Coverage from Security Affairs indicates that the Cybersecurity and Infrastructure Security Agency has updated its Known Exploited Vulnerabilities catalog to include two critical security flaws affecting the Linux kernel and Broadcom VMware ESX software.
The agency added CVE-2026-41709, a logging vulnerability in VMware ESX, and CVE-2026-46300, a Linux kernel flaw known as Fragnesia. The VMware issue allows attackers with administrative access to perform operations without triggering audit logs, effectively masking malicious activity. Reports indicate the China-linked threat actor Warp Panda utilized this as a zero-day to maintain covert persistence. Meanwhile, the Fragnesia vulnerability in the Linux kernel allows unprivileged local attackers to corrupt the page cache, potentially granting full root access. This flaw is particularly dangerous as it does not require complex timing attacks to execute. Federal agencies are mandated to remediate the Linux kernel flaw by Oct. 31, 2026, and the VMware ESX vulnerability by Nov. 11, 2026. Private organizations are also encouraged to review their infrastructure against these entries to prevent exploitation. These updates highlight the ongoing risks posed by both sophisticated state-sponsored actors and local privilege escalation techniques that threaten enterprise and government network integrity.
Source: Security Affairs
