Armario de comunicaciones con decenas de latiguillos de red azules y grises cruzados sobre los paneles de parcheo

Seven fixed versions in the CVE and none of them boots your Proxmox

CVE-2026-98432 is a 9.8 in the Linux kernel: a use-after-free in the IPv4 TCP handshake, exploitable with no credentials and no interaction. The advisory lists seven fixed versions — 5.10.272, 5.15.223, 6.1.190, 6.6.159, 6.12.113, 6.18.56 and 7.2.10 — and not one matches the branch a Proxmox node boots. What actually triggers the bug according to the CVE's own field-by-field justification, the clocks of Debian, Ubuntu, Red Hat and Proxmox as of 31 October, what the published exploit proves and what it does not, and six checks with commands.

Cybersecurity Patching Proxmox

Read more →

Pasillo de un centro de datos con filas de armarios de servidores y bandeja de cableado en el techo

23 Oct 2026 10 min read

Your scanner says zero criticals and the exploit gets root

On 21 October 2026 the Zero Day Initiative sent five Linux kernel bug reports to the security team and, by mistake, to the public development lists. Three carried full proof-of-concept code. None has a CVE, because the kernel only assigns a number once the fix is already in a stable tree. And one of them has already produced root on AlmaLinux 8, 9 and 10, Debian 12 and 13 and Ubuntu 24.04 and 26.04, bypassing the Dirty Frag fix. We explain why the 9.0 probably does not affect you and the 7.8 does, what to check on each machine and the traps in checking it, and why the number that eventually shows up in your scanner is not a warning but a receipt.

Cybersecurity Linux Vulnerabilities

Read more →

Interior de un servidor de dos zócalos abierto, con los procesadores y dos bancos de módulos de memoria a la vista

18 Sep 2026 8 min read

Patching the kernel means rebooting, and the reboot erases the evidence

CISA added two Linux kernel flaws to its exploited catalogue today, due by Monday. One has sat in your scanner for eleven months rated 3.3 out of 10; the kernel project scores it 7.8 on the very same record. Both entries carry the forensic-triage flag CISA now attaches to two out of every three new additions, and its guidance says not to remediate before collecting evidence. In the kernel, remediating means rebooting. And rebooting erases a good part of what you are asked to keep.

Cybersecurity Linux Patching

Read more →

Parte trasera de un chasis de servidor con módulos de ventilador y cables de alimentación

17 Sep 2026 10 min read

Acronis Backup: "requires local access" — and that access is what you sell your customers

On 15 September Acronis published a one-sentence advisory: local privilege escalation through insecure file permissions in its backup plugin for cPanel and Plesk, CVSS 7.8, exploited in targeted attacks. A "local" 7.8 is exactly the CVE almost every patching queue pushes to next week. On a machine with a single administrator, that call is defensible. On a server where every customer gets their own system user, the requirement for "local access with low privileges" is not describing a barrier: it is describing your business model.

Cybersecurity Backup Patching

Read more →

20 Jan 2025 5 min read

Proxmox Datacenter Manager 1.0: The revolution in centralized virtual infrastructure management

Proxmox has launched its secret weapon for enterprise-scale virtual infrastructure management: Proxmox Datacenter Manager 1.0. Discover how this first stable release revolutionizes the management of multiple Proxmox VE and Proxmox Backup Server environments.

Proxmox Virtualization Datacenter

Read more →

everyWAN Blog

Seven fixed versions in the CVE and none of them boots your Proxmox

Your scanner says zero criticals and the exploit gets root

Patching the kernel means rebooting, and the reboot erases the evidence

Acronis Backup: "requires local access" — and that access is what you sell your customers

Proxmox Datacenter Manager 1.0: The revolution in centralized virtual infrastructure management

Subscribe to our newsletter