Loading story…
dCERT published Advisory 2026-1162 for OpenBSD, warning that a vulnerability could allow a denial-of-service condition. Public details in the notice were limited, but the issue indicates that affected OpenBSD systems may be susceptible to service disruption if the flaw is triggered.
dCERT also issued Advisory 2026-1202 covering the FreeBSD Project FreeBSD OS, reporting multiple vulnerabilities in the operating system. While the advisory summary did not include technical specifics, the paired disclosures highlight newly published security issues affecting two major BSD platforms and signal that administrators should review vendor guidance, assess exposure, and prioritize relevant patches or mitigations.
See affected versions and whether adversaries are exploiting it.
2 events from the most recent confirmed update back to the earliest known activity.
dCERT issued Advisory 2026-1202 covering multiple vulnerabilities affecting the FreeBSD Project's FreeBSD OS. The reference does not include further details on the flaws or fixes.
dCERT issued Advisory 2026-1162 for an OpenBSD vulnerability that could allow denial of service. No additional technical details are provided in the reference.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See whether adversaries are exploiting this yet, and where the affected versions run in your environment.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
FreeBSD published security advisory **`FreeBSD-SA-26:14.pf`** covering the operating system’s **`pf`** packet filter subsystem. The advisory was released through the official FreeBSD security channel and was subsequently mirrored by third-party BSD security tracking sites, indicating a newly disclosed security issue affecting systems that rely on `pf` for firewalling and network traffic filtering. Publicly available reference material provides only limited summary detail, but the advisory identifies `pf` as the affected component and signals that administrators should review the official FreeBSD notice for impacted versions, patch availability, and remediation guidance. Organizations using FreeBSD firewalls, gateways, or hosts with `pf` enabled should prioritize validation of exposure and apply vendor-provided fixes or mitigations as appropriate.
Jun 29, 2026
The FreeBSD Project issued six security advisories addressing eight vulnerabilities in the FreeBSD kernel, `mac_do` policy module, and `ppp(8)`. Two critical flaws in `ppp(8)`, tracked as **CVE-2026-58095** and **CVE-2026-58096**, have CVSS v3 scores of 9.8 and could allow a malicious PPP peer to crash the service or potentially execute arbitrary code with root privileges. The remaining issues include local privilege-escalation risks arising from use-after-free, race-condition, time-of-check/time-of-use, and credential-handling weaknesses. No active exploitation or public proof-of-concept has been reported; FreeBSD administrators should apply the relevant supported-branch security updates and reboot affected systems.
Aug 27, 2026
dCERT issued two advisories for **Linux Kernel** vulnerabilities that can lead to **denial of service**, identifying the issues as advisory `2026-1017` and advisory `2026-1046`. Both notices describe flaws in the kernel that could allow attackers to disrupt system availability, underscoring continued risk to Linux-based servers, appliances, and endpoints that rely on the affected kernel components. While the advisories do not include public synopses, the paired notices indicate separate Linux Kernel denial-of-service issues requiring review by defenders and system owners. Organizations running Linux should track the affected kernel versions referenced by dCERT, prioritize vendor patches or mitigations as they become available, and assess exposure across internet-facing and critical internal systems where service interruption would have operational impact.
Jun 29, 2026