threat-intel - Malwlab

research

GhostLock (CVE-2026-43499): 15-Year-Old Linux Kernel LPE & Container Escape — Deep Dive and Homelab Patching Guide

GhostLock is a 15-year-old use-after-free in the Linux kernel's priority-inheritance futex path that enables container escape from zero capabilities. Technical breakdown of the exploit chain plus patching guidance for Proxmox, Docker, Kubernetes, and CI runner operators.

cve

CVE-2026-11405: Hidden Admin Backdoor in Tenda Routers — Homelab Operator Advisory

CVE-2026-11405 — undocumented authentication backdoor in Tenda firmware granting admin access with a hidden password. No patch available since CERT/CC disclosure on July 6, 2026.

langflow

Langflow Vulnerability Cluster: CVE-2025-3248 + CVE-2026-5027 — Active Exploitation Analysis and Homelab Impact

Langflow has THREE critical vulnerabilities actively exploited in the wild. With ~7,000 instances exposed on public internet and auto-login enabled by default, homelab operators are prime targets.

GhostLock (CVE-2026-43499): 15-Year-Old Linux Kernel LPE &amp; Container Escape — Deep Dive and Homelab Patching Guide

CVE-2026-11405: Hidden Admin Backdoor in Tenda Routers — Homelab Operator Advisory

Langflow Vulnerability Cluster: CVE-2025-3248 + CVE-2026-5027 — Active Exploitation Analysis and Homelab Impact

GhostLock (CVE-2026-43499): 15-Year-Old Linux Kernel LPE & Container Escape — Deep Dive and Homelab Patching Guide