Proxmox VE virtualization, cluster management, VM/container orchestration, and homelab infrastructure.
Threat Intel
A second shadow-MMU escape in a month: Zapscape (CVE-2026-64561) lets a nested guest reach host root on an unpatched KVM. If you rebooted for Januscape, check the booted kernel again — separate bug, separate fix.
cve-2026-59310
A five-day exploitation window, a reverse SSH backdoor, and a patch that closes the front door while the channel stays open. The vCenter triage.
cve
A deep-dive on CVE-2026-53359 Januscape: KVM x86 shadow MMU use-after-free enabling guest-to-host escape when nested virtualization is exposed. Includes Proxmox impact, attack chain, and hardening steps for homelab and enterprise operators.
research
GhostLock is a Linux kernel use-after-free in futex priority inheritance. Patch and verification guidance for operators running containers, virtual machines, and CI jobs.