В фокусе RVD: трендовые уязвимости июня

In June, R-Vision highlighted 4 high-impact “trending” vulnerabilities: CVE-2026-43500 and CVE-2026-43284 in Linux (Dirty Frag) enabling local root privilege escalation via page cache manipulation, and affecting common distributions such as Ubuntu, Debian, and RHEL. It also covered CVE-2026-0257 in Palo Alto Networks PAN-OS GlobalProtect, where an Authentication Override configuration flaw can allow attackers to forge VPN cookies and bypass authentication/MFA, with CVE-2026-0257 listed in CISA KEV. Finally, CVE-2026-44815 in Windows DHCP Client can be triggered remotely by a malicious DHCP response to achieve SYSTEM-level arbitrary code execution, making timely patching critical.