CISA Adds Linux Kernel and VMware ESX Vulnerabilities to KEV CISA has added CVE-2026-41709 and CVE-2026-46300 to its catalog of known exploited vulnerabilities. The VMware ESX issue is an insufficient logging flaw that allows an administrator to perform actions without those actions being logged. A Linux kernel flaw, known as pregnaization, allows escalation of local privileges to root via page cache corruption. The additions move both topics from repair guidance to active risk management. For defenders, one flaw compromises visibility after admin-level access, while the other can turn low privileges into a full system compromise. The federal patch dates are October 31, 2026 for the Linux kernel bug and November 11, 2026 for VMware ESX. Open sources - closed narratives.

CISA Adds Linux Kernel and VMware ESX Vulnerabilities to KEV CISA has added CVE-2026-41709 and CVE-2026-46300 to its catalog of known exploited vulnerabilities. The VMware ESX issue is an insufficient logging flaw that allows an administrator to perform actions without those actions being logged. A Linux kernel flaw, known as pregnaization, allows escalation of local privileges to root via page cache corruption. The additions move both topics from repair guidance to active risk management. For defenders, one flaw compromises visibility after admin-level access, while the other can turn low privileges into a full system compromise. The federal patch dates are October 31, 2026 for the Linux kernel bug and November 11, 2026 for VMware ESX. Open sources - closed narratives.