Gunra ransomware rewrote VDI authentication on Fortinet MFA to bypass it silently while stealing symmetric encryption keys from Hiware servers; Microsoft patched four wormable DNS RCEs including CVSS 9.8 CVE-2026-62878.
INC Ransomware claims 885 victims on SonicWall SMA 1000 zero-days CVE-2026-15409/15410 with TOTP seed theft. CISA adds Langflow CVE-2026-9198 RCE to KEV. cPanel CVE-2026-58048 (CVSS 9.4) SQL-root escalation.
This note maps three runc container-escape CVEs disclosed together on November 5, 2025: the maskedPaths symlink bypass, the /dev/console mount race, and the LSM label write redirect. Chained they reach host root; patched individually they leave gaps for homelab distros.
Four CVEs in the llama.cpp GGUF parser prove a model file is executable code at parse time; a Jinja2 SSTI in Python bindings and a server-side completion-endpoint RCE broaden the surface. What six bugs mean for Ollama, LM Studio, and your homelab intake process.
A clean job log does not prove the data is recoverable. A field guide to backup verification: what S3 Object Lock actually protects, why delete markers break restores even when retention locks hold intact, and how to build a restore drill that catches the failures your cron job never reports.
IronWorm is not an incremental improvement on the Shai-Hulud family of npm worms. It is a deliberate engineering escalation that makes several defenses: token rotation, 2FA-enforced publish workflows, provenance signatures, and even kernel-level attestation.
INC Ransomware hits 900+ victims via SonicWall SMA 1000 zero-days. npm worm ChainDrop poisoned 444+ packages with Ethereum C2 rotation. CVE-2026-59726 leaves Ruflo's MCP bridge unauthed (CVSS 10.0). Plus: TeamCity under BOD in latest KEV batch; NatJack NAT trust exploits.
Six runtime families, one pattern: the same five architectural flaws across Ollama, llama.cpp, vLLM, NVIDIA Triton, MLflow, and MCP — an evergreen operator deep-dive of the 2026 CVE wave, with per-flaw detection commands and a durable 12-item checklist.
A second shadow-MMU escape in a month: Zapscape (CVE-2026-64561) lets a nested guest reach host root on an unpatched KVM. If you rebooted for Januscape, check the booted kernel again — separate bug, separate fix.
Lazarus Group's Operation Dream Job Wave 3: fake recruiter lures, two infection chains, the FudModule v3.1 kernel rootkit, and the CVE-2026-68820 AFD.sys zero-day. Includes tiered detection guidance.
Five agencies published a joint PLC advisory. Its reconnaissance playbook works against a homelab with a public IP just as well as a PLC rack. A first-person external audit of the Malwlab surface: enumeration checklist, before/after delta, and controls left behind to catch anyone scanning back.
CVE-2026-64849 makes it possible against any MLflow tracking server that anyone can reach: a single unauthenticated HTTP request makes the server fetch the metadata endpoint for you and return the body.
Self-Hosting
I audited my self-hosted AI stack against CVE-2026-48710 (BadHost), the Starlette host-header auth bypass. One component ran an affected version and stayed protected by code, not by patch. The exact per-container checks, and the scan that exposed it.
cve-2026-59310
A five-day exploitation window, a reverse SSH backdoor, and a patch that closes the front door while the channel stays open. The vCenter triage.
litellm
An unauthenticated pre-auth SQL injection in the LiteLLM AI gateway, fixed in 1.83.7 and exploited in the wild 36 hours after the global advisory. The AI gateway is the perimeter device of the self-hosted AI stack — here is the triage, the forensics, and the standing posture.
homelab
A 20 GB GGUF from a trusted repo is not a download - it is code doing work. The lab note: why a clean build floor did not close the two open llama.cpp GGUF-parser flaws, and the no-egress intake/loader split that makes the file just a file again.
homelab
CISA added four self-hosted apps to KEV in three weeks: Metabase, MLflow, Zimbra, Gitea. The 72-hour operator checklist: exposure check, patch or compensate, compromise check, scoped credential rotation, documentation for the next incident.
Threat Intel
Zimbra 10.1.x below 10.1.20 with the optional zimbra-snmp package and snmp_notify enabled is directly exploitable - CERT Polska confirms an ongoing in-the-wild campaign, the CISA KEV remediation due date has passed, and the observed persistence is JSP web shells in Jetty webapps.
homelab
CVE-2026-65400 is a pre-auth root in macOS Screen Sharing's screensharingd, actively exploited and rescored 7.1 to 9.8. The patch is out, but the forgotten 5900 forward is the exposure: patch the Mac, verify nothing else can reach port 5900, and if it can, treat the box as compromised.
Self-Hosting
Copy Fail (CVE-2026-31431) lets any local user write 4 bytes into the page cache of any readable file, and one 732-byte script turns that into root. Container isolation never touched the page cache: rootless Podman stops the root, not the poisoned binary your other containers execute.
Threat Intel
Executive summary A pair of high-severity flaws in TrueConf Server lets an unauthenticated attacker take over the server and replace every client installer it distributes — a one-box supply-chain compromise. Both CVEs were added to CISA's Known Exploited Vulnerabilities catalog on 2026-08-20 with enforcement
Threat Intel
Self-hosted Metabase, version x.58.0 through x.63.4, has an unauthenticated SQL injection in POST /api/session/reset_password that writes straight into the application database (the one holding accounts, connections, and settings, not your warehouse). An attacker who reaches that endpoint gets admin of the instance
SonicWall
SonicWall confirms active exploitation of CVE-2026-15409 and CVE-2026-15410 in SMA1000 appliances. Fixed versions, indicators, and response steps.
cve
CVE-2026-18577: N-able N-central Auth Bypass with Incomplete Patch and Cloudflare Tunnel Persistence Executive Summary CVE-2026-18577 is a critical authentication-bypass vulnerability in N-able N-central, the flagship Remote Monitoring and Management (RMM) platform. The flaw is an incomplete patch for CVE-2026-18556.