CVE•Published 2026-07-19•Modified 2026-07-30•1 article on news•4 live references•NVD data
CVE-2026-64000
Vulnerability data via NVD (ingested)
CVSS v3.1
9.8
CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS percentile
39
Exploit Prediction Scoring System · top 61% of all CVEs
Description
In the Linux kernel, the following vulnerability has been resolved: net: hsr: fix potential OOB access in supervision frame handling Ensure the entire TLV header is linearized before access by adding sizeof(struct hsr_sup_tlv) to the pskb_may_pull() calls. Without this, a truncated frame could cause an out-of-bounds access.
Timeline
Published 2026-07-19
Modified 2026-07-30
External references
Search for exposed instances
Shodan + Censys queries derived from NVD's CPE data. The vuln tag catches assets Shodan has explicitly linked to this CVE; the product / banner fingerprints find exposed instances even when the vuln tag was never applied (which is common).
More intel sources (5)
Shodan report
vuln:CVE-2026-64000Country / ASN / product breakdown for the vuln query.
Censys
vulnerabilities.cve_id: CVE-2026-64000Censys host search filtered to this CVE id.
grep.app
CVE-2026-64000Public source-code mentions — fast PoC discovery.
GitHub code
CVE-2026-64000GitHub code search for direct mentions.
Google dork
"CVE-2026-64000" exploit -site:nvd.nist.govWrite-ups and news, NVD excluded.
Known PoCs on GitHub (8)
CVE-2026-640008 repos
IcaliaLabs/sepomexRuby
A REST API for the SEPOMEX database
elbelicojackson-hue/haking-code-TypeScript
sonyarianto/crabsoupRust
Streaming engine for audio, video, live DJ, and automation. Scriptable using Lua, gapless playlists, crossfades, live DJ ducking, with support for Icecast, HLS, RTMP, MP4, and more…
codelassey/tpot-soc-automationYARA
Built a Full-Cycle Security Operations Pipeline around a T-Pot honeypot deployment on AWS, with tailscale-enabled local Splunk SIEM log ingestion, AI-powered log analysis and intel…
l11223/antigravity-toolsRust
🚀 AI 编辑器多账号代理工具 — 支持 Cursor / Claude Code / Codex / Gemini CLI / OpenCode / Droid，智能路由 · 自动轮换 · 配额保护 · 一键同步
Hiprax/h-vaultTypeScript
Zero-knowledge, self-hostable password manager, secret store and encrypted notebook. AES-256-GCM in the browser — the server only ever sees ciphertext.
iamdarshg/better-aiPython
several ai optimisations that i found quite interesting being applied to the smallest of small models that can produce coherent text.
dev-longshun/Antigravity-rs-commercialRust