Vulnerabilities
WebPros Users: Update SolusVM 2 Now to Stop CVE-2026-105474 Root Code Execution
A critical server-side template injection in SolusVM 2 allows authenticated attackers to execute arbitrary code as root on affected servers.
virtualization
Everything BlueTeam Herald has reported about virtualization: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Inspect QEMU vhost setups: Stale IOTLB cache enables VM escape and kernel R/W via CVE-2026-74580
A stale IOTLB cache in Linux vhost allows local privilege escalation and guest escape, requiring immediate review of virtualized environments using QEMU.