A few months ago, I reported several KVM vulnerabilities. More details may be disclosed soon through kvmCTF. 🚨 CVE-2026-98164 (CVSS: 7.1 HIGH) Trail of Bits (@trailofbits) has already publicly demonstrated that this vulnerability can be exploited to achieve a VM escape. https://blog.trailofbits.com/2026/08/26/vms-wont-contain-cyber-capable-agents/ This vulnerability can also independently trigger a guest-to-host kernel panic. Affected services should prioritize patching it. 🚨 CVE-2026-99082 (CVSS: 8.8 HIGH) This vulnerability allowed a full VM escape on older kernel versions used in kvmCTF. However, its impact is relatively minor on most modern kernels, so it is considered a lower priority. Nevertheless, patching is still recommended, as it could potentially be chained with other vulnerabilities, similar to the exploit chain demonstrated by Trail of Bits.