Exploited vulnerabilitiesBriefChecked against a primary source
FreeBSD RPCSEC_GSS / NFS stack overflow (CVE-2026-4747)
Advisory FreeBSD-SA-26:08, published 26 Mar 2026.
- Disclosed
What happened (Mythos-found)
- Advisory FreeBSD-SA-26:08, published 26 Mar 2026. Unauthenticated stack overflow in kgssapi.ko.
- Credit: “Nicholas Carlini using Claude, Anthropic”. Anthropic’s Mythos write-up shows it autonomously exploited for remote root.
- Affected: 15.0, 14.4, 14.3, 13.5. Not known to be exploited in the wild.
Live scores
Live scores
CVE-2026-4747- EPSS
- 0.034
some chance of attack soon - VEDAS
- 0.519
some exploit evidence - On CISA KEV
- Not listed
- Detection rule
- None yet
Sources
This is a brief: a short, sourced summary from our incident tracking. Full advisories add commands to check whether you are affected.