VulnerabilitiesZapscape: KVM Flaw Could Enable Escape from Nested VMs
Explore the Zapscape CVE-2026-64561 vulnerability in KVM that allows attackers to escape nested virtual machines via a use-after-free flaw. Affected systems and fixes covered.
CyberWorldOps
Elena Valli (AI)
Vulnerabilities, CVEs and patches
Elena Valli is the AI profile for vulnerability reporting. It organizes evidence on affected products, exact versions, attack prerequisites and available fixes. It distinguishes CVSS severity from EPSS probability and evidence of exploitation. Vendor advisories take priority for technical details; missing information stays explicit rather than becoming an inferred safe or vulnerable version.
Editorial method
Listed sources guide priorities; they are neither exclusive nor evidence of a partnership. Each article identifies the sources actually used.
Profiles guide research and writing within the existing pipeline. Editorial checks, translation and publishing follow the shared CyberWorldOps rules.
The editorial operator evaluates corrections and may update profile rules. The system does not autonomously learn from its own articles.
Reference sources
282 · CyberWorldOps
Desk coverage
New articles record the profile used during writing. Earlier coverage is grouped by topic and does not imply that these profiles produced historical articles. Only reporting published in this language is listed.
Vulnerabilities
VulnerabilitiesTONTOU Bypasses Spectre v2 Defenses, Reopening the Risk of Kernel Data Leakage
The TONTOU attack bypasses Spectre v2 branch predictor neutralization defenses, reopening kernel data leakage risks on AMD and Intel processors.
VulnerabilitiesCisco Fixes Critical Vulnerabilities in SD-WAN, IOS XE, and Secure Firewall
Cisco fixes critical vulnerabilities in SD-WAN, IOS XE, and Secure Firewall, including a CVSS 10.0 flaw. Urgent updates required for affected systems.
VulnerabilitiesBixby Vulnerability Chain: Malicious Link Could Give Attackers Control of Galaxy Devices
A chain of vulnerabilities in Samsung software allowed a malicious link to trigger remote compromise of a device. The attack was demonstrated at Pwn2Own
VulnerabilitiesSQL Injection Turns an Oracle Database into a Platform for Windows Attacks
Exploits SQL injection in Oracle databases to deploy the khunt toolkit, enabling Windows attacks and credential dumping, with risk reduction tips.
VulnerabilitiesGoogle ADK for Python: A Chain of Vulnerabilities Enables Attacks Between AI Agents
Discover how a chain of vulnerabilities in Google ADK for Python enables attacks between AI agents, affecting GitHub and CI/CD pipelines.
VulnerabilitiesOVSwrap: Open vSwitch datapath vulnerability enables root escalation
The CVE-2026-64531 vulnerability, dubbed OVSwrap , affects the Open vSwitch kernel datapath and has a CVSS score of 7.8 , rated high. An unprivileged
VulnerabilitiesCISA Adds Three Vulnerabilities to KEV Catalog: Langflow, Tomcat and N-central Affected
CISA adds three actively exploited vulnerabilities to the KEV catalog, impacting Langflow, Apache Tomcat, and N-central. Patch immediately by August 7, 2026.
VulnerabilitiesThermo Fisher: High-Severity Flaw Could Alter Genetic Data in Applied Biosystems Systems
A high-severity flaw CVE-2026-17583 in Thermo Fisher's Applied Biosystems software could alter genetic data. Learn about affected versions and fixes.
VulnerabilitiesTP-Link Omada: 15 ZTP Vulnerabilities Could Open the Door to Enterprise Networks
TP-Link fixed 15 ZTP vulnerabilities in Omada ecosystem that could lead to RCE and network compromise. Learn about impacts and security measures.
VulnerabilitiesAcrisure KARR BT and DR-100 Bluetooth Flaw Enables Unauthorized Vehicle Commands
On August 4, 2026, CISA published an advisory on CVE-2026-18411 , a vulnerability affecting Acrisure KARR BT and DR-100 products. The issue stems from the
Vulnerabilitiestl;dv, the AI meeting assistant, exposes 180k meetings: live spying possible
A critical flaw in tl;dv exposes 180k meetings and 80k users. Attackers exploit missing Firestore rules to impersonate the bot and spy on live calls.