🚨 The 9.0 Linux KSMBD bugs got the headlines. The 7.8 one has the public root exploit.
ZDI-CAN-33367: confirmed root on AlmaLinux, Debian and Ubuntu.
→ Slips past the Dirty Frag fix
→ No merged patch. No CVE.
Who's exposed + the stopgap ↓ https://t.co/0MIHpvkPIQ
Emergency WAF ruleset update for 2026-10-25 adds two new detections for CVE-2026-111497. They default to log mode so you can audit impact. Check existing overrides to avoid false positives.
https://t.co/klQTaPmR4q
@IntCyberDigest Worth adding for Python shops: patching Node and the Brotli package doesn't reach copies other software bundles. Pillow's wheels still carry an unfixed Brotli, reached through fonts, and no published advisory names it yet, so scanners won't tell you.
@AlAssaf_H Python has one more copy that updating Brotli/brotlicffi won't fix: Pillow's wheels bundle their own (since 9.3.0), reached via fonts loaded with ImageFont.truetype(). Its SBOM leaves Brotli out, so pip-audit and Dependabot stay quiet. Write-up: https://t.co/zHzfM5efTx