The Hacker News October 22, 2026

Two CVSS 9.0 Linux KSMBD RCE Flaws Disclosed on Public Mailing Lists Before Kernel Fixes

Two CVSS 9.0 flaws in Linux KSMBD could enable remote code execution; one needs no authentication, and neither has a mainline fix.

More like this

ThreatsDay: AI Secrets Leak, PingCAP Source Theft, Signal Hang-Up Flaw, Laravel Auth Bypass + 21 More

The Hacker News

The disastrous PHP vulnerabilities were exploited days before the patch

The Verge

3 Very Different Survival Games from indie.io Featured in Steam Next Fest

IGN