30e2\u30ea\u304c\u6f0f\u308c\u308b\u7d4c\u7def\u3092\u305f\u3069\u308a\u307e\u3059\u3002\n\n\u691c\u8a3c\u3092\u6e08\u307e\u305b\u305f\u30c7\u30fc\u30bf\u3067\u3082\u3001\u5f8c\u304b\u3089\u66f8\u304d\u8fbc\u3080\u51e6\u7406\u304c\u6b8b\u3063\u3066\u3044\u308c\u3070\u3001\u305d\u306e\u691c\u8a3c\u306f\u610f\u5473\u3092\u5931\u3044\u307e\u3059\u3002", "url": "https://bsky.app/profile/tech-invariants.bsky.social/post/3mxyivfixnh2j"}, {"timestamp": "2026-10-16T11:54:30.813Z", "date_only": false, "value": "2026-10-16T11:54:30.813654Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/r-netsec.bsky.social/post/3mxyjdutjbg2c", "record": "CVE-2026-99999", "field": "creation_timestamp", "uuid": "6639ae2a-cf86-4215-9d70-6f9b52442921", "content": "PwnEscape: Guest-to-Host KVM Escape (CVE-2026-99999)", "url": "https://bsky.app/profile/r-netsec.bsky.social/post/3mxyjdutjbg2c"}, {"timestamp": "2026-10-16T11:57:39.963Z", "date_only": false, "value": "2026-10-16T11:57:39.963925Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/popochangnano.bsky.social/post/3mxyjjllhus2q", "record": "CVE-2026-99999", "field": "creation_timestamp", "uuid": "2e988ab2-a196-48f6-9785-93506aea2aa4", "content": "CVE-2026-99999\u3001\u30de\u30b0\u30cb\u30c1\u30e5\u30fc\u30c9\u307f\u305f\u3044\u306b\u8aa4\u5831\u3063\u3059\u304b\uff1f\u3068\u601d\u3063\u305f\u3089\u30de\u30b8\u3060\u3057\u3001\u5185\u5bb9\u3082\u6fc0\u30e4\u30d0\u3058\u3083\u3093\u3002", "url": "https://bsky.app/profile/popochangnano.bsky.social/post/3mxyjjllhus2q"}, {"timestamp": "2026-10-16T11:58:58.841Z", "date_only": false, "value": "2026-10-16T11:58:58.841814Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/alt.pds.lefht.cc/post/3mxyjltpuzc2l", "record": "CVE-2026-99999", "field": "creation_timestamp", "uuid": "777c3281-b2e1-4311-b237-cde7e1ab2b2d", "content": "\ud83d\udcc8 CVE-2026-99999 is trending: 10 people posted about it in the last 60 minutes.\n\n\ud83d\udfe5 Critical 9.3 \u00b7 Linux\nipv4: validate checksum_start before completing checksum", "url": "https://bsky.app/profile/alt.pds.lefht.cc/post/3mxyjltpuzc2l"}, {"timestamp": "2026-10-16T12:09:50.402Z", "date_only": false, "value": "2026-10-16T12:09:50.402237Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hyzsui.com/post/3mxyk7b5cyswr", "record": "CVE-2026-99999", "field": "creation_timestamp", "uuid": "9c9abf02-36fd-4eaa-94e3-b9c54626e1ac", "content": "CVE-2026-99999\u3001\u756a\u53f7\u304c\u3044\u304b\u3064\u3059\u304e\u3066\u30a6\u30b1\u308b\u306a", "url": "https://bsky.app/profile/hyzsui.com/post/3mxyk7b5cyswr"}, {"timestamp": "2026-10-16T12:33:53.423Z", "date_only": false, "value": "2026-10-16T12:33:53.423941Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/tsukaguitar.bsky.social/post/3mxylkba2dc2z", "record": "CVE-2026-99999", "field": "creation_timestamp", "uuid": "d0351b20-9e7f-4f89-b4f7-a76a929c6a29", "content": "\u3055\u304f\u3089\u304b\u3089\u306e\u30cb\u30e5\u30fc\u30b9\u3067Linux\u30ab\u30fc\u30cd\u30eb\u306e\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u51e6\u7406\u306b\u95a2\u3059\u308b\u8106\u5f31\u6027\uff08CVE-2026-99999\uff09\u304c\u51fa\u3066\u304d\u305f\u3068\u304b\u3001\u4ed6\u306b\u3082\u3069\u3093\u3069\u3093\u30a8\u30b2\u30c4\u306a\u3044\u30ec\u30d9\u30eb\u306e\u4e0d\u6b63\u30a2\u30af\u30bb\u30b9\u30fb\u6f0f\u6d29\u306e\u30cb\u30e5\u30fc\u30b9\u304c\u98db\u3073\u8fbc\u3093\u3067\u304d\u305f\u308a\u3068\u304b\u3001\u3061\u3087\u3063\u3068\u6226\u6cc1\u60aa\u5316\u3057\u3059\u304e\u3066\u306a\u3044\uff1f", "url": "https://bsky.app/profile/tsukaguitar.bsky.social/post/3mxylkba2dc2z"}, {"timestamp": "2026-10-16T12:39:05.911Z", "date_only": false, "value": "2026-10-16T12:39:05.911457Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/mah-jp.bsky.social/post/3mxyltjsgy52j", "record": "CVE-2026-99999", "field": "creation_timestamp", "uuid": "c3bdf78b-4870-43e9-bb4b-f672d55748c0", "content": "\u306b\u3083\u30fc\u3093\u3002\u304a\u30fc\u3093\u3002 / \n\nCVE Record: CVE-2026-99999 www.cve.org/CVERecord?id...", "url": "https://bsky.app/profile/mah-jp.bsky.social/post/3mxyltjsgy52j"}, {"timestamp": "2026-10-16T12:57:17.406Z", "date_only": false, "value": "2026-10-16T12:57:17.406171Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thecybersecguru.com/post/3mxymu43rbe2w", "record": "cve-2026-99999", "field": "creation_timestamp", "uuid": "5bddc61e-421e-4e0e-82ba-b8c70fb76c39", "content": "PwnEscape (CVE-2026-99999): The Critical Linux Kernel Flaw That Breaks VM\u00a0Isolation\n\nPwnEscape (CVE-2026-99999) is a critical Linux kernel flaw that can expose host memory and enable VM escape. Learn the impact,\u2026\n\nhttps://thecybersecguru.com/exploits/pwnescape-cve-2026-99999-linux-kernel-vm-escape/", "url": "https://bsky.app/profile/thecybersecguru.com/post/3mxymu43rbe2w"}, {"timestamp": "2026-10-16T13:07:28.862Z", "date_only": false, "value": "2026-10-16T13:07:28.862309Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/secdb.bsky.social/post/3mxyngdp2q22o", "record": "CVE-2026-99999", "field": "creation_timestamp", "uuid": "30288702-a7cf-4583-8bef-1d4c96780ac3", "content": "\ud83d\udea8 PwnEscape (CVE-2026-99999) has been identified as a notable vulnerability.\n\n\u2139\ufe0f Additional details, advisories and sightings on ZEN SecDB \ud83d\udc49 secdb.nttzen.cloud/cve/detail/C...\n\n#InfoSec #PwnEscape #Linux #Kernel #CVE202699999\n#NTTDATA #ZENSecDB", "url": "https://bsky.app/profile/secdb.bsky.social/post/3mxyngdp2q22o"}, {"timestamp": "2026-10-16T13:32:34.131Z", "date_only": false, "value": "2026-10-16T13:32:34.131241Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pauldokas.bsky.social/post/3mxyot6efec2y", "record": "CVE-2026-99999", "field": "creation_timestamp", "uuid": "51a2bc82-4ad0-4b24-8a0f-b07de90cbee5", "content": "Happy Friday!\n\n\"The flaw, now tracked as CVE-2026-99999 and nicknamed PwnEscape, is in the Linux kernel's networking code, not in any one cloud's setup, so it reaches the shared layer that cloud providers use to keep customers' workloads apart.\"\nthehackernews.com/2026/10/crit...", "url": "https://bsky.app/profile/pauldokas.bsky.social/post/3mxyot6efec2y"}, {"timestamp": "2026-10-16T14:21:12.443Z", "date_only": false, "value": "2026-10-16T14:21:12.443139Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kossie.mstdn.kemono-friends.info.ap.brid.gy/post/3mxyrjyadkro2", "record": "CVE-2026-99999", "field": "creation_timestamp", "uuid": "86930c0a-4fed-4467-a770-a8c62384d1b7", "content": "\u8106\u5f31\u6027 CVE-2026-99999\n\u88cf\u30b3\u30fc\u30c9999\u307f\u305f\u3044\u3060", "url": "https://bsky.app/profile/kossie.mstdn.kemono-friends.info.ap.brid.gy/post/3mxyrjyadkro2"}, {"timestamp": "2026-10-16T14:26:30.037Z", "date_only": false, "value": "2026-10-16T14:26:30.037054Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/garnould.bsky.social/post/3mxyrtphsi224", "record": "CVE-2026-99999", "field": "creation_timestamp", "uuid": "7dd16db2-3ce2-4652-832d-4b53c57deafc", "content": "Passoire russe CVE-2026-99999\n\nwww.openwall.com/lists/oss-se...", "url": "https://bsky.app/profile/garnould.bsky.social/post/3mxyrtphsi224"}, {"timestamp": "2026-10-16T14:43:16Z", "date_only": false, "value": "2026-10-16T14:43:16.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99999", "record": "MSRC_CVE-2026-99999", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-16T14:43:16Z", "date_only": false, "value": "2026-10-16T14:43:16.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99999", "record": "MSRC_CVE-2026-99999", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-16T15:49:03.519Z", "date_only": false, "value": "2026-10-16T15:49:03.519458Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-99999", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-16T15:49:03.519Z", "date_only": false, "value": "2026-10-16T15:49:03.519458Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-99999", "record": "FKIE_CVE-2026-99999", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-16T15:49:17.183Z", "date_only": false, "value": "2026-10-16T15:49:17.183Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-99999", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-16T15:49:33.785Z", "date_only": false, "value": "2026-10-16T15:49:33.785954Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shuttlej.bsky.social/post/3mxywi4owlc2l", "record": "CVE-2026-99999", "field": "creation_timestamp", "uuid": "2f439a0d-798b-4b51-bae4-0f0af87a8de9", "content": "\u3066\u304b\u4e16\u306e\u4e2d\u7684\u306b\u3061\u3068\u30e4\u30d0\u3044\u6c17\u304c\uff1eCVE-2026-99999", "url": "https://bsky.app/profile/shuttlej.bsky.social/post/3mxywi4owlc2l"}, {"timestamp": "2026-10-16T16:15:11.139Z", "date_only": false, "value": "2026-10-16T16:15:11.139026Z", "kind": "sighting", "label": "Seen", "source": "https://fosstodon.org/users/alpinelinux/statuses/117451476407530184", "record": "CVE-2026-99999", "field": "creation_timestamp", "uuid": "6266fd3a-175c-4b1b-9a10-a45e705a32c5", "content": "alpinelinux.org is currently unavailable due to emergency patching of the host (CVE-2026-99999).\nIt should be back soon.\n#AlpineLinux #AlpineOps", "url": "https://fosstodon.org/users/alpinelinux/statuses/117451476407530184"}, {"timestamp": "2026-10-16T16:23:05.347Z", "date_only": false, "value": "2026-10-16T16:23:05.347", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-99999", "record": "FKIE_CVE-2026-99999", "field": "lastModified"}, {"timestamp": "2026-10-16T17:14:06.847Z", "date_only": false, "value": "2026-10-16T17:14:06.847960Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hn100.bsky.social/post/3mxz37d4nge23", "record": "CVE-2026-99999", "field": "creation_timestamp", "uuid": "03cbf2ba-67a1-47d8-9867-bbceaf190dd5", "content": "Guest-to-Host KVM Escape (CVE-2026-99999) Critical\n\nDiscussion", "url": "https://bsky.app/profile/hn100.bsky.social/post/3mxz37d4nge23"}, {"timestamp": "2026-10-16T18:15:03.541Z", "date_only": false, "value": "2026-10-16T18:15:03.541752Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/alt.pds.lefht.cc/post/3mxz6mcnzis2l", "record": "CVE-2026-99999", "field": "creation_timestamp", "uuid": "aab22288-61ba-47b8-aa58-d4ee418619fd", "content": "\ud83d\udee1\ufe0f Most-discussed CVEs on Bluesky, last 24h\n\n1. CVE-2026-99999 \u00b7 43 people\n2. CVE-2026-102764 \u00b7 27 people \ud83d\udd25\n3. CVE-2026-0322 \u00b7 13 people \ud83d\udd25\n4. CVE-2026-76519 \u00b7 11 people \ud83d\udd25\n5. CVE-2026-110447 \u00b7 10 people\n\n\ud83d\udd25 = on CISA's Known Exploited list \u00b7 details in the thread \ud83e\uddf5", "url": "https://bsky.app/profile/alt.pds.lefht.cc/post/3mxz6mcnzis2l"}, {"timestamp": "2026-10-16T18:15:04.084Z", "date_only": false, "value": "2026-10-16T18:15:04.084326Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/alt.pds.lefht.cc/post/3mxz6mcqas22l", "record": "CVE-2026-99999", "field": "creation_timestamp", "uuid": "53a09d78-ee63-4639-9cd1-a1e40755d615", "content": "1. CVE-2026-99999 \u00b7 43 people\n\ud83d\udfe5 Critical 9.3 \u00b7 Linux\n\nipv4: validate checksum_start before completing checksum", "url": "https://bsky.app/profile/alt.pds.lefht.cc/post/3mxz6mcqas22l"}, {"timestamp": "2026-10-16T20:24:16.570Z", "date_only": false, "value": "2026-10-16T20:24:16.570343Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/koty.dev/post/3mxzftf6nrsi7", "record": "CVE-2026-99999", "field": "creation_timestamp", "uuid": "811889c5-cc7c-4565-87ee-2acdf918c5f1", "content": "CVE-2026-99999 \u3066\u4eee\u306e\u756a\u53f7\u3058\u3083\u306a\u304b\u3063\u305f\u306e\u304b\u3002\u3002\u3002", "url": "https://bsky.app/profile/koty.dev/post/3mxzftf6nrsi7"}, {"timestamp": "2026-10-16T20:40:34.877Z", "date_only": false, "value": "2026-10-16T20:40:34.877222Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/axematty.com/post/3mxzgqdqgqs2l", "record": "CVE-2026-99999", "field": "creation_timestamp", "uuid": "dacf228d-f0e2-4a9d-a8f9-1401eaeea101", "content": "CVE-2026-99999", "url": "https://bsky.app/profile/axematty.com/post/3mxzgqdqgqs2l"}, {"timestamp": "2026-10-16T21:33:06.407Z", "date_only": false, "value": "2026-10-16T21:33:06.407374Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/almalinux.org/post/3mxzjoepsxx2a", "record": "cve-2026-99999", "field": "creation_timestamp", "uuid": "94d62b72-4371-48c6-b09b-5fa9d9f05f2b", "content": "\u26a0\ufe0f PwnEscape (CVE-2026-99999) is a newly disclosed Linux kernel vulnerability. \n\nAlmaLinux 8, 9, and 10 are affected. Patched kernels are available for testing!\n\nRead more: https://almalinux.org/blog/2026-10-16-pwnescape-cve-2026-99999/?utm_medium=social&utm_source=bluesky", "url": "https://bsky.app/profile/almalinux.org/post/3mxzjoepsxx2a"}, {"timestamp": "2026-10-16T22:33:30.482Z", "date_only": false, "value": "2026-10-16T22:33:30.482005Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/sirrow.info/post/3mxzn2d2mase4", "record": "CVE-2026-99999", "field": "creation_timestamp", "uuid": "37d4a58a-5056-4f5d-b598-c19504bcf6f4", "content": "CVE-2026-99999 \u3084\u3070\u305d\u3046\u3060\u306a\u3002\u4e00\u5fdc\u81ea\u5206\u304c\u5f71\u97ff\u53d7\u3051\u306a\u3044\u304b\u3061\u3083\u3093\u3068\u8aad\u3093\u3067\u304a\u304f\u304b\u3002\u3002", "url": "https://bsky.app/profile/sirrow.info/post/3mxzn2d2mase4"}, {"timestamp": "2026-10-16T23:21:55.393Z", "date_only": false, "value": "2026-10-16T23:21:55.393443Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/nilab.bsky.social/post/3mxzpr23j5s2g", "record": "CVE-2026-99999", "field": "creation_timestamp", "uuid": "7524b847-12a6-4379-90d3-b4829f344cc5", "content": "CVE Record: CVE-2026-99999, Severity: CRITICAL, Score: 9.3 \"Title: ipv4: validate checksum_start before completing checksum\" \"Published: 2026-10-15\" \"In the Linux kernel, the following vulnerability has been resolved\"\n\nwww.cve.org/CVERecord?id...", "url": "https://bsky.app/profile/nilab.bsky.social/post/3mxzpr23j5s2g"}, {"timestamp": "2026-10-16T23:28:14.970Z", "date_only": false, "value": "2026-10-16T23:28:14.970496Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hatena-tech.bsky.social/post/3mxzq4eobwf2y", "record": "CVE-2026-99999", "field": "creation_timestamp", "uuid": "8228d990-7569-4a06-8405-7fba7677da38", "content": "\ud83d\udcdd \u3010\u91cd\u8981\u3011Linux\u30ab\u30fc\u30cd\u30eb\u306e\u8106\u5f31\u6027\uff08CVE-2026-99999\uff09\u306b\u95a2\u3059\u308b\u5f53\u793e\u30b5\u30fc\u30d3\u30b9\u3078\u306e\u5f71\u97ff\u306b\u3064\u3044\u3066 | \u3055\u304f\u3089\u30a4\u30f3\u30bf\u30fc\u30cd\u30c3\u30c8\n\n\ud83d\udd16 158 \u30d6\u30c3\u30af\u30de\u30fc\u30af\n\ud83d\udcac \u30b3\u30e1\u30f3\u30c8\n\ud83d\udd17 \u8a18\u4e8b\u30ea\u30f3\u30af", "url": "https://bsky.app/profile/hatena-tech.bsky.social/post/3mxzq4eobwf2y"}, {"timestamp": "2026-10-16T23:33:54.229Z", "date_only": false, "value": "2026-10-16T23:33:54.229302Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/tech-trending.bsky.social/post/3mxzqgi7cap2u", "record": "cve-2026-99999", "field": "creation_timestamp", "uuid": "3de47ba2-8923-4118-9918-8c401a0b3641", "content": "NVD - Home\nhttps://nvd.nist.gov/vuln/detail/cve-2026-99999", "url": "https://bsky.app/profile/tech-trending.bsky.social/post/3mxzqgi7cap2u"}, {"timestamp": "2026-10-17T00:19:34.118Z", "date_only": false, "value": "2026-10-17T00:19:34.118593Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/tech-trending.bsky.social/post/3mxzsy52tff2t", "record": "CVE-2026-99999", "field": "creation_timestamp", "uuid": "31017dd8-34ca-4bcc-aeb5-7bc74a947ad9", "content": "\u3055\u304f\u3089\u306eVPS\u306b\u304a\u3051\u308bLinux\u30ab\u30fc\u30cd\u30eb\u306e\u8106\u5f31\u6027\uff08CVE-2026-99999\uff09\u3078\u306e\u5bfe\u5fdc\u72b6\u6cc1\u306b\u3064\u3044\u3066\nhttps://vps.sakura.ad.jp/contents/info/202610-pendingapply/", "url": "https://bsky.app/profile/tech-trending.bsky.social/post/3mxzsy52tff2t"}, {"timestamp": "2026-10-17T00:20:08.362Z", "date_only": false, "value": "2026-10-17T00:20:08.362358Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hatena-bookmark.bsky.social/post/3mxzsz5l25a2d", "record": "CVE-2026-99999", "field": "creation_timestamp", "uuid": "38866664-ff30-4612-819f-08c85286d8f6", "content": "#\ud83d\udd16\u30c6\u30af\u30ce\u30ed\u30b8\u30fc\n\u3055\u304f\u3089\u306eVPS\u306b\u304a\u3051\u308bLinux\u30ab\u30fc\u30cd\u30eb\u306e\u8106\u5f31\u6027\uff08CVE-2026-99999\uff09\u3078\u306e\u5bfe\u5fdc\u72b6\u6cc1\u306b\u3064\u3044\u3066\n\n\u5e73\u7d20\u3088\u308a\u3055\u304f\u3089\u306eVPS\u3092\u3054\u5229\u7528\u3044\u305f\u3060\u304d\u3001\u8aa0\u306b\u3042\u308a\u304c\u3068\u3046\u3054\u3056\u3044\u307e\u3059\u3002 Linux\u30ab\u30fc\u30cd\u30eb\u306e\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u51e6\u7406\u306b\u95a2\u3059\u308b\u8106\u5f31\u6027\uff08CVE-2026-99999\u3001\u901a\u79f0\u300cPwnEscape\u300d\uff09\u306b\u3064\u3044\u3066\u3001\u3055\u304f\u3089\u306eVPS\u306b\u304a\u3051\u308b\u73fe\u5728\u306e\u5bfe\u5fdc\u72b6\u6cc1\u3092\u3054\u6848\u5185\u3044\u305f\u3057\u307e\u3059\u3002 \u73fe\u5728\u3001\u3055\u304f\u3089\u306eVPS\u3067\u306f\u77f3\u72e9\u3001\u6771\u4eac\u3001\u5927\u962a\u306e\u5168\u30ea\u30fc\u30b8\u30e7\u30f3\u3067\u65b0\u898f\u7533\u3057\u8fbc\u307f\u306e\u53d7\u4ed8\u3092\u4e00\u6642\u7684\u306b\u505c\u6b62\u3057...", "url": "https://bsky.app/profile/hatena-bookmark.bsky.social/post/3mxzsz5l25a2d"}, {"timestamp": "2026-10-17T00:51:14.523Z", "date_only": false, "value": "2026-10-17T00:51:14.523779Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/buyoh.bsky.social/post/3mxzuqpb43c23", "record": "CVE-2026-99999", "field": "creation_timestamp", "uuid": "9615087a-1a56-46c2-a62d-204f6dc562d7", "content": "\u60aa\u7528\u306e\u30b9\u30d4\u30fc\u30c9\u304c\u3042\u307e\u308a\u306b\u3082\u65e9\u3059\u304e\u308b\u306e\u3067\u3001\u6d41\u51fa\u306e\u6709\u7121\u3088\u308a\u5148\u306b\u8106\u5f31\u6027\u306b\u8a72\u5f53\u3059\u308b\u306e\u304c\u5206\u304b\u3063\u305f\u3089\u3059\u3050\u5831\u544a\u3059\u308b\u6d41\u308c\u306b\u306a\u3063\u3066\u304d\u3066\u308b\u3093\u3060\u3088\u306a\n\n\u3010\u91cd\u8981\u3011Linux\u30ab\u30fc\u30cd\u30eb\u306e\u8106\u5f31\u6027\uff08CVE-2026-99999\uff09\u306b\u95a2\u3059\u308b\u5f53\u793e\u30b5\u30fc\u30d3\u30b9\u3078\u306e\u5f71\u97ff\u306b\u3064\u3044\u3066 www.sakura.ad.jp/corporate/in...", "url": "https://bsky.app/profile/buyoh.bsky.social/post/3mxzuqpb43c23"}, {"timestamp": "2026-10-17T01:04:19.298Z", "date_only": false, "value": "2026-10-17T01:04:19.298411Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/tech-trending.bsky.social/post/3mxzvi5smn52f", "record": "cve-2026-99999", "field": "creation_timestamp", "uuid": "05c01834-4e83-4641-8db5-c9c7ba9777fa", "content": "\u3055\u304f\u3089\u306e\u30af\u30e9\u30a6\u30c9\u306b\u304a\u3051\u308bLinux\u30ab\u30fc\u30cd\u30eb\u306e\u8106\u5f31\u6027\uff08CVE-2026-99999\uff09\u3078\u306e\u5bfe\u5fdc\u72b6\u6cc1\u306b\u3064\u3044\u3066\nhttps://cloud.sakura.ad.jp/news/2026/10/16/cve-2026-99999/", "url": "https://bsky.app/profile/tech-trending.bsky.social/post/3mxzvi5smn52f"}, {"timestamp": "2026-10-17T01:19:48.342Z", "date_only": false, "value": "2026-10-17T01:19:48.342370Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/mrmts.mstdn.mrmts.com.ap.brid.gy/post/3mxzwdprqk6k2", "record": "cve-2026-99999", "field": "creation_timestamp", "uuid": "e04273fa-562b-4473-9af8-c01ac5f2b324", "content": "CVE-2026-99999 \u3084\u3070\u3044\u306a\u3042\u3002\u3044\u307e\u3053\u305d\u307f\u3093\u306aFreeBSD\u306b\u56de\u5e30\u3057\u3088\uff1f\uff01\n\nhttps://nvd.nist.gov/vuln/detail/cve-2026-99999", "url": "https://bsky.app/profile/mrmts.mstdn.mrmts.com.ap.brid.gy/post/3mxzwdprqk6k2"}, {"timestamp": "2026-10-17T01:23:00.569Z", "date_only": false, "value": "2026-10-17T01:23:00.569253Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/7shi.bsky.social/post/3mxzwjjsenk2u", "record": "CVE-2026-99999", "field": "creation_timestamp", "uuid": "b1a75fb7-5949-4660-8d5a-964bed85dbf4", "content": "\u3010\u91cd\u8981\u3011Linux\u30ab\u30fc\u30cd\u30eb\u306e\u8106\u5f31\u6027\uff08CVE-2026-99999\uff09\u306b\u95a2\u3059\u308b\u5f53\u793e\u30b5\u30fc\u30d3\u30b9\u3078\u306e\u5f71\u97ff\u306b\u3064\u3044\u3066\nwww.sakura.ad.jp/corporate/in...", "url": "https://bsky.app/profile/7shi.bsky.social/post/3mxzwjjsenk2u"}, {"timestamp": "2026-10-17T01:54:05.974Z", "date_only": false, "value": "2026-10-17T01:54:05.974372Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/eulanov.m.eula.dev.ap.brid.gy/post/3mxzyb33dqdk2", "record": "CVE-2026-99999", "field": "creation_timestamp", "uuid": "9ac1bf1d-4d90-450e-b8fb-c967e49114b1", "content": "AWS \u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u901f\u5831 2026-137-AWS\uff08CVE-2026-99999\uff09\u306f\u901a\u5e38\u306e EC2 \u306f\u5bfe\u8c61\u5916\u3002\u5f71\u97ff\u7bc4\u56f2\u3092\u78ba\u8a8d\u3057\u3066\u307f\u305f | DevelopersIO https://dev.classmethod.jp/articles/aws-security-bulletin-2026-137-kvm-kernel/\n\n> \u5224\u65ad\u306e\u8ef8\u306f\u3001\u81ea\u5206\u304c KVM \u30db\u30b9\u30c8\u3092\u904b\u7528\u3057\u3066\u3044\u308b\u304b\u3069\u3046\u304b\u3067\u3059\u3002\n\n\u307b\u3049\u30fc\n\n#AWS", "url": "https://bsky.app/profile/eulanov.m.eula.dev.ap.brid.gy/post/3mxzyb33dqdk2"}, {"timestamp": "2026-10-17T02:40:57.053Z", "date_only": false, "value": "2026-10-17T02:40:57.053868Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/tech-trending.bsky.social/post/3my22uw2s4m2l", "record": "CVE-2026-99999", "field": "creation_timestamp", "uuid": "84fa7c16-7cc3-4944-8cef-422101da294e", "content": "CVE-2026-99999\uff08PwnEscape\uff09\u3092\u8aad\u307f\u89e3\u304f\u2500\u2500\u300cKVM\u306e\u8106\u5f31\u6027\u300d\u3067\u306f\u306a\u304f\u3001Linux\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u30b9\u30bf\u30c3\u30af\u306e\u8106\u5f31\u6027 - Qiita\nhttps://qiita.com/k2_naka/items/fa87685231377f15e7e3", "url": "https://bsky.app/profile/tech-trending.bsky.social/post/3my22uw2s4m2l"}, {"timestamp": "2026-10-17T02:44:34.152Z", "date_only": false, "value": "2026-10-17T02:44:34.152383Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/tech-invariants.bsky.social/post/3my233fpzxw2c", "record": "CVE-2026-99999", "field": "creation_timestamp", "uuid": "c0bfbc11-f00b-4450-8b60-fc2426fa632d", "content": "CVE-2026-99999\uff08PwnEscape\uff09\u3092\u8aad\u307f\u89e3\u304f\u2500\u2500\u300cKVM\u306e\u8106\u5f31\u6027\u300d\u3067\u306f\u306a\u304f\u3001Linux\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u30b9\u30bf\u30c3\u30af\u306e\u8106\u5f31\u6027\n\u300cKVM escape\u300d\u3068\u547c\u3070\u308c\u305f\u6b20\u9665\u306e\u4fee\u6b63\u7b87\u6240\u3092\u8ffd\u3044\u3001\u30b2\u30b9\u30c8\u304c\u9001\u308b\u4e0d\u6b63\u306a\u30e1\u30bf\u30c7\u30fc\u30bf\u304c\u30db\u30b9\u30c8\u5074\u306eIPv4\u51e6\u7406\u3092\u58ca\u3059\u4ed5\u7d44\u307f\u3092\u8aac\u660e\u3057\u3066\u3044\u307e\u3059\u3002\n\n\u547c\u3073\u540d\u306f\u73fe\u8c61\u306e\u898b\u3048\u65b9\u3092\u8868\u3059\u3060\u3051\u306a\u306e\u3067\u3001\u6b20\u9665\u304c\u3042\u308b\u5c64\u306f\u540d\u524d\u3067\u306f\u306a\u304f\u3001\u4fee\u6b63\u304c\u5165\u3063\u305f\u5834\u6240\u304b\u3089\u8aad\u307f\u53d6\u308c\u307e\u3059\u3002", "url": "https://bsky.app/profile/tech-invariants.bsky.social/post/3my233fpzxw2c"}, {"timestamp": "2026-10-17T02:45:11.570Z", "date_only": false, "value": "2026-10-17T02:45:11.570349Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hatena-bookmark.bsky.social/post/3my234iswr72w", "record": "CVE-2026-99999", "field": "creation_timestamp", "uuid": "3ca3ff21-2d6c-4d0a-a4c6-648f5eacf29f", "content": "#\ud83d\udd16\u30c6\u30af\u30ce\u30ed\u30b8\u30fc\nCVE-2026-99999\uff08PwnEscape\uff09\u3092\u8aad\u307f\u89e3\u304f\u2500\u2500\u300cKVM\u306e\u8106\u5f31\u6027\u300d\u3067\u306f\u306a\u304f\u3001Linux\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u30b9\u30bf\u30c3\u30af\u306e\u8106\u5f31\u6027 - Qiita\n\n\u672c\u7a3f\u306f\u7b46\u8005\u500b\u4eba\u306e\u5206\u6790\u3067\u3042\u308a\u3001\u6240\u5c5e\u7d44\u7e54\u3084\u5404\u4e8b\u696d\u8005\u306e\u516c\u5f0f\u898b\u89e3\u3067\u306f\u3042\u308a\u307e\u305b\u3093\u3002\u57fa\u6e96\u65e5\u306f2026\u5e7410\u670816\u65e5\uff08\u8cc7\u6599\u78ba\u8a8d 21:24 JST\uff09\u3067\u3059\u3002CVE\u30fb\u4fee\u6b63\u7248\u30fb\u5404\u4e8b\u696d\u8005\u306e\u5bfe\u5fdc\u72b6\u6cc1\u306f\u5909\u52d5\u3059\u308b\u305f\u3081\u3001\u9069\u7528\u5224\u65ad\u6642\u306b\u306f\u539f\u5178\u3068\u81ea\u74b0\u5883\u3092\u518d\u78ba\u8a8d\u3057\u3066\u304f\u3060\u3055\u3044\u3002\u672c\u6587\u306e\u53c2\u7167\u756a\u53f7 [n] \u306f\u672b\u5c3e\u300c\u53c2\u7167\u300d\u306e\u6839\u62e0URL\u306b\u5bfe\u5fdc\u3057\u307e\u3059\u3002 \u672c\u7a3f\u3067\u306e\u300c\u78ba\u8a8d\u300d\u306e\u7bc4\u56f2 ...", "url": "https://bsky.app/profile/hatena-bookmark.bsky.social/post/3my234iswr72w"}, {"timestamp": "2026-10-17T03:22:36.361Z", "date_only": false, "value": "2026-10-17T03:22:36.361663Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3my257ea44c23", "record": "CVE-2026-99999", "field": "creation_timestamp", "uuid": "d83bbc3c-d086-4134-a56f-0dac43ee7131", "content": "\u3055\u304f\u3089\u30a4\u30f3\u30bf\u30fc\u30cd\u30c3\u30c8\u3001Linux\u30ab\u30fc\u30cd\u30eb\u91cd\u5927\u306a\u8106\u5f31\u6027\u300cCVE-2026-99999\u300d\u5bfe\u5fdc\u3067\u65b0\u898f\u7533\u8fbc\u3092\u4e00\u6642\u505c\u6b62\u2015\u30af\u30e9\u30a6\u30c9\u30fbVPS\u306a\u3069\u5f71\u97ff\u8abf\u67fb \n rocket-boys.co.jp/security-mea... \n\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56Lab #security #securitynews #\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 #\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30cb\u30e5\u30fc\u30b9", "url": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3my257ea44c23"}, {"timestamp": "2026-10-17T04:26:22.348Z", "date_only": false, "value": "2026-10-17T04:26:22.348388Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hsur.bsky.social/post/3my2arclbgs2l", "record": "CVE-2026-99999", "field": "creation_timestamp", "uuid": "5bb71a46-e489-4f77-aaec-2937b087cac4", "content": "\u3010\u91cd\u8981\u3011Linux\u30ab\u30fc\u30cd\u30eb\u306e\u8106\u5f31\u6027\uff08CVE-2026-99999\uff09\u306b\u95a2\u3059\u308b\u5f53\u793e\u30b5\u30fc\u30d3\u30b9\u3078\u306e\u5f71\u97ff\u306b\u3064\u3044\u3066 www.sakura.ad.jp/corporate/in... \u3053\u308c\u306f\u5927\u5909\u305d\u3046", "url": "https://bsky.app/profile/hsur.bsky.social/post/3my2arclbgs2l"}, {"timestamp": "2026-10-17T05:10:34.696Z", "date_only": false, "value": "2026-10-17T05:10:34.696670Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/telescope.littleplanetlabs.com/post/3my2daj5ifb2n", "record": "CVE-2026-99999", "field": "creation_timestamp", "uuid": "993795d6-7a1f-48b0-8b9c-3a4f387a067e", "content": "Update: Akamai has completed patching Compute hypervisors for the known vulnerabilities related to CVE-2026-99999, also referred to as \u201cPwnEscape\u201d, and we have not identified any exploitation on the Akamai platform. We recommend that customers upgrade Linode guest VMs using kernels from upstream OS\u2026", "url": "https://bsky.app/profile/telescope.littleplanetlabs.com/post/3my2daj5ifb2n"}, {"timestamp": "2026-10-17T05:55:53.276Z", "date_only": false, "value": "2026-10-17T05:55:53.276397Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bot-de-florian.bsky.social/post/3my2frjjh3724", "record": "CVE-2026-99999", "field": "creation_timestamp", "uuid": "18659af1-fd79-41a5-80f6-13b9b804e409", "content": "\ud83d\udc27 PwnEscape (CVE-2026-99999) : \u00e9vasion KVM guest-to-host dans le noyau Linux, \u00e0 surveiller pour les infra de virtualisation.\nhttps://www.openwall.com/lists/oss-security/2026/10/15/5", "url": "https://bsky.app/profile/bot-de-florian.bsky.social/post/3my2frjjh3724"}, {"timestamp": "2026-10-17T06:05:38.679Z", "date_only": false, "value": "2026-10-17T06:05:38.679027Z", "kind": "milestone", "label": "Published", "source": "osv_bellsoft \u00b7 BELL-CVE-2026-99999", "record": "BELL-CVE-2026-99999", "field": "published"}, {"timestamp": "2026-10-17T06:05:49.013Z", "date_only": false, "value": "2026-10-17T06:05:49.013044Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3my2gdbnb2h2p", "record": "CVE-2026-99999", "field": "creation_timestamp", "uuid": "f2d13408-81ed-4e33-a714-d56c4e37e89c", "content": "Top 3 CVE for last 7 days:\nCVE-2026-94603: 148 interactions\nCVE-2026-99999: 89 interactions\nCVE-2026-92392: 67 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-94603: 148 interactions\nCVE-2026-99999: 74 interactions\nCVE-2026-102764: 38 interactions\n", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3my2gdbnb2h2p"}, {"timestamp": "2026-10-17T06:20:30.501Z", "date_only": false, "value": "2026-10-17T06:20:30.501087Z", "kind": "other", "label": "Updated", "source": "osv_bellsoft \u00b7 BELL-CVE-2026-99999", "record": "BELL-CVE-2026-99999", "field": "modified"}, {"timestamp": "2026-10-17T06:37:27.839Z", "date_only": false, "value": "2026-10-17T06:37:27.839031Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/tkusano.jp/post/3my2i3qxc2k2v", "record": "CVE-2026-99999", "field": "creation_timestamp", "uuid": "76dac35d-1a07-4f05-9ab2-1d8ae993a3c4", "content": "CVE-2026-99999\n\n\u4eca\u8a71\u984c\u306e\u3084\u3064", "url": "https://bsky.app/profile/tkusano.jp/post/3my2i3qxc2k2v"}, {"timestamp": "2026-10-17T07:00:29.651Z", "date_only": false, "value": "2026-10-17T07:00:29.651623Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3my2jf22x322q", "record": "CVE-2026-99999", "field": "creation_timestamp", "uuid": "70ce8f65-34fd-40b1-b841-c78c7104190d", "content": "CVE-2026-99999 (PwnEscape) lets guest-controlled packets disclose host memory and may enable host compromise. Root execution was demonstrated only in researchers\u2019 lab; update and reboot affected host kernels.", "url": "https://bsky.app/profile/hendryadrian.bsky.social/post/3my2jf22x322q"}, {"timestamp": "2026-10-17T07:00:38.066Z", "date_only": false, "value": "2026-10-17T07:00:38.066Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99999", "record": "MSRC_CVE-2026-99999", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-17T07:19:33.296Z", "date_only": false, "value": "2026-10-17T07:19:33.296712Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/imaya.bsky.social/post/3my2kh4dunsdn", "record": "CVE-2026-99999", "field": "creation_timestamp", "uuid": "3ebdfeda-d128-4120-a5a3-b95b350594a4", "content": "CVE-2026-99999\u3001\u756a\u53f7\u306e\u305b\u3044\u3067\u306a\u3093\u3068\u306a\u304f\u5618\u304f\u3055\u3044", "url": "https://bsky.app/profile/imaya.bsky.social/post/3my2kh4dunsdn"}, {"timestamp": "2026-10-17T07:28:55.052Z", "date_only": false, "value": "2026-10-17T07:28:55.052605Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3my2kxttxjl24", "record": "CVE-2026-99999", "field": "creation_timestamp", "uuid": "482f01a9-42dd-4fbb-8d07-117cd071dc96", "content": "PwnEscape: Linux Kernel Virtual Machine Escape Vulnerability (CVE-2026-99999) and AI-Driven Threat Discovery +\u00a0Video\n\nIntroduction: The discovery of PwnEscape (CVE-2026-99999, CVSS 9.3) highlights a critical vulnerability within the Linux kernel's networking subsystem that allows a guest virtual\u2026", "url": "https://bsky.app/profile/undercode.bsky.social/post/3my2kxttxjl24"}, {"timestamp": "2026-10-17T07:58:44.138Z", "date_only": false, "value": "2026-10-17T07:58:44.138856Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/dacbarbos.mastodon.social.ap.brid.gy/post/3my2mn2rdi2r2", "record": "CVE-2026-99999", "field": "creation_timestamp", "uuid": "6b2df03a-a926-48ce-8453-be726217599e", "content": "PwnEscape: Guest-to-Host KVM Escape (CVE-2026-99999) https://pwn.ai/blog/pwnescape #infosec", "url": "https://bsky.app/profile/dacbarbos.mastodon.social.ap.brid.gy/post/3my2mn2rdi2r2"}, {"timestamp": "2026-10-17T08:00:24.517Z", "date_only": false, "value": "2026-10-17T08:00:24.517920Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/calimegai.bsky.social/post/3my2mq3izqc2z", "record": "CVE-2026-99999", "field": "creation_timestamp", "uuid": "9c2aba5c-6f97-4b59-a46e-00d3237fdc93", "content": "PwnEscape (CVE-2026-99999): faille critique du noyau Linux permettant aux VM invit\u00e9es de lire la m\u00e9moire h\u00f4te. D\u00e9montr\u00e9e sur les sandboxes de Vercel et confirm\u00e9e. \ud83d\udd13 #Vercel #Linux \n\nthehackernews.com/2026/10/crit...", "url": "https://bsky.app/profile/calimegai.bsky.social/post/3my2mq3izqc2z"}, {"timestamp": "2026-10-17T08:01:47.896Z", "date_only": false, "value": "2026-10-17T08:01:47.896167Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/dacbarbos.eurosky.social/post/3my2msndets24", "record": "CVE-2026-99999", "field": "creation_timestamp", "uuid": "8c13aaa2-da82-47f0-aec5-360a279b2f79", "content": "PwnEscape: Guest-to-Host KVM Escape (CVE-2026-99999) pwn.ai/blog/pwnescape #infosec", "url": "https://bsky.app/profile/dacbarbos.eurosky.social/post/3my2msndets24"}, {"timestamp": "2026-10-17T08:09:06.433Z", "date_only": false, "value": "2026-10-17T08:09:06.433412Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/tech-trending.bsky.social/post/3my2n7pr5pw2b", "record": "CVE-2026-99999", "field": "creation_timestamp", "uuid": "edc615c0-52f1-4404-af9b-7fac9bff8bab", "content": "AWS \u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u901f\u5831 2026-137-AWS\uff08CVE-2026-99999\uff09\u306f\u901a\u5e38\u306e EC2 \u306f\u5bfe\u8c61\u5916\u3002\u5f71\u97ff\u7bc4\u56f2\u3092\u78ba\u8a8d\u3057\u3066\u307f\u305f | DevelopersIO\nhttps://dev.classmethod.jp/articles/aws-security-bulletin-2026-137-kvm-kernel/", "url": "https://bsky.app/profile/tech-trending.bsky.social/post/3my2n7pr5pw2b"}, {"timestamp": "2026-10-17T08:12:37Z", "date_only": false, "value": "2026-10-17T08:12:37.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/shimarin/3e69147b9c5ca911d9f21998472a6fca", "record": "CVE-2026-99999", "field": "creation_timestamp", "uuid": "6afa6340-819e-4f9a-947e-e66805eec2c7", "content": "#!/usr/bin/env python3\n# -*- coding: utf-8 -*-\n\"\"\"pwnescape-trapper \u2014 CVE-2026-99999(PwnEscape)\u306e\u6f0f\u6d29\u75d5\u8de1\u3092\u30db\u30b9\u30c8 egress \u3067\u691c\u77e5\u3059\u308b\u7f60\u3002\n\n\u30db\u30b9\u30c8\u306e IPv4 egress \u3067\u8d77\u304d\u308b\u30d8\u30c3\u30c0\u5909\u7570(ihl 0x45 -> 0x4f\u3001IHL=15 \u306e 60 \u30d0\u30a4\u30c8\u30d8\u30c3\u30c0\u672b\u5c3e\u306b\n\u30db\u30b9\u30c8\u30e1\u30e2\u30ea\u7d04 32 \u30d0\u30a4\u30c8\u304c\u6df7\u5165\u3059\u308b)\u3092\u3001\u7269\u7406 uplink \u4e0a\u306e\u300cIPv4 \u304b\u3064 IHL=15\u300d\u3068\u3044\u3046\u5358\u4e00\u306e\n\u4e0d\u5909\u6761\u4ef6\u9055\u53cd\u3068\u3057\u3066\u30ab\u30fc\u30cd\u30eb\u5074 classic BPF \u3067\u62fe\u3044\u3001\u30d2\u30c3\u30c8\u3057\u305f\u30d1\u30b1\u30c3\u30c8\u3060\u3051\u3092\u53d6\u308a\u51fa\u3057\u3066\n\u8a18\u9332\u30fb\u6307\u7d0b\u5206\u6790\u30fb\u30e1\u30fc\u30eb\u901a\u77e5\u3059\u308b\u3002\n\nPython \u6a19\u6e96\u30e9\u30a4\u30d6\u30e9\u30ea\u306e\u307f\u3067\u52d5\u4f5c\u3059\u308b(\u8ffd\u52a0\u30d1\u30c3\u30b1\u30fc\u30b8\u4e0d\u8981)\u3002\nAF_PACKET SOCK_RAW \u306e\u4f5c\u6210\u306b\u306f CAP_NET_RAW \u304c\u5fc5\u8981(classic BPF \u6dfb\u4ed8\u306b CAP_NET_ADMIN \u306f\u4e0d\u8981)\u3002\n\u7279\u6a29\u306a\u3057\u3067\u306e\u691c\u8a3c\u306f --replay(PCAP \u30d5\u30a3\u30af\u30b9\u30c1\u30e3\u518d\u751f)\u3067\u884c\u3046\u3002\n\"\"\"\n\nimport argparse\nimport ctypes\nimport errno\nimport json\nimport logging\nimport math\nimport os\nimport select\nimport signal\nimport smtplib\nimport socket\nimport struct\nimport subprocess\nimport sys\nimport time\nimport tomllib\nfrom collections import Counter\nfrom email.message import EmailMessage\nfrom email.utils import formatdate, make_msgid\n\nlog = logging.getLogger(\"pwnescape-trapper\")\n\n# ---------------------------------------------------------------------------\n# \u5b9a\u6570\n# ---------------------------------------------------------------------------\n# Python \u306e socket \u30e2\u30b8\u30e5\u30fc\u30eb\u304c\u6301\u3063\u3066\u3044\u306a\u3044 Linux \u5b9a\u6570\u306f\u81ea\u524d\u3067\u5b9a\u7fa9\u3059\u308b\nSO_ATTACH_FILTER = 26          # asm-generic/socket.h\nETH_P_IP = 0x0800\nETH_P_ALL = 0x0003\nPACKET_OUTGOING = getattr(socket, \"PACKET_OUTGOING\", 4)\nPACKET_HOST = getattr(socket, \"PACKET_HOST\", 0)\n\nAF_PACKET = socket.AF_PACKET\nSOCK_RAW = socket.SOCK_RAW\n\n# classic BPF (sock_filter) opcode\nBPF_LD, BPF_LDX, BPF_ALU, BPF_JMP, BPF_RET = 0x00, 0x01, 0x04, 0x05, 0x06\nBPF_W, BPF_H, BPF_B = 0x00, 0x08, 0x10\nBPF_ABS, BPF_K = 0x20, 0x00\nBPF_JA, BPF_JEQ, BPF_JGE = 0x00, 0x10, 0x30\nBPF_AND = 0x50\nOP_LD_ABS_W = BPF_LD | BPF_W | BPF_ABS      # 0x20\nOP_LD_ABS_H = BPF_LD | BPF_H | BPF_ABS      # 0x28\nOP_LD_ABS_B = BPF_LD | BPF_B | BPF_ABS      # 0x30\nOP_JEQ_K = BPF_JMP | BPF_JEQ | BPF_K        # 0x15\nOP_JGE_K = BPF_JMP | BPF_JGE | BPF_K        # 0x35\nOP_AND_K = BPF_ALU | BPF_AND | BPF_K        # 0x54\nOP_RET_K = BPF_RET | BPF_K                  # 0x06\n\nSNAPLEN = 65535\nDLT_EN10MB = 1                              # PCAP link type: Ethernet\n\nPCAP_MAGIC_MICRO = 0xA1B2C3D4\nPCAP_MAGIC_NANO = 0xA1B23C4D\n\nIPPROTO_NAMES = {\n    1: \"ICMP\", 2: \"IGMP\", 6: \"TCP\", 17: \"UDP\", 41: \"IPv6-encap\",\n    47: \"GRE\", 50: \"ESP\", 51: \"AH\", 58: \"ICMPv6\", 89: \"OSPF\", 132: \"SCTP\",\n}\n\n# \u65e2\u77e5\u306e IPv4 \u30aa\u30d7\u30b7\u30e7\u30f3\u30b3\u30fc\u30c9(\u3053\u308c\u4ee5\u5916\u306f\u300c\u672a\u77e5\u300d\u3068\u6570\u3048\u308b)\nKNOWN_OPT_CODES = {\n    0x00, 0x01, 0x07, 0x04, 0x05, 0x44, 0x47, 0x4d,\n    0x82, 0x83, 0x85, 0x88, 0x89, 0x8a, 0x94, 0x95,\n}\n\nPOISON_FREE = 0x6B      # Linux slab POISON_FREE (include/linux/poison.h)\nPOISON_INUSE = 0xA5     # Linux slab POISON_INUSE\n\n# x86-64 \u30ab\u30fc\u30cd\u30eb\u76f4\u30de\u30c3\u30d7/vmalloc \u69d8\u30a2\u30c9\u30ec\u30b9(\u4e0a\u4f4d 16 \u30d3\u30c3\u30c8\u304c 0xffff)\nKERNEL_VA_FLOOR = 0xFFFF000000000000\n\n\n# ---------------------------------------------------------------------------\n# classic BPF: \u300cEthernet \u304b\u3064 IPv4\u300d\u306b\u4e00\u6b21\u6761\u4ef6(IHL>5 \u307e\u305f\u306f 0x4f)\u3092\u81ea\u524d\u3067\u7d44\u307f\u7acb\u3066\u308b\n# ---------------------------------------------------------------------------\nclass SockFilter(ctypes.Structure):\n    _fields_ = [(\"code\", ctypes.c_uint16), (\"jt\", ctypes.c_uint8),\n                (\"jf\", ctypes.c_uint8), (\"k\", ctypes.c_uint32)]\n\n\nclass SockFprog(ctypes.Structure):\n    _fields_ = [(\"len\", ctypes.c_uint16),\n                (\"filter\", ctypes.POINTER(SockFilter))]\n\n\ndef _finish_bpf(insns):\n    arr = (SockFilter * len(insns))(*[SockFilter(c, jt, jf, k) for c, jt, jf, k in insns])\n    fprog = SockFprog()\n    fprog.len = len(insns)\n    fprog.filter = ctypes.cast(arr, ctypes.POINTER(SockFilter))\n    return fprog, arr   # arr \u3092\u751f\u5b58\u3055\u305b\u3066\u304a\u304f(\u30dd\u30a4\u30f3\u30bf\u304c\u6307\u3059\u30e1\u30e2\u30ea)\n\n\ndef build_bpf(primary=\"ihl_gt5\"):\n    \"\"\"Ethernet \u4e0a\u306e IPv4 \u3092\u5bfe\u8c61\u306b classic BPF \u3092\u7d44\u307f\u7acb\u3066\u308b\u3002VLAN/\u30ab\u30d7\u30bb\u30eb\u5316\u306f\u89e3\u6790\u3057\u306a\u3044\u3002\n\n    primary=\"ihl_gt5\"(\u65e2\u5b9a): version=4 \u304b\u3064 IHL \u30cb\u30d6\u30eb\u304c 6..15(IPv4 \u30aa\u30d7\u30b7\u30e7\u30f3\u4ed8\u304d)\u3002\n      0: ldh at 12          ; A = ether_type\n      1: jeq #0x0800 -> 2 / -> 9   ; IPv4 \u3067\u306a\u3051\u308c\u3070\u68c4\u5374\n      2: ldb at 14         ; A = ip[0]\n      3: and #0xf0         ; A = version<<4\n      4: jeq #0x40 -> 5 / -> 9     ; version 4 \u3067\u306a\u3051\u308c\u3070\u68c4\u5374\n      5: ldb at 14         ; A = ip[0]\n      6: and #0x0f         ; A = IHL \u30cb\u30d6\u30eb\n      7: jge #6 -> 8 / -> 9       ; IHL<=5 \u306f\u68c4\u5374\n      8: ret #0xffff              ; \u30d2\u30c3\u30c8(\u5168\u9577\u30b3\u30d4\u30fc)\n      9: ret #0                  ; \u68c4\u5374\n\n    primary=\"0x4f\": \u516c\u958b\u7814\u7a76\u306e\u7279\u5b9a\u5f62\u72b6\u306e\u307f\u3002\n      0: ldh at 12 ; 1: jeq #0x0800 -> 2/5 ; 2: ldb at 14 ; 3: jeq #0x4f -> 4/5\n      4: ret #0xffff ; 5: ret #0\n    \"\"\"\n    if primary == \"0x4f\":\n        insns = [\n            (OP_LD_ABS_H, 0, 0, 12),\n            (OP_JEQ_K, 0, 3, ETH_P_IP),\n            (OP_LD_ABS_B, 0, 0, 14),\n            (OP_JEQ_K, 0, 1, 0x4F),\n            (OP_RET_K, 0, 0, SNAPLEN),\n            (OP_RET_K, 0, 0, 0),\n        ]\n    else:  # ihl_gt5\n        insns = [\n            (OP_LD_ABS_H, 0, 0, 12),\n            (OP_JEQ_K, 0, 7, ETH_P_IP),\n            (OP_LD_ABS_B, 0, 0, 14),\n            (OP_AND_K, 0, 0, 0xF0),\n            (OP_JEQ_K, 0, 4, 0x40),\n            (OP_LD_ABS_B, 0, 0, 14),\n            (OP_AND_K, 0, 0, 0x0F),\n            (OP_JGE_K, 0, 1, 6),\n            (OP_RET_K, 0, 0, SNAPLEN),\n            (OP_RET_K, 0, 0, 0),\n        ]\n    return _finish_bpf(insns)\n\n\ndef attach_bpf(sock, fprog):\n    sock.setsockopt(socket.SOL_SOCKET, SO_ATTACH_FILTER, bytes(fprog))\n\n\n# ---------------------------------------------------------------------------\n# PCAP \u66f8\u304d\u51fa\u3057(stdlib \u81ea\u524d, DLT_EN10MB, \u65e5\u5225\u30ed\u30fc\u30c6\u30fc\u30c8)\n# ---------------------------------------------------------------------------\nclass PcapWriter:\n    def __init__(self, pcap_dir, rotate_daily=True):\n        self.pcap_dir = pcap_dir\n        self.rotate_daily = rotate_daily\n        self.cur_date = None\n        self.fh = None\n        self.path = None\n\n    def _open_for(self, date_str):\n        if self.fh is not None and self.cur_date == date_str:\n            return\n        self.close()\n        os.makedirs(self.pcap_dir, exist_ok=True)\n        self.path = os.path.join(self.pcap_dir, \"%s.pcap\" % date_str)\n        new = not os.path.exists(self.path) or os.path.getsize(self.path) == 0\n        self.fh = open(self.path, \"ab\")\n        if new:\n            gh = struct.pack(\"= 1_000_000:\n            sec += 1\n            usec -= 1_000_000\n        ph = struct.pack(\"I\", blob[:4])[0] in (PCAP_MAGIC_MICRO, PCAP_MAGIC_NANO):\n        endian, nano = \">\", (struct.unpack(\">I\", blob[:4])[0] == PCAP_MAGIC_NANO)\n    else:\n        raise ValueError(\"PCAP magic \u304c\u4e0d\u660e\u3067\u3059: %s\" % path)\n    linktype = struct.unpack(endian + \"I\", blob[20:24])[0]\n    if linktype != DLT_EN10MB:\n        log.warning(\"%s: link type %d (DLT_EN10MB \u4ee5\u5916)\u3002Ethernet \u524d\u63d0\u3067\u89e3\u6790\u3057\u307e\u3059\", path, linktype)\n    off = 24\n    n = len(blob)\n    while off + 16 <= n:\n        ts_sec, ts_frac, incl, orig = struct.unpack(endian + \"IIII\", blob[off:off + 16])\n        off += 16\n        if off + incl > n:\n            break\n        frame = blob[off:off + incl]\n        off += incl\n        frac = ts_frac / 1e9 if nano else ts_frac / 1e6\n        yield ts_sec + frac, frame\n\n\n# ---------------------------------------------------------------------------\n# IPv4 \u30d8\u30c3\u30c0\u30c7\u30b3\u30fc\u30c9\n# ---------------------------------------------------------------------------\nclass Packet:\n    __slots__ = (\"ts\", \"frame\", \"eth_src\", \"eth_dst\", \"eth_type\",\n                 \"ip\", \"version\", \"ihl\", \"ihl_bytes\", \"total_len\", \"ip_id\",\n                 \"flags\", \"frag_off\", \"ttl\", \"proto\", \"proto_name\", \"csum\",\n                 \"src\", \"dst\", \"options\", \"payload\", \"pkttype\", \"iface\",\n                 \"is_fragment\", \"mf\")\n\n    def __init__(self):\n        self.ts = time.time()\n        self.frame = b\"\"\n        self.eth_src = self.eth_dst = \"-\"\n        self.eth_type = None\n        self.ip = None\n        self.version = self.ihl = None\n        self.ihl_bytes = 0\n        self.total_len = 0\n        self.ip_id = 0\n        self.flags = 0\n        self.frag_off = 0\n        self.ttl = 0\n        self.proto = None\n        self.proto_name = \"?\"\n        self.csum = 0\n        self.src = self.dst = \"?\"\n        self.options = b\"\"\n        self.payload = b\"\"\n        self.pkttype = None\n        self.iface = \"?\"\n        self.is_fragment = False\n        self.mf = False\n\n    @classmethod\n    def from_frame(cls, ts, frame, iface=\"?\", pkttype=None):\n        p = cls()\n        p.ts = ts\n        p.frame = frame\n        p.iface = iface\n        p.pkttype = pkttype\n        if len(frame) < 14:\n            return p\n        p.eth_dst = fmt_mac(frame[0:6])\n        p.eth_src = fmt_mac(frame[6:12])\n        p.eth_type = struct.unpack(\">H\", frame[12:14])[0]\n        if p.eth_type != ETH_P_IP:\n            return p\n        ip = frame[14:]\n        p.ip = ip\n        if len(ip) < 20:\n            return p\n        p.version = ip[0] >> 4\n        p.ihl = ip[0] & 0x0F\n        p.ihl_bytes = p.ihl * 4\n        p.total_len = struct.unpack(\">H\", ip[2:4])[0]\n        p.ip_id = struct.unpack(\">H\", ip[4:6])[0]\n        flagoff = struct.unpack(\">H\", ip[6:8])[0]\n        p.flags = (flagoff >> 13) & 0x7\n        p.mf = bool(p.flags & 0x1)\n        p.frag_off = flagoff & 0x1FFF\n        p.ttl = ip[8]\n        p.proto = ip[9]\n        p.proto_name = IPPROTO_NAMES.get(p.proto, str(p.proto))\n        p.csum = struct.unpack(\">H\", ip[10:12])[0]\n        p.src = socket.inet_ntop(socket.AF_INET, ip[12:16])\n        p.dst = socket.inet_ntop(socket.AF_INET, ip[16:20])\n        hdr_end = min(p.ihl_bytes, len(ip))\n        p.options = ip[20:hdr_end]\n        p.payload = ip[hdr_end:]\n        p.is_fragment = p.mf or p.frag_off != 0\n        return p\n\n    def is_known_shape(self):\n        \"\"\"\u516c\u958b\u7814\u7a76\u304c\u793a\u3057\u305f\u7279\u5b9a\u5f62\u72b6 ip[0]==0x4f(IHL=15)\u304b(\u5c5e\u6027\u3068\u3057\u3066\u4fdd\u6301)\u3002\"\"\"\n        return self.eth_type == ETH_P_IP and bool(self.ip) and len(self.ip) >= 1 and self.ip[0] == 0x4F\n\n    def matches_signature(self, primary=\"ihl_gt5\"):\n        \"\"\"\u30ab\u30fc\u30cd\u30eb BPF \u3068\u540c\u3058\u4e00\u6b21\u6761\u4ef6\u3002\n        primary=ihl_gt5: IPv4(version=4) \u304b\u3064 IHL \u30cb\u30d6\u30eb 6..15(\u30aa\u30d7\u30b7\u30e7\u30f3\u4ed8\u304d)\u3002\n        primary=0x4f   : \u7279\u5b9a\u5f62\u72b6\u306e\u307f\u3002\"\"\"\n        if self.eth_type != ETH_P_IP or not self.ip or len(self.ip) < 1:\n            return False\n        if primary == \"0x4f\":\n            return self.ip[0] == 0x4F\n        return self.version == 4 and 6 <= self.ihl <= 15\n\n\n# ---------------------------------------------------------------------------\n# \u6307\u7d0b\u5206\u6790\n# ---------------------------------------------------------------------------\ndef fmt_mac(b):\n    return \":\".join(\"%02x\" % x for x in b) if b else \"-\"\n\n\ndef shannon_entropy(data):\n    if not data:\n        return 0.0\n    c = Counter(data)\n    n = len(data)\n    h = 0.0\n    for v in c.values():\n        p = v / n\n        h -= p * math.log2(p)\n    return h\n\n\ndef longest_run(data, byte):\n    best = cur = 0\n    for b in data:\n        if b == byte:\n            cur += 1\n            if cur > best:\n                best = cur\n        else:\n            cur = 0\n    return best\n\n\ndef scan_kernel_pointers(region):\n    \"\"\"8 \u30d0\u30a4\u30c8 LE \u7a93\u3067 x86-64 \u30ab\u30fc\u30cd\u30eb VA \u69d8(\u4e0a\u4f4d 16 \u30d3\u30c3\u30c8 0xffff)\u3092\u6570\u3048\u308b\u3002\"\"\"\n    hits = []\n    for i in range(0, len(region) - 7):\n        val = int.from_bytes(region[i:i + 8], \"little\")\n        if val >= KERNEL_VA_FLOOR:\n            hits.append((i, val))\n    return hits\n\n\ndef parse_options(region):\n    codes, unknown, total = [], 0, 0\n    i = 0\n    n = len(region)\n    while i < n:\n        c = region[i]\n        if c == 0x00:        # EOL: \u30aa\u30d7\u30b7\u30e7\u30f3\u5217\u306e\u7d42\u7aef\n            break\n        if c == 0x01:        # NOP: 1 \u30d0\u30a4\u30c8\u98db\u3070\u3057\u3066\u7d99\u7d9a\n            i += 1\n            continue\n        if i + 1 >= n:\n            break\n        l = region[i + 1]\n        if l < 2:\n            break\n        total += 1\n        codes.append(c)\n        if c not in KNOWN_OPT_CODES:\n            unknown += 1\n        i += l\n    return codes, unknown, total\n\n\ndef analyze(p, cfg):\n    \"\"\"\u30d2\u30c3\u30c8\u30d1\u30b1\u30c3\u30c8\u306e\u30aa\u30d7\u30b7\u30e7\u30f3\u90e8(<=40 \u30d0\u30a4\u30c8)\u3092\u6307\u7d0b\u89e3\u6790\u3057\u30b9\u30b3\u30a2\u5316\u3057\u3066\u8fd4\u3059\u3002\"\"\"\n    region = p.options\n    res = {\n        \"option_len\": len(region),\n        \"entropy\": round(shannon_entropy(region), 3),\n        \"poison_free_run\": longest_run(region, POISON_FREE),\n        \"poison_inuse_run\": longest_run(region, POISON_INUSE),\n        \"kernel_ptr_hits\": 0,\n        \"kernel_ptr_samples\": [],\n        \"opt_total\": 0,\n        \"opt_unknown\": 0,\n        \"opt_unknown_ratio\": 0.0,\n        \"fragmented\": p.is_fragment,\n        \"signals\": [],\n        \"score\": 0,\n    }\n    signals = res[\"signals\"]\n    score = 0\n\n    if res[\"poison_free_run\"] >= 8:\n        score += 30\n        signals.append(\"slab_poison_free(0x6b x%d)\" % res[\"poison_free_run\"])\n    elif res[\"poison_free_run\"] >= 4:\n        score += 15\n        signals.append(\"slab_poison_free(0x6b x%d)\" % res[\"poison_free_run\"])\n\n    if res[\"poison_inuse_run\"] >= 8:\n        score += 20\n        signals.append(\"slab_poison_inuse(0xa5 x%d)\" % res[\"poison_inuse_run\"])\n    elif res[\"poison_inuse_run\"] >= 4:\n        score += 10\n        signals.append(\"slab_poison_inuse(0xa5 x%d)\" % res[\"poison_inuse_run\"])\n\n    if cfg.scan_kernel_pointers:\n        kp = scan_kernel_pointers(region)\n        res[\"kernel_ptr_hits\"] = len(kp)\n        res[\"kernel_ptr_samples\"] = [\"0x%016x\" % v for _, v in kp[:4]]\n        if kp:\n            score += 30\n            signals.append(\"kernel_pointer x%d\" % len(kp))\n\n    # 40 \u30d0\u30a4\u30c8\u306e\u30b7\u30e3\u30ce\u30f3\u30a8\u30f3\u30c8\u30ed\u30d4\u30fc\u306e\u4e0a\u9650\u306f log2(40)\u22485.32\u30026.0 \u306f\u5230\u9054\u4e0d\u80fd\u306a\u306e\u3067 4.5 \u306b\u3002\n    if res[\"entropy\"] >= 4.5:\n        score += 25\n        signals.append(\"high_entropy(%.2f)\" % res[\"entropy\"])\n    elif res[\"entropy\"] >= cfg.entropy_threshold:\n        score += 15\n        signals.append(\"elevated_entropy(%.2f)\" % res[\"entropy\"])\n\n    codes, unknown, total = parse_options(region)\n    res[\"opt_total\"] = total\n    res[\"opt_unknown\"] = unknown\n    if total:\n        res[\"opt_unknown_ratio\"] = round(unknown / total, 3)\n        if unknown >= 2 and unknown == total:\n            score += 10\n            signals.append(\"unknown_option_codes(%d/%d)\" % (unknown, total))\n\n    if p.is_fragment:\n        score += 10\n        signals.append(\"fragmented(MF=%d off=%d)\" % (int(p.mf), p.frag_off))\n\n    res[\"score\"] = min(100, score)\n    return res\n\n\n# ---------------------------------------------------------------------------\n# JSON \u884c\u30ed\u30b0\n# ---------------------------------------------------------------------------\nclass JsonLogger:\n    def __init__(self, log_dir, rotate_daily=True, to_stdout=True, to_file=True):\n        self.log_dir = log_dir\n        self.rotate_daily = rotate_daily\n        self.to_stdout = to_stdout\n        self.to_file = to_file\n        self.cur_date = None\n        self.fh = None\n\n    def _open_for(self, date_str):\n        if self.fh is not None and self.cur_date == date_str:\n            return\n        self.close()\n        os.makedirs(self.log_dir, exist_ok=True)\n        path = os.path.join(self.log_dir, \"%s.jsonl\" % date_str)\n        self.fh = open(path, \"a\")\n        self.cur_date = date_str\n\n    def emit(self, record):\n        line = json.dumps(record, ensure_ascii=False, separators=(\",\", \":\"))\n        if self.to_stdout:\n            sys.stdout.write(line + \"\\n\")\n            sys.stdout.flush()\n        if self.to_file:\n            date_str = time.strftime(\"%Y-%m-%d\", time.localtime(record.get(\"ts\", time.time())))\n            self._open_for(date_str)\n            self.fh.write(line + \"\\n\")\n            self.fh.flush()\n\n    def close(self):\n        if self.fh is not None:\n            try:\n                self.fh.close()\n            except OSError:\n                pass\n        self.fh = None\n\n\ndef hit_to_record(p, analysis, cfg, alert=True, reason=\"signature\"):\n    return {\n        \"ts\": round(p.ts, 6),\n        \"when\": time.strftime(\"%Y-%m-%dT%H:%M:%S%z\", time.localtime(p.ts)),\n        \"iface\": p.iface,\n        \"pkttype\": pkttype_name(p.pkttype),\n        \"eth_src\": p.eth_src,\n        \"eth_dst\": p.eth_dst,\n        \"alert\": alert,\n        \"alert_reason\": reason,\n        \"known_shape\": p.is_known_shape(),\n        \"ip\": {\"version\": p.version, \"ihl\": p.ihl, \"total_len\": p.total_len,\n               \"id\": p.ip_id, \"flags\": p.flags, \"frag_off\": p.frag_off,\n               \"ttl\": p.ttl, \"proto\": p.proto_name, \"csum\": \"0x%04x\" % p.csum,\n               \"src\": p.src, \"dst\": p.dst},\n        \"analysis\": analysis,\n        \"frame_len\": len(p.frame),\n        \"frame_hex_head\": p.frame[:74].hex(),\n    }\n\n\ndef pkttype_name(t):\n    return {0: \"host\", 1: \"broadcast\", 2: \"multicast\", 3: \"otherhost\", 4: \"outgoing\"}.get(t, str(t))\n\n\n# ---------------------------------------------------------------------------\n# \u901a\u77e5(\u30e1\u30fc\u30eb + \u4efb\u610f\u30d5\u30c3\u30af)\u3068\u96c6\u7d04/\u30ec\u30fc\u30c8\u30ea\u30df\u30c3\u30c8\n# ---------------------------------------------------------------------------\nclass Alerter:\n    def __init__(self, cfg):\n        self.cfg = cfg\n        self.buffer = []\n        self.last_alert = {}   # src -> monotonic\n        self._attempts = {}    # src -> \u9001\u4fe1\u5931\u6557\u56de\u6570(\u518d\u8a66\u884c\u4e0a\u9650\u7ba1\u7406)\n        self.MAX_RETRY = 3\n        self.MAX_BUFFER = 2000\n\n    def add(self, record, analysis):\n        self.buffer.append((record, analysis))\n\n    def flush(self):\n        if not self.buffer:\n            return\n        batch = self.buffer\n        self.buffer = []\n        now = time.monotonic()\n\n        by_src = {}\n        for rec, an in batch:\n            by_src.setdefault(rec[\"ip\"][\"src\"], []).append((rec, an))\n\n        to_report, suppressed = {}, 0\n        for src, items in by_src.items():\n            if now - self.last_alert.get(src, -1e18) >= self.cfg.min_interval_sec:\n                to_report[src] = items\n            else:\n                suppressed += 1\n\n        if not to_report:\n            if suppressed:\n                log.info(\"%d \u9001\u4fe1\u5143\u306f\u30af\u30fc\u30eb\u30c0\u30a6\u30f3\u4e2d\u306e\u305f\u3081\u901a\u77e5\u3092\u6291\u5236\", suppressed)\n            return\n\n        ok = self._notify(to_report, suppressed, len(batch))\n        if ok:\n            for src in to_report:\n                self.last_alert[src] = now\n                self._attempts.pop(src, None)\n        else:\n            # \u9001\u4fe1\u5931\u6557: \u30af\u30fc\u30eb\u30c0\u30a6\u30f3\u3092\u9032\u3081\u305a\u30d0\u30c3\u30c1\u3092\u4fdd\u7559\u3057\u6b21\u30a6\u30a3\u30f3\u30c9\u30a6\u3067\u518d\u8a66\u884c(\u4e0a\u9650\u4ed8\u304d)\n            for src, items in to_report.items():\n                n = self._attempts.get(src, 0) + 1\n                if n > self.MAX_RETRY:\n                    log.error(\"\u9001\u4fe1\u518d\u8a66\u884c\u4e0a\u9650(%d)\u3002src=%s \u306e %d \u4ef6\u306e\u901a\u77e5\u3092\u7834\u68c4(\u51b7\u5374\u306f\u9032\u3081\u306a\u3044)\",\n                              self.MAX_RETRY, src, len(items))\n                    self._attempts.pop(src, None)\n                else:\n                    self._attempts[src] = n\n                    self.buffer.extend(items)\n            if len(self.buffer) > self.MAX_BUFFER:\n                self.buffer = self.buffer[-self.MAX_BUFFER:]\n\n    def _notify(self, to_report, suppressed, total):\n        subject = \"%s %s: PwnEscape \u6f0f\u6d29\u75d5\u8de1 \u2014 \u9001\u4fe1\u5143 %d / \u30d2\u30c3\u30c8 %d\" % (\n            self.cfg.subject_prefix, self.cfg.hostname, len(to_report), total)\n        body = self._build_body(to_report, suppressed, total)\n\n        if self.cfg.dump:\n            print(\"---- (dump) %s ----\\n%s\" % (subject, body))\n            return True\n\n        hook_ok = None\n        if self.cfg.hook:\n            hook_ok = self._run_hook(subject, body)\n\n        mail_ok = None\n        if self.cfg.smtp_host and self.cfg.mail_to:\n            try:\n                self._send_mail(subject, body)\n                log.info(\"\u30a2\u30e9\u30fc\u30c8\u9001\u4fe1: \u9001\u4fe1\u5143 %d / \u30d2\u30c3\u30c8 %d\", len(to_report), total)\n                mail_ok = True\n            except Exception as e:\n                log.error(\"\u30e1\u30fc\u30eb\u9001\u4fe1\u5931\u6557: %s\", e)\n                mail_ok = False\n\n        # \u6210\u529f\u306e\u5b9a\u7fa9: \u8a2d\u5b9a\u3055\u308c\u305f\u901a\u77e5\u5148(hook/smtp)\u306e\u3046\u3061\u5c11\u306a\u304f\u3068\u3082 1 \u3064\u304c\u6210\u529f\n        results = [r for r in (hook_ok, mail_ok) if r is not None]\n        if results:\n            return any(results)\n        log.warning(\"\u901a\u77e5\u5148\u672a\u8a2d\u5b9a(smtp/mail/hook)\u3002\u30ed\u30b0\u306e\u307f\")\n        return True\n\n    def _build_body(self, to_report, suppressed, total):\n        c = self.cfg\n        L = []\n        if c.primary == \"ihl_gt5\":\n            L.append(\"\u30db\u30b9\u30c8 %s \u306e egress(%s)\u3067 IPv4 \u30aa\u30d7\u30b7\u30e7\u30f3\u4ed8\u304d(IHL>5)\u306e\u7570\u5e38\u5019\u88dc\u3092\u691c\u77e5\u3057\u307e\u3057\u305f\u3002\"\n                     \"PwnEscape(CVE-2026-99999)\u306e\u65e2\u77e5\u6f0f\u6d29\u5f62\u72b6(ip[0]==0x4f/IHL=15)\u3082\u3053\u306e\u5bfe\u8c61\u3092\u542b\u307f\u307e\u3059\u3002\"\n                     % (c.hostname, \",\".join(c.ifaces)))\n        else:\n            L.append(\"\u30db\u30b9\u30c8 %s \u306e egress(%s)\u3067 PwnEscape(CVE-2026-99999)\u306e\u65e2\u77e5\u6f0f\u6d29\u5f62\u72b6\"\n                     \"(ip[0]==0x4f / IHL=15)\u306b\u4e00\u81f4\u3059\u308b\u30d1\u30b1\u30c3\u30c8\u3092\u691c\u77e5\u3057\u307e\u3057\u305f\u3002\"\n                     % (c.hostname, \",\".join(c.ifaces)))\n        L.append(\"\u4e00\u81f4\u306f\u7591\u3044\u3067\u3042\u308a\u65ad\u5b9a\u3067\u306f\u306a\u3044(\u6b63\u898f\u306e IPv4 \u30aa\u30d7\u30b7\u30e7\u30f3\u3082\u540c\u4e00\u6761\u4ef6\u3092\u6e80\u305f\u3057\u5f97\u308b)\u3002\")\n        L.append(\"\u3053\u308c\u306f\u691c\u77e5\u3067\u3042\u308a\u7de9\u548c\u3067\u306f\u3042\u308a\u307e\u305b\u3093\u3002\u6839\u6cbb\u306f\u30db\u30b9\u30c8\u30ab\u30fc\u30cd\u30eb\u306e\u4fee\u6b63\u7248\u66f4\u65b0\u3067\u3059\u3002\")\n        L.append(\"\u96c6\u7d04\u30a6\u30a3\u30f3\u30c9\u30a6: %d \u79d2 / \u540c\u4e00\u9001\u4fe1\u5143\u30af\u30fc\u30eb\u30c0\u30a6\u30f3: %d \u79d2\"\n                 % (c.aggregation_window, c.min_interval_sec))\n        L.append(\"\u4eca\u56de\u306e\u30a6\u30a3\u30f3\u30c9\u30a6: \u30d2\u30c3\u30c8 %d \u4ef6 / \u9001\u4fe1\u5143 %d\" % (total, len(to_report)))\n        if c.alert_on_signature:\n            L.append(\"\u30a2\u30e9\u30fc\u30c8\u5224\u5b9a: \u4e00\u6b21\u5bfe\u8c61(%s)\u306e\u30d2\u30c3\u30c8\u3092\u5168\u3066\u5bfe\u8c61(\u4e8c\u6b21\u5206\u6790\u306f\u8a3c\u62e0\u8a18\u9332\u306e\u307f)\" % c.primary)\n        else:\n            L.append(\"\u30a2\u30e9\u30fc\u30c8\u5224\u5b9a: \u4e8c\u6b21\u5206\u6790\u30b9\u30b3\u30a2 >= %d\" % c.score_alert_threshold)\n        if suppressed:\n            L.append(\"(\u4ed6\u306b %d \u9001\u4fe1\u5143\u304c\u30af\u30fc\u30eb\u30c0\u30a6\u30f3\u4e2d\u306e\u305f\u3081\u672c\u30e1\u30fc\u30eb\u3067\u306f\u7701\u7565)\" % suppressed)\n        L.append(\"\")\n        for src in sorted(to_report):\n            items = to_report[src]\n            scores = [an[\"score\"] for _, an in items]\n            top = max(scores)\n            rec0, an0 = max(items, key=lambda x: x[1][\"score\"])\n            known = sum(1 for r, _ in items if r.get(\"known_shape\"))\n            reason = rec0.get(\"alert_reason\", \"primary\")\n            L.append(\"\u25a0 \u9001\u4fe1\u5143 %s  \u30d2\u30c3\u30c8 %d \u4ef6(\u65e2\u77e5\u5f62\u72b6 %d) / \u6700\u9ad8\u30b9\u30b3\u30a2 %d / \u5224\u5b9a=%s\"\n                     % (src, len(items), known, top, reason))\n            ip = rec0[\"ip\"]\n            L.append(\"   \u4f8b: -> %s  proto=%s  IHL=%d total_len=%d id=%d %s  known_shape=%s\"\n                     % (ip[\"dst\"], ip[\"proto\"], ip[\"ihl\"], ip[\"total_len\"], ip[\"id\"],\n                        \"MF\" if ip[\"flags\"] & 1 else \"\", rec0.get(\"known_shape\")))\n            L.append(\"   \u6307\u7d0b: %s\" % (\", \".join(an0[\"signals\"]) or \"(\u306a\u3057)\"))\n            L.append(\"   \u30a8\u30f3\u30c8\u30ed\u30d4\u30fc=%.2f  0x6b\u9023\u7d9a=%d  0xa5\u9023\u7d9a=%d  kernel_ptr=%d\"\n                     % (an0[\"entropy\"], an0[\"poison_free_run\"],\n                        an0[\"poison_inuse_run\"], an0[\"kernel_ptr_hits\"]))\n            if an0[\"kernel_ptr_samples\"]:\n                L.append(\"   kernel VA \u69d8: %s\" % \", \".join(an0[\"kernel_ptr_samples\"]))\n            L.append(\"\")\n        L.append(\"-- pwnescape-trapper (\u691c\u77e5\u5668\u3002\u65e2\u77e5\u306e\u6f0f\u6d29\u5f62\u72b6\u3068\u306e\u4e00\u81f4\u3068\u3044\u3046\u7591\u3044\u3002\u6839\u6cbb\u306f\u30db\u30b9\u30c8\u30ab\u30fc\u30cd\u30eb\u66f4\u65b0)\")\n        return \"\\n\".join(L)\n\n    def _run_hook(self, subject, body):\n        try:\n            env = dict(os.environ)\n            env[\"PWNESCAPE_SUBJECT\"] = subject\n            r = subprocess.run(self.cfg.hook, shell=True, input=body.encode(\"utf-8\"),\n                               env=env, timeout=30, check=False)\n            if r.returncode != 0:\n                log.error(\"\u901a\u77e5\u30d5\u30c3\u30af\u5931\u6557: exit %d\", r.returncode)\n                return False\n            return True\n        except Exception as e:\n            log.error(\"\u901a\u77e5\u30d5\u30c3\u30af\u5931\u6557: %s\", e)\n            return False\n\n    def _send_mail(self, subject, body):\n        c = self.cfg\n        msg = EmailMessage()\n        msg[\"Subject\"] = subject\n        msg[\"From\"] = c.mail_from\n        msg[\"To\"] = \", \".join(c.mail_to)\n        msg[\"Date\"] = formatdate(localtime=True)\n        msg[\"Message-ID\"] = make_msgid(domain=c.hostname if \".\" in c.hostname else None)\n        msg.set_content(body)\n\n        if c.smtp_tls == \"ssl\":\n            server = smtplib.SMTP_SSL(c.smtp_host, c.smtp_port, timeout=c.smtp_timeout)\n        else:\n            server = smtplib.SMTP(c.smtp_host, c.smtp_port, timeout=c.smtp_timeout)\n        try:\n            server.ehlo()\n            if c.smtp_tls == \"starttls\":\n                server.starttls()\n                server.ehlo()\n            if c.smtp_user:\n                server.login(c.smtp_user, c.smtp_password)\n            server.send_message(msg)\n        finally:\n            try:\n                server.quit()\n            except Exception:\n                pass\n\n\n# ---------------------------------------------------------------------------\n# \u8a2d\u5b9a(TOML)\n# ---------------------------------------------------------------------------\nclass Config:\n    pass\n\n\ndef load_config(path):\n    data = {}\n    if path is None:\n        # \u65e2\u5b9a: \u30ab\u30ec\u30f3\u30c8\u306e ./pwnescape-trapper.conf \u304c\u3042\u308c\u3070\u8aad\u3080(\u306a\u3051\u308c\u3070\u7d44\u307f\u8fbc\u307f\u65e2\u5b9a)\n        candidate = \"pwnescape-trapper.conf\"\n        if os.path.exists(candidate):\n            path = candidate\n        else:\n            return _build_config({})\n    try:\n        with open(path, \"rb\") as f:\n            data = tomllib.load(f)\n    except FileNotFoundError:\n        raise SystemExit(\"\u8a2d\u5b9a\u30d5\u30a1\u30a4\u30eb\u3092\u8aad\u307f\u8fbc\u3081\u307e\u305b\u3093: %s\" % path)\n    except tomllib.TOMLDecodeError as e:\n        raise SystemExit(\"\u8a2d\u5b9a\u30d5\u30a1\u30a4\u30eb\u306e TOML \u89e3\u6790\u30a8\u30e9\u30fc: %s (%s)\" % (e, path))\n    return _build_config(data)\n\n\ndef _build_config(data):\n\n    def g(sec, key, default):\n        return data.get(sec, {}).get(key, default)\n\n    c = Config()\n    raw_iface = g(\"watch\", \"iface\", \"eth0\")\n    if isinstance(raw_iface, (list, tuple)):\n        ifaces = [str(x).strip() for x in raw_iface if str(x).strip()]\n    else:\n        ifaces = [x.strip() for x in str(raw_iface).replace(\",\", \" \").split() if x.strip()]\n    if not ifaces:\n        ifaces = [\"eth0\"]\n    c.ifaces = ifaces\n    c.iface = ifaces[0]\n    c.primary = g(\"watch\", \"primary\", \"ihl_gt5\").strip().lower()\n    if c.primary not in (\"ihl_gt5\", \"0x4f\"):\n        raise SystemExit(\"watch.primary \u306f ihl_gt5 / 0x4f \u306e\u3044\u305a\u308c\u304b\")\n    c.bpf = g(\"watch\", \"bpf\", \"IPv4 IHL>5 (options)\" if c.primary == \"ihl_gt5\" else \"ip[0] = 0x4f\")\n    c.direction = g(\"watch\", \"direction\", \"any\").strip().lower()\n    if c.direction not in (\"in\", \"out\", \"any\"):\n        raise SystemExit(\"watch.direction \u306f in/out/any \u306e\u3044\u305a\u308c\u304b\")\n    c.src_net = g(\"watch\", \"src_net\", \"\").strip()\n\n    c.log_dir = g(\"log\", \"dir\", \"log\")\n    c.pcap_dir = g(\"log\", \"pcap_dir\", \"pcap\")\n    c.pcap_rotate_daily = bool(g(\"log\", \"pcap_rotate_daily\", True))\n\n    c.hook = g(\"alert\", \"hook\", \"\")\n    c.min_interval_sec = int(g(\"alert\", \"min_interval_sec\", 30))\n    c.aggregation_window = int(g(\"alert\", \"aggregation_window\", 30))\n\n    c.entropy_threshold = float(g(\"analysis\", \"entropy_threshold\", 3.5))\n    c.scan_kernel_pointers = bool(g(\"analysis\", \"scan_kernel_pointers\", True))\n    c.score_alert_threshold = int(g(\"analysis\", \"score_alert_threshold\", 40))\n    # \u65e2\u5b9a: \u4e8c\u6b21\u5206\u6790\u306b\u4f9d\u3089\u305a ip[0]==0x4f \u30d2\u30c3\u30c8\u3092\u5168\u3066\u30a2\u30e9\u30fc\u30c8\u5bfe\u8c61\u306b\u3059\u308b(\u5358\u4f53\u3067\u9ad8\u78ba\u5ea6)\u3002\n    # false \u306b\u3059\u308b\u3068 score_alert_threshold \u306b\u3088\u308b\u4e8c\u6b21\u5206\u6790\u30b2\u30fc\u30c8\u306b\u623b\u308b\u3002\n    c.alert_on_signature = bool(g(\"analysis\", \"alert_on_signature\", True))\n\n    c.smtp_host = g(\"smtp\", \"host\", \"\").strip()\n    c.smtp_port = int(g(\"smtp\", \"port\", 587))\n    c.smtp_tls = g(\"smtp\", \"tls\", \"starttls\").strip().lower()\n    if c.smtp_tls not in (\"none\", \"starttls\", \"ssl\"):\n        raise SystemExit(\"smtp.tls \u306f none/starttls/ssl \u306e\u3044\u305a\u308c\u304b\")\n    c.smtp_user = g(\"smtp\", \"user\", \"\").strip()\n    c.smtp_password = g(\"smtp\", \"password\", \"\")\n    c.smtp_timeout = int(g(\"smtp\", \"timeout\", 30))\n\n    c.subject_prefix = g(\"mail\", \"subject_prefix\", \"[pwnescape-trapper]\").strip()\n    hostname = g(\"mail\", \"hostname\", \"auto\").strip()\n    c.hostname = socket.gethostname() if hostname in (\"\", \"auto\") else hostname\n    c.mail_from = g(\"mail\", \"from\", \"\").strip()\n    to = g(\"mail\", \"to\", \"\")\n    c.mail_to = [a.strip() for a in str(to).replace(\",\", \" \").split() if a.strip()]\n\n    c.dump = False\n    return c\n\n\ndef validate_for_mail(c):\n    missing = []\n    if not c.smtp_host:\n        missing.append(\"smtp.host\")\n    if not c.mail_from:\n        missing.append(\"mail.from\")\n    if not c.mail_to:\n        missing.append(\"mail.to\")\n    if missing:\n        raise SystemExit(\"\u8a2d\u5b9a\u4e0d\u8db3: \" + \", \".join(missing))\n\n\ndef in_src_net(ip, cidr):\n    if not cidr:\n        return True\n    try:\n        import ipaddress\n        net = ipaddress.ip_network(cidr, strict=False)\n        return ipaddress.ip_address(ip) in net\n    except ValueError:\n        log.warning(\"src_net \u304c\u4e0d\u6b63\u3067\u3059: %s(\u7121\u8996)\", cidr)\n        return True\n\n\n# ---------------------------------------------------------------------------\n# \u5171\u901a\u51e6\u7406: 1 \u30d1\u30b1\u30c3\u30c8 -> \u89e3\u6790 -> \u30ed\u30b0/PCAP/\u30a2\u30e9\u30fc\u30bf\n# ---------------------------------------------------------------------------\nclass Pipeline:\n    def __init__(self, cfg, pcap_writer, json_logger, alerter):\n        self.cfg = cfg\n        self.pcap = pcap_writer\n        self.json = json_logger\n        self.alerter = alerter\n        self.hits = 0\n\n    def handle(self, p):\n        if not p.matches_signature(self.cfg.primary):\n            return False\n        if not in_src_net(p.src, self.cfg.src_net):\n            log.debug(\"src_net \u5916\u306e\u305f\u3081\u7121\u8996: %s\", p.src)\n            return False\n        if self.cfg.direction == \"out\" and p.pkttype is not None and p.pkttype != PACKET_OUTGOING:\n            return False\n        if self.cfg.direction == \"in\" and p.pkttype is not None and p.pkttype == PACKET_OUTGOING:\n            return False\n\n        self.hits += 1\n        analysis = analyze(p, self.cfg)\n        # \u4e8c\u6b21\u5206\u6790\u306f\u8a3c\u62e0(\u9061\u53ca\u8abf\u67fb)\u3068\u3057\u3066\u5e38\u306b\u8a18\u9332\u3059\u308b\u3002\u305f\u3060\u3057\u65e2\u5b9a\u3067\u306f\u30a2\u30e9\u30fc\u30c8\u5224\u5b9a\u306b\u306f\u4f7f\u308f\u306a\u3044\u3002\n        if self.cfg.alert_on_signature:\n            alert = True\n            reason = \"primary\"\n        else:\n            alert = analysis[\"score\"] >= self.cfg.score_alert_threshold\n            reason = \"score\"\n        record = hit_to_record(p, analysis, self.cfg, alert, reason)\n        self.json.emit(record)\n        if self.pcap is not None:\n            self.pcap.write(p.ts, p.frame)\n        log.info(\"HIT src=%s -> %s IHL=%d known_shape=%s score=%d alert=%s(%s) [%s]\",\n                 p.src, p.dst, p.ihl, p.is_known_shape(), analysis[\"score\"],\n                 \"yes\" if alert else \"no\", reason, \", \".join(analysis[\"signals\"]))\n        if alert:\n            self.alerter.add(record, analysis)\n        else:\n            log.info(\"  (\u30b9\u30b3\u30a2 %d < \u95be\u5024 %d: \u901a\u77e5\u5bfe\u8c61\u5916\u3002\u6b63\u898f\u306e IPv4 \u30aa\u30d7\u30b7\u30e7\u30f3\u306e\u53ef\u80fd\u6027)\",\n                     analysis[\"score\"], self.cfg.score_alert_threshold)\n        return True\n\n\n# ---------------------------------------------------------------------------\n# \u8d77\u52d5\u6642\u81ea\u5df1\u7533\u544a\n# ---------------------------------------------------------------------------\ndef announce(cfg, mode):\n    log.info(\"\u958b\u59cb[%s]: iface=%s primary=%s direction=%s src_net=%s\",\n             mode, \",\".join(cfg.ifaces), cfg.primary, cfg.direction, cfg.src_net or \"-\")\n    log.info(\"  log=%s pcap=%s \u96c6\u7d04=%ds \u30af\u30fc\u30eb\u30c0\u30a6\u30f3=%ds \u30a2\u30e9\u30fc\u30c8=%s\",\n             cfg.log_dir, cfg.pcap_dir, cfg.aggregation_window, cfg.min_interval_sec,\n             \"signature(0x4f\u5168\u3066)\" if cfg.alert_on_signature\n             else \"score>=%d\" % cfg.score_alert_threshold)\n\n\n# ---------------------------------------------------------------------------\n# \u76e3\u8996(AF_PACKET + classic BPF)\u3002\u8907\u6570 iface(\u7269\u7406 uplink / VLAN \u7b49)\u3092 select \u3067\u591a\u91cd\u76e3\u8996\u3059\u308b\u3002\n# ---------------------------------------------------------------------------\ndef capture_loop(cfg, pipeline, alerter, stop):\n    sockets = {}          # sock -> iface\n    keepalive = []        # BPF \u30d5\u30a3\u30eb\u30bf\u914d\u5217\u306e\u53c2\u7167\u751f\u5b58\n\n    for iface in cfg.ifaces:\n        try:\n            sock = socket.socket(AF_PACKET, SOCK_RAW, socket.htons(ETH_P_ALL))\n        except OSError as e:\n            raise SystemExit(\"AF_PACKET \u30bd\u30b1\u30c3\u30c8\u4f5c\u6210\u5931\u6557(CAP_NET_RAW \u304c\u5fc5\u8981): %s\" % e)\n        # bind \u306e proto \u306f\u30db\u30b9\u30c8\u30d0\u30a4\u30c8\u30aa\u30fc\u30c0\u30fc\u3067\u6e21\u3059(htons \u3059\u308b\u3068 0x0300 \u306b\u306a\u308a\u53d7\u4fe1\u3057\u306a\u3044)\n        try:\n            sock.bind((iface, ETH_P_ALL))\n        except OSError as e:\n            raise SystemExit(\"iface %s \u306e bind \u5931\u6557(\u76e3\u8996\u5bfe\u8c61\u304c\u6b20\u843d\u3059\u308b\u305f\u3081\u8d77\u52d5\u3092\u4e2d\u6b62): %s\" % (iface, e))\n        # classic BPF \u6dfb\u4ed8\u306f\u8a2d\u8a08\u306e\u524d\u63d0(\u30d2\u30c3\u30c8\u306e\u307f\u30e6\u30fc\u30b6\u30fc\u7a7a\u9593\u3078)\u3002\u5931\u6557\u3057\u305f\u3089\u9ed9\u3063\u3066\u30d5\u30eb\u30ad\u30e3\u30d7\u30c1\u30e3\u306b\n        # \u305b\u305a\u8d77\u52d5\u3092\u4e2d\u6b62\u3057\u3066\u5fa9\u65e7\u3092\u4fc3\u3059\u3002SO_ATTACH_FILTER \u81ea\u4f53\u306b CAP_NET_ADMIN \u306f\u4e0d\u8981\u3002\n        fprog, arr = build_bpf(cfg.primary)\n        keepalive.append(arr)\n        try:\n            attach_bpf(sock, fprog)\n        except OSError as e:\n            raise SystemExit(\"iface %s: classic BPF \u6dfb\u4ed8\u5931\u6557(\u8d77\u52d5\u3092\u4e2d\u6b62): %s\" % (iface, e))\n        sock.setblocking(False)\n        sockets[sock] = iface\n        log.info(\"\u76e3\u8996 iface: %s (kernel BPF \u6dfb\u4ed8)\", iface)\n\n    if not sockets:\n        raise SystemExit(\"\u76e3\u8996\u3067\u304d\u308b iface \u304c\u3042\u308a\u307e\u305b\u3093\")\n    log.info(\"classic BPF \u3092\u5168 iface \u306b\u6dfb\u4ed8\u3057\u307e\u3057\u305f(\u30d2\u30c3\u30c8\u306e\u307f\u30e6\u30fc\u30b6\u30fc\u7a7a\u9593\u3078)\")\n\n    next_flush = time.monotonic() + cfg.aggregation_window\n    try:\n        while not stop[\"go\"]:\n            timeout = max(0.2, min(next_flush - time.monotonic(), 1.0))\n            try:\n                readable, _, _ = select.select(list(sockets), [], [], timeout)\n            except (OSError, ValueError) as e:\n                log.warning(\"select \u30a8\u30e9\u30fc: %s\", e)\n                readable = []\n            for sock in readable:\n                iface = sockets[sock]\n                try:\n                    data, addr = sock.recvfrom(SNAPLEN)\n                except BlockingIOError:\n                    continue\n                except OSError as e:\n                    if e.errno == errno.ENOBUFS:\n                        log.warning(\"\u53d7\u4fe1\u30d0\u30c3\u30d5\u30a1\u6ea2\u308c(ENOBUFS) \u2014 \u30d1\u30b1\u30c3\u30c8\u3092\u53d6\u308a\u3053\u307c\u3057\u307e\u3057\u305f\")\n                    continue\n                # Python \u306e sockaddr_ll \u8fd4\u5374\u306f (ifname, proto, pkttype, hatype, addr)\n                pkttype = addr[2] if isinstance(addr, tuple) and len(addr) > 2 else None\n                p = Packet.from_frame(time.time(), data, iface=iface, pkttype=pkttype)\n                pipeline.handle(p)\n\n            if time.monotonic() >= next_flush:\n                alerter.flush()\n                next_flush = time.monotonic() + cfg.aggregation_window\n    finally:\n        alerter.flush()\n        for sock in sockets:\n            try:\n                sock.close()\n            except OSError:\n                pass\n\n\n# ---------------------------------------------------------------------------\n# \u30ea\u30d7\u30ec\u30a4(--replay, \u7279\u6a29\u306a\u3057\u3067\u30a2\u30ca\u30e9\u30a4\u30b6\u691c\u8a3c)\n# ---------------------------------------------------------------------------\ndef replay_files(paths, cfg, pipeline, alerter):\n    total_frames = 0\n    for path in paths:\n        log.info(\"replay: %s\", path)\n        for ts, frame in read_pcap(path):\n            total_frames += 1\n            p = Packet.from_frame(ts, frame, iface=\"(replay:%s)\" % os.path.basename(path),\n                                   pkttype=PACKET_OUTGOING)\n            pipeline.handle(p)\n    alerter.flush()\n    log.info(\"replay \u5b8c\u4e86: \u5165\u529b %d \u30d1\u30b1\u30c3\u30c8 / \u30d2\u30c3\u30c8 %d\", total_frames, pipeline.hits)\n\n\n# ---------------------------------------------------------------------------\n# systemd unit \u914d\u7f6e\u624b\u9806(\u8868\u793a\u306e\u307f)\n# ---------------------------------------------------------------------------\nUNIT_TEMPLATE = \"\"\"[Unit]\nDescription=pwnescape-trapper PwnEscape egress trap\nDocumentation=file:/usr/local/share/doc/pwnescape-trapper/README.md\nAfter=network-online.target\nWants=network-online.target\n\n[Service]\nType=simple\nExecStart=/usr/local/bin/pwnescape_trapper.py --config /etc/pwnescape-trapper.conf\nRestart=on-failure\nRestartSec=5\n\n# AF_PACKET SOCK_RAW \u306e\u4f5c\u6210\u306b CAP_NET_RAW \u304c\u5fc5\u8981\u3002classic BPF \u6dfb\u4ed8(SO_ATTACH_FILTER)\u306b CAP_NET_ADMIN \u306f\u4e0d\u8981\u3002\nAmbientCapabilities=CAP_NET_RAW\nCapabilityBoundingSet=CAP_NET_RAW\nNoNewPrivileges=true\n\nProtectSystem=strict\nProtectHome=true\nPrivateTmp=true\nProtectControlGroups=true\nProtectKernelModules=true\nProtectKernelTunables=true\nRestrictAddressFamilies=AF_PACKET AF_INET AF_INET6 AF_UNIX\nRestrictNamespaces=true\nMemoryDenyWriteExecute=true\n# \u691c\u77e5\u30ed\u30b0/PCAP \u3092\u66f8\u304d\u8fbc\u3080\u30c7\u30a3\u30ec\u30af\u30c8\u30ea(\u8a2d\u5b9a\u306e log.dir / log.pcap_dir)\nReadWritePaths=/var/lib/pwnescape-trapper\n\n[Install]\nWantedBy=multi-user.target\n\"\"\"\n\n\ndef print_install_unit(cfg):\n    print(\"# pwnescape-trapper systemd unit \u914d\u7f6e\u624b\u9806(\u3053\u306e\u30c4\u30fc\u30eb\u306f root \u64cd\u4f5c\u306f\u884c\u3044\u307e\u305b\u3093)\")\n    print(\"# 1) \u672c\u4f53\u3068\u8a2d\u5b9a\u3092\u914d\u7f6e\")\n    print(\"install -m 0755 pwnescape_trapper.py /usr/local/bin/pwnescape_trapper.py\")\n    print(\"install -m 0600 pwnescape-trapper.conf.example /etc/pwnescape-trapper.conf\")\n    print(\"$EDITOR /etc/pwnescape-trapper.conf   # smtp/mail \u3092\u8a18\u5165\u3057 log.dir \u3092 /var/lib \u914d\u4e0b\u3078\")\n    print(\"install -d -m 0750 /var/lib/pwnescape-trapper\")\n    print()\n    print(\"# 2) \u4e0b\u8a18 unit \u3092 /etc/systemd/system/pwnescape-trapper.service \u3068\u3057\u3066\u4fdd\u5b58\")\n    print(\"#    (AmbientCapabilities \u306b CAP_NET_RAW \u3092\u6307\u5b9a\u3002BPF \u6dfb\u4ed8\u306b CAP_NET_ADMIN \u306f\u4e0d\u8981)\")\n    print(\"-\" * 68)\n    sys.stdout.write(UNIT_TEMPLATE)\n    print(\"-\" * 68)\n    print(\"# 3) \u8d77\u52d5\")\n    print(\"systemctl daemon-reload\")\n    print(\"systemctl enable --now pwnescape-trapper.service\")\n    print()\n    print(\"# \u7279\u6a29\u306a\u3057\u306e\u81ea\u5df1\u691c\u8a3c:\")\n    print(\"pwnescape_trapper.py --replay tests/fixtures/*.pcap --dump\")\n\n\n# ---------------------------------------------------------------------------\n# main\n# ---------------------------------------------------------------------------\ndef main(argv=None):\n    ap = argparse.ArgumentParser(description=\"pwnescape-trapper PwnEscape egress \u691c\u77e5\u5668\")\n    ap.add_argument(\"-c\", \"--config\", default=None,\n                    help=\"TOML \u8a2d\u5b9a\u30d5\u30a1\u30a4\u30eb(\u65e2\u5b9a: \u30ab\u30ec\u30f3\u30c8\u306e ./pwnescape-trapper.conf\u3001\u306a\u3051\u308c\u3070\u7d44\u307f\u8fbc\u307f\u65e2\u5b9a)\")\n    ap.add_argument(\"--iface\", nargs=\"+\", metavar=\"IFACE\",\n                    help=\"\u76e3\u8996\u30a4\u30f3\u30bf\u30fc\u30d5\u30a7\u30fc\u30b9(\u8907\u6570\u53ef\u3002\u8a2d\u5b9a\u3088\u308a\u512a\u5148)\")\n    ap.add_argument(\"--primary\", choices=[\"ihl_gt5\", \"0x4f\"],\n                    help=\"\u4e00\u6b21\u5bfe\u8c61: ihl_gt5=IPv4\u30aa\u30d7\u30b7\u30e7\u30f3\u4ed8\u304d(IHL6..15, \u65e2\u5b9a) / 0x4f=\u516c\u958b\u5f62\u72b6\u306e\u307f\")\n    ap.add_argument(\"--direction\", choices=[\"in\", \"out\", \"any\"], help=\"\u65b9\u5411\u30d5\u30a3\u30eb\u30bf(\u8a2d\u5b9a\u3088\u308a\u512a\u5148)\")\n    ap.add_argument(\"--src-net\", metavar=\"CIDR\", help=\"\u9001\u4fe1\u5143\u3092\u3053\u306e CIDR \u306b\u9650\u5b9a(\u8a2d\u5b9a\u3088\u308a\u512a\u5148)\")\n    ap.add_argument(\"--replay\", nargs=\"+\", metavar=\"PCAP\",\n                    help=\"PCAP \u30d5\u30a3\u30af\u30b9\u30c1\u30e3\u3092\u518d\u751f\u3057\u3066\u7279\u6a29\u306a\u3057\u3067\u30a2\u30ca\u30e9\u30a4\u30b6\u3092\u691c\u8a3c\")\n    ap.add_argument(\"--dump\", action=\"store_true\",\n                    help=\"\u30e1\u30fc\u30eb\u9001\u4fe1\u305b\u305a\u691c\u51fa/\u901a\u77e5\u5185\u5bb9\u3092\u6a19\u6e96\u51fa\u529b\u306b\u8868\u793a\")\n    ap.add_argument(\"--no-log\", action=\"store_true\", help=\"log/ \u30d5\u30a1\u30a4\u30eb\u3078\u306e\u8ffd\u8a18\u3092\u884c\u308f\u306a\u3044\")\n    ap.add_argument(\"--no-pcap\", action=\"store_true\", help=\"pcap/ \u3078\u306e\u8ffd\u8a18\u3092\u884c\u308f\u306a\u3044\")\n    ap.add_argument(\"--test-mail\", action=\"store_true\", help=\"\u8a2d\u5b9a\u3067\u30c6\u30b9\u30c8\u30e1\u30fc\u30eb\u3092 1 \u901a\u9001\u3063\u3066\u7d42\u4e86\")\n    ap.add_argument(\"--install-unit\", action=\"store_true\", help=\"systemd unit \u914d\u7f6e\u624b\u9806\u3092\u8868\u793a\u3057\u3066\u7d42\u4e86\")\n    ap.add_argument(\"--aggregation-window\", type=int, metavar=\"SEC\", help=\"\u96c6\u7d04\u30a6\u30a3\u30f3\u30c9\u30a6\u4e0a\u66f8\u304d\")\n    ap.add_argument(\"--min-interval\", type=int, metavar=\"SEC\", help=\"\u540c\u4e00\u9001\u4fe1\u5143\u30af\u30fc\u30eb\u30c0\u30a6\u30f3\u4e0a\u66f8\u304d\")\n    ap.add_argument(\"--score-threshold\", type=int, metavar=\"N\", help=\"\u901a\u77e5\u30b9\u30b3\u30a2\u95be\u5024\u4e0a\u66f8\u304d\")\n    ap.add_argument(\"--alert-on-signature\", dest=\"alert_on_signature\", action=\"store_true\",\n                    default=None, help=\"ip[0]==0x4f \u30d2\u30c3\u30c8\u3092\u5168\u3066\u30a2\u30e9\u30fc\u30c8\u5bfe\u8c61\u5316(\u65e2\u5b9a true \u3092\u660e\u793a)\")\n    ap.add_argument(\"--no-alert-on-signature\", dest=\"alert_on_signature\", action=\"store_false\",\n                    help=\"\u4e8c\u6b21\u5206\u6790\u30b9\u30b3\u30a2\u95be\u5024\u3067\u30a2\u30e9\u30fc\u30c8\u3092\u30b2\u30fc\u30c8(\u65e2\u5b9a\u3092\u4e0a\u66f8\u304d)\")\n    ap.add_argument(\"-v\", \"--verbose\", action=\"store_true\")\n    args = ap.parse_args(argv)\n\n    logging.basicConfig(\n        level=logging.DEBUG if args.verbose else logging.INFO,\n        format=\"%(asctime)s %(levelname)s %(message)s\")\n\n    cfg = load_config(args.config)\n    cfg.dump = args.dump\n    if args.iface:\n        cfg.ifaces = list(args.iface)\n        cfg.iface = cfg.ifaces[0]\n    if args.primary:\n        cfg.primary = args.primary\n        cfg.bpf = \"IPv4 IHL>5 (options)\" if cfg.primary == \"ihl_gt5\" else \"ip[0] = 0x4f\"\n    if args.direction:\n        cfg.direction = args.direction\n    if args.src_net:\n        cfg.src_net = args.src_net\n    if args.aggregation_window is not None:\n        cfg.aggregation_window = max(1, args.aggregation_window)\n    if args.min_interval is not None:\n        cfg.min_interval_sec = max(0, args.min_interval)\n    if args.score_threshold is not None:\n        cfg.score_alert_threshold = args.score_threshold\n    if args.alert_on_signature is not None:\n        cfg.alert_on_signature = args.alert_on_signature\n\n    if args.install_unit:\n        print_install_unit(cfg)\n        return 0\n\n    if args.test_mail:\n        if not cfg.dump:\n            validate_for_mail(cfg)\n        alerter = Alerter(cfg)\n        fake = Packet.from_frame(time.time(), build_synthetic_mutated_frame(),\n                                 iface=cfg.iface, pkttype=PACKET_OUTGOING)\n        an = analyze(fake, cfg)\n        alerter.add(hit_to_record(fake, an, cfg), an)\n        alerter.flush()\n        return 0\n\n    json_logger = JsonLogger(cfg.log_dir, cfg.pcap_rotate_daily,\n                             to_stdout=(args.replay is not None or args.dump),\n                             to_file=(not args.no_log))\n    pcap_writer = None if args.no_pcap else PcapWriter(cfg.pcap_dir, cfg.pcap_rotate_daily)\n    alerter = Alerter(cfg)\n    pipeline = Pipeline(cfg, pcap_writer, json_logger, alerter)\n\n    stop = {\"go\": False}\n\n    def _stop(signum, frame):\n        stop[\"go\"] = True\n\n    if args.replay:\n        announce(cfg, \"replay\")\n        replay_files(args.replay, cfg, pipeline, alerter)\n    else:\n        announce(cfg, \"live\")\n        signal.signal(signal.SIGTERM, _stop)\n        signal.signal(signal.SIGINT, _stop)\n        capture_loop(cfg, pipeline, alerter, stop)\n\n    if pcap_writer:\n        pcap_writer.close()\n    json_logger.close()\n    log.info(\"\u7d42\u4e86: \u30d2\u30c3\u30c8 %d\", pipeline.hits)\n    return 0\n\n\n# ---------------------------------------------------------------------------\n# --test-mail \u7528\u306e\u5408\u6210\u30d1\u30b1\u30c3\u30c8(\u5b9f\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u306b\u306f\u51fa\u3055\u306a\u3044)\n# ---------------------------------------------------------------------------\ndef build_synthetic_mutated_frame():\n    eth = bytes.fromhex(\"aa\") * 6 + bytes.fromhex(\"bb\") * 6 + struct.pack(\">H\", ETH_P_IP)\n    hostmem = b\"\\x6b\" * 16 + struct.pack(\"H\", ip, 2, 60 + 8)\n    struct.pack_into(\">H\", ip, 4, 0x1234)\n    struct.pack_into(\">H\", ip, 6, 0x0000)\n    ip[8] = 64\n    ip[9] = 6\n    ip[12:16] = socket.inet_aton(\"192.168.122.66\")\n    ip[16:20] = socket.inet_aton(\"203.0.113.9\")\n    ip[20:60] = options\n    ip[10:12] = b\"\\x00\\x00\"\n    csum = ip_checksum(bytes(ip))\n    struct.pack_into(\">H\", ip, 10, csum)\n    return eth + bytes(ip) + b\"payload!\"\n\n\ndef ip_checksum(hdr):\n    s = 0\n    for i in range(0, len(hdr), 2):\n        s += (hdr[i] << 8) | hdr[i + 1]\n    while s >> 16:\n        s = (s & 0xFFFF) + (s >> 16)\n    return (~s) & 0xFFFF\n\n\nif __name__ == \"__main__\":\n    sys.exit(main())", "url": "https://gist.github.com/shimarin/3e69147b9c5ca911d9f21998472a6fca"}, {"timestamp": "2026-10-17T09:17:21.021Z", "date_only": false, "value": "2026-10-17T09:17:21.021615Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/suikan.bsky.social/post/3my2qzrywo22a", "record": "CVE-2026-99999", "field": "creation_timestamp", "uuid": "32b26403-726a-4cd2-962e-bd596f2661cb", "content": "Linux\u306e\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u30fb\u30b5\u30d6\u30b7\u30b9\u30c6\u30e0\u306b\u6f5c\u3093\u3067\u3044\u305f\u8106\u5f31\u6027\u306e\u305f\u3081\u306b\u3001\u3055\u304f\u3089\u306f\u7dca\u6025\u5bfe\u5fdc\u3092\u3057\u3066\u3044\u308b\u3002\u4e16\u754c\u4e2d\u306e\u30b5\u30fc\u30d3\u30b9\u30fb\u30d7\u30ed\u30d0\u30a4\u30c0\u304c\u540c\u69d8\u306e\u5bfe\u5fdc\u306b\u8ffd\u308f\u308c\u3066\u3044\u308b\u3068\u601d\u308f\u308c\u308b\u3002Debian\u3068Proxmox\u306e\u52d5\u304d\u3082\u898b\u3066\u304a\u3053\u3046\u3002\u81ea\u5b85\u30b5\u30fc\u30d0\u30fc\u306eOS\u306a\u306e\u3067\u3002\n\n\u3055\u304f\u3089\u306e\u30af\u30e9\u30a6\u30c9\u306b\u304a\u3051\u308bLinux\u30ab\u30fc\u30cd\u30eb\u306e\u8106\u5f31\u6027\uff08CVE-2026-99999\uff09\u3078\u306e\u5bfe\u5fdc\u72b6\u6cc1\u306b\u3064\u3044\u3066 | \u3055\u304f\u3089\u306e\u30af\u30e9\u30a6\u30c9\u30cb\u30e5\u30fc\u30b9 share.google/mu0hYghK30M2...", "url": "https://bsky.app/profile/suikan.bsky.social/post/3my2qzrywo22a"}, {"timestamp": "2026-10-17T09:20:14.448Z", "date_only": false, "value": "2026-10-17T09:20:14.448835Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/owo.nz/post/3my2r6wuyo426", "record": "CVE-2026-99999", "field": "creation_timestamp", "uuid": "31dfb642-e053-441f-9d61-0019427616ff", "content": "\u8ba9 AI \u7ed9\u6211\u7684\u51e0\u5341\u53f0 VPS \u4f9d\u6b21\u66f4\u65b0\u5185\u6838\u3002\n\nhttps://security-tracker.debian.org/tracker/CVE-2026-99999", "url": "https://bsky.app/profile/owo.nz/post/3my2r6wuyo426"}, {"timestamp": "2026-10-17T09:57:19.271Z", "date_only": false, "value": "2026-10-17T09:57:19.271899Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ibuki-aizawa.bsky.social/post/3my2tbaa7ds2m", "record": "CVE-2026-99999", "field": "creation_timestamp", "uuid": "74c39781-4efb-49b8-b4c4-5000f563c679", "content": "CVE-2026-99999 \u306a\u3093\u304b\u30e4\u30d0\u305d\u3046\u3002", "url": "https://bsky.app/profile/ibuki-aizawa.bsky.social/post/3my2tbaa7ds2m"}, {"timestamp": "2026-10-17T10:43:31.241Z", "date_only": false, "value": "2026-10-17T10:43:31.241024Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/countzero0x00.bsky.social/post/3my2vtooju223", "record": "CVE-2026-99999", "field": "creation_timestamp", "uuid": "9765e714-9816-4175-9cc2-f4a69fbd4d5c", "content": "\u4eee\u60f3\u30de\u30b7\u30f3\u304b\u3089\u30db\u30b9\u30c8\u3078\u8131\u51fa\u3059\u308b\u8105\u5a01\uff1a\u300cPwnEscape\uff08CVE-2026-99999\uff09\u300d\u306e\u5168\u8c8c\u3068\u5f71\u97ff\nnote.com/mg185/n/n80d...\n\n\u3053\u308c\u306f\u77e5\u3089\u306a\u304b\u3063\u305f\u3051\u3069\u7d50\u69cb\u30e4\u30d0\u30a4\u306d", "url": "https://bsky.app/profile/countzero0x00.bsky.social/post/3my2vtooju223"}, {"timestamp": "2026-10-17T10:52:36.202Z", "date_only": false, "value": "2026-10-17T10:52:36.202012Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/matusita.bsky.social/post/3my2we32fvs4r", "record": "cve-2026-99999", "field": "creation_timestamp", "uuid": "6aa85c3f-caaa-4b30-9d3e-e985ed28f6c6", "content": "https://nvd.nist.gov/vuln/detail/cve-2026-99999\n\nLinux\u65b9\u9762\u305f\u3044\u3078\u3093\u3060\u30fc\u3001\u306f\u3044\u3044\u3068\u3057\u3066\n\nhttps://www.sakura.ad.jp/corporate/information/announcements/2026/10/16/1968226051/\n\nVPS\u501f\u308a\u3066\u308b\u5074\u8996\u70b9\u3067\u306f\u300c\u3042\u30fc\u3001\u305d\u308a\u3083\u305d\u3046\u306a\u308b\u304b\u300d\u3063\u3066\u611f\u3058\u3002\u304c\u3093\u3070\u3063\u3066\u30fc\u3001\u3067\u306f\u3042\u308a\u307e\u3059\u3057\u3001\u52d5\u3044\u3066\u308bVPS\u306f\u73fe\u72b6\u554f\u984c\u306a\u3044\u611f\u3058\u3002\u307e\u3042\u3001\u306a\u3093\u304b\u3059\u308b\u3093\u3067\u3057\u3087\u3046\u306d\u3047...", "url": "https://bsky.app/profile/matusita.bsky.social/post/3my2we32fvs4r"}, {"timestamp": "2026-10-17T11:14:14.181Z", "date_only": false, "value": "2026-10-17T11:14:14.181Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2026-99999", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-17T11:14:14.181Z", "date_only": false, "value": "2026-10-17T11:14:14.181Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Linux", "record": "cve-2026-99999", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-17T11:25:36.243Z", "date_only": false, "value": "2026-10-17T11:25:36.243289Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/yayamamass.bsky.social/post/3my2y72ljts2e", "record": "CVE-2026-99999", "field": "creation_timestamp", "uuid": "dbb2dede-4171-479e-909f-fcd7099f9e60", "content": "CVE-2026-99999\nGuest-to-Host KVM Escape\n\npwn.ai/blog/pwnescape", "url": "https://bsky.app/profile/yayamamass.bsky.social/post/3my2y72ljts2e"}, {"timestamp": "2026-10-17T13:40:35.024Z", "date_only": false, "value": "2026-10-17T13:40:35.024876Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/garmy.activitypub.garmy.jp.ap.brid.gy/post/3my37qbwh4ld2", "record": "CVE-2026-99999", "field": "creation_timestamp", "uuid": "db6b5192-a2a6-4791-9e3d-ab7e32f52490", "content": "\u3044\u3064\u3082\u3042\u308a\u304c\u3068\u3046publickey\u3055\u3093\u3002\u300cPwnEscape\u300d\uff08CVE-2026-99999\uff09\u306fKVM\u4ee5\u5916\u306e\u30b3\u30f3\u30c6\u30ca\u74b0\u5883\u306b\u3082\u95a2\u4fc2\u3057\u3046\u308b\u3088\u3001\u3068\u306e\u3053\u3068\u3002\u6700\u521d\u306f\u3055\u304f\u3089\u30a4\u30f3\u30bf\u30fc\u30cd\u30c3\u30c8\u306e\u5bfe\u5fdc\u3067\u8a71\u984c\u306b\u306a\u3063\u305f\u306e\u3067KVM\u3060\u3051\u306a\u306e\u304b\u2026\u3068\u601d\u3063\u3066\u3044\u305f\u304c\u305d\u3093\u306a\u3053\u3068\u306f\u306a\u304fAWS\u306a\u3069\u3082\u5bfe\u5fdc\u3057\u3066\u3044\u308b\u3001\u3068\u5206\u304b\u308b\u3002\n\u3057\u304b\u3057\u3001\u65e5\u672c\u306e\u30de\u30a4\u30ca\u30fc\u306aVPS\u7cfb\u306f\u305d\u3082\u305d\u3082\u5bfe\u5fdc\u306b\u6c17\u3065\u3051\u308b\u306e\u3060\u308d\u3046\u304b\u2026\uff1f\n\u3057\u3063\u304b\u308a\u3057\u305f\u904b\u55b6\u6bcd\u4f53\u3058\u3083\u306a\u3044\u3068VPS\u3082\u5b89\u5fc3\u3057\u3066\u4f7f\u3048\u306a\u3044\u6642\u4ee3\u3001\u304b\u2026\n\nLinux\u30ab\u30fc\u30cd\u30eb\u306e\u6df1\u523b\u306a\u8106\u5f31\u6027\u300cPwnEscape\u300d\uff08CVE-2026-99999\uff09\u3001\u30b2\u30b9\u30c8\u306e\u4eee\u60f3\u30de\u30b7\u30f3\u304b\u3089\u30db\u30b9\u30c8\u5074Linux OS\u306b\u4e0d\u6b63\u306a\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u3067\u304d\u308b\u53ef\u80fd\u6027 [\u2026]", "url": "https://bsky.app/profile/garmy.activitypub.garmy.jp.ap.brid.gy/post/3my37qbwh4ld2"}, {"timestamp": "2026-10-17T13:40:35.617Z", "date_only": false, "value": "2026-10-17T13:40:35.617523Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/garmy.bsky.social/post/3my37qfkafc23", "record": "CVE-2026-99999", "field": "creation_timestamp", "uuid": "87d650a0-001e-45e9-95e1-7b1415cb1ea7", "content": "\u3044\u3064\u3082\u3042\u308a\u304c\u3068\u3046publickey\u3055\u3093\u3002\u300cPwnEscape\u300d\uff08CVE-2026-99999\uff09\u306fKVM\u4ee5\u5916\u306e\u30b3\u30f3\u30c6\u30ca\u74b0\u5883\u306b\u3082\u95a2\u4fc2\u3057\u3046\u308b\u3088\u3001\u3068\u306e\u3053\u3068\u3002\u6700\u521d\u306f\u3055\u304f\u3089\u30a4\u30f3\u30bf\u30fc\u30cd\u30c3\u30c8\u306e\u5bfe\u5fdc\u3067\u8a71\u984c\u306b\u306a\u3063\u305f\u306e\u3067KVM\u3060\u3051\u306a\u306e\u304b\u2026\u3068\u601d\u3063\u3066\u3044\u305f\u304c\u305d\u3093\u306a\u3053\u3068\u306f\u306a\u304fAWS\u306a\u3069\u3082\u5bfe\u5fdc\u3057\u3066\u3044\u308b\u3001\u3068\u5206\u304b\u308b\u3002\n\u3057\u304b\u3057\u3001\u65e5\u672c\u306e\u30de\u30a4\u30ca\u30fc\u306aVPS\u7cfb\u306f\u305d\u3082\u305d\u3082\u5bfe\u5fdc\u306b\u6c17\u3065\u3051\u308b\u306e\u3060\u308d\u3046\u304b\u2026\uff1f\n\u3057\u3063\u304b\u308a\u3057\u305f\u904b\u55b6\u6bcd\u4f53\u3058\u3083\u306a\u3044\u3068VPS\u3082\u5b89\u5fc3\u3057\u3066\u4f7f\u3048\u306a\u3044\u6642\u4ee3\u3001\u304b\u2026\nwww.publickey1.jp/blog/26/linu...", "url": "https://bsky.app/profile/garmy.bsky.social/post/3my37qfkafc23"}]}