suspectedlowVulnerabilityFirst reported Oct 15, 2026

Vercel: critical Linux kernel flaw 'PwnEscape' demonstrated against live cloud sandboxes

A newly disclosed critical Linux kernel vulnerability (CVE-2026-99999, 'PwnEscape') in the networking code lets code inside a VM read host memory. A researcher demonstrated the leak against Vercel's live cloud sandboxes, and Vercel confirmed it. The flaw lies in the shared kernel rather than any single cloud provider's configuration.

Members only

The full record: the timeline and 1 linked report

Every update as it happened, with the status at each step
Every report behind the record, newest first
Alerts the moment Vercel — or anything else you track — is hit again

A free account is all it takes — no card, one minute.

Create a free account Log in