Other 2026 Linux kernel KEV additions
CVE-2026-53362 (IPv6): KEV 27 Aug 2026.
- Disclosed
What happened
- Three kernel flaws on 18 Sep 2026, including CVE-2026-53266 (ebtables).
- **CVE-2026-46300** (missing initialization): KEV 28 Oct 2026, confirmed on CISA’s alert. Secondary sources say it is chained with PHP2Shell for root.
Live scores
Live scores
CVE-2026-46300- EPSS
- 0.161
likely to be attacked soon - VEDAS
- 0.977
strong exploit evidence - On CISA KEV
- Yes, since 2026-10-28
- Detection rule
- Out of scope (local)
Thin horizontal line: the “likely” (EPSS 0.10) or “strong” (VEDAS 0.90) threshold. Shaded “no data” areas are periods when cve-scores did not publish. The vertical line is the day CISA added it to its exploited list.
VEDAS flagged this bug about 81 days before CISA confirmed attacks.
Live scores
CVE-2026-53266- EPSS
- 0.009
low predicted chance of attack - VEDAS
- 0.969
strong exploit evidence - On CISA KEV
- Yes, since 2026-09-18
- Detection rule
- None yet
Thin horizontal line: the “likely” (EPSS 0.10) or “strong” (VEDAS 0.90) threshold. Shaded “no data” areas are periods when cve-scores did not publish. The vertical line is the day CISA added it to its exploited list.
Live scores
CVE-2026-53362- EPSS
- 0.007
low predicted chance of attack - VEDAS
- 0.975
strong exploit evidence - On CISA KEV
- Yes, since 2026-08-27
- Detection rule
- Out of scope (local)
Thin horizontal line: the “likely” (EPSS 0.10) or “strong” (VEDAS 0.90) threshold. Shaded “no data” areas are periods when cve-scores did not publish. The vertical line is the day CISA added it to its exploited list.
Sources
This is a brief: a short, sourced summary from our incident tracking. Full advisories add commands to check whether you are affected.