{"schema":"vulnpedia.poc/1","cve":"CVE-2026-43494","kev":null,"epss":{"score":0.00411,"percentile":0.35093},"cvss":{"version":"3.1","score":7.8,"severity":"HIGH","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},"test_commands":[{"tool":"poc.json","cmd":"curl -s https://vulnpedia.com/cve/CVE-2026-43494/poc.json","note":"Machine-readable PoC index for this CVE (for automation)."}],"generated":"2026-10-26T06:59:15.268Z","has_public_poc":true,"poc_sources":[{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/9d75b4f7f931","executable":false,"sourceId":"9d75b4f7f931","verification":"catalogued","source":"vulncheck-kev","modified":"2026-08-26T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"9d75b4f7f931","modified":"2026-08-26T00:00:00Z","url":"https://vulncheck.com/xdb/9d75b4f7f931"}],"repositoryUrl":"https://github.com/v12-security/pocs"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/ffc31ac51c2c","executable":false,"sourceId":"ffc31ac51c2c","verification":"catalogued","source":"vulncheck-kev","modified":"2026-08-26T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"ffc31ac51c2c","modified":"2026-08-26T00:00:00Z","url":"https://vulncheck.com/xdb/ffc31ac51c2c"}],"repositoryUrl":"https://github.com/Koshmare-Blossom/PinTheft-asm"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/ec8b513517e4","executable":false,"sourceId":"ec8b513517e4","verification":"catalogued","source":"vulncheck-kev","modified":"2026-08-26T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"ec8b513517e4","modified":"2026-08-26T00:00:00Z","url":"https://vulncheck.com/xdb/ec8b513517e4"}],"repositoryUrl":"https://github.com/letsr00t/CVE-2026-43494-PinTheft-PoC"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/a7112ff0906b","executable":false,"sourceId":"a7112ff0906b","verification":"catalogued","source":"vulncheck-kev","modified":"2026-08-26T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"a7112ff0906b","modified":"2026-08-26T00:00:00Z","url":"https://vulncheck.com/xdb/a7112ff0906b"}],"repositoryUrl":"https://github.com/Koshmare-Blossom/PinTheft-go"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/9fc3a3970963","executable":false,"sourceId":"9fc3a3970963","verification":"catalogued","source":"vulncheck-kev","modified":"2026-08-26T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"9fc3a3970963","modified":"2026-08-26T00:00:00Z","url":"https://vulncheck.com/xdb/9fc3a3970963"}],"repositoryUrl":"https://github.com/tanzz1337/CVE-2026-43494-PinTheft-PoC"}],"poc_candidates":[{"url":"https://github.com/suominen/pintheft","source":"poc-in-github","sourceId":"CVE-2026-43494","description":"Tracking PinTheft (CVE-2026-43494, CVE-2026-43502), the RDS zerocopy double-free privilege escalation","modified":"2026-10-06T11:37:11Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-43494","url":"https://github.com/suominen/pintheft"},{"source":"poc-in-github","sourceId":"CVE-2026-43494","modified":"2026-10-06T11:37:11Z","url":"https://github.com/suominen/pintheft"}],"tags":[]},{"url":"https://github.com/0xBlackash/CVE-2026-43494","source":"poc-in-github","sourceId":"CVE-2026-43494","description":"CVE-2026-43494","modified":"2026-05-30T00:32:31Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-43494","url":"https://github.com/0xBlackash/CVE-2026-43494"},{"source":"poc-in-github","sourceId":"CVE-2026-43494","modified":"2026-05-30T00:32:31Z","url":"https://github.com/0xBlackash/CVE-2026-43494"}],"tags":[]},{"url":"https://github.com/Kagantua/PinTheft-go","source":"poc-in-github","sourceId":"CVE-2026-43494","description":"A Go implementation of PinTheft (CVE-2026-43494)","modified":"2026-05-22T21:50:23Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-43494","url":"https://github.com/Kagantua/PinTheft-go"},{"source":"poc-in-github","sourceId":"CVE-2026-43494","modified":"2026-05-22T21:50:23Z","url":"https://github.com/Kagantua/PinTheft-go"}],"tags":[]},{"url":"https://github.com/jayhutajulu1/CVE-2026-43494-PinTheft-PoC","source":"poc-in-github","sourceId":"CVE-2026-43494","description":"Proof-of-concept for CVE-2026-43494 (PinTheft): Linux LPE via RDS zerocopy refcount bug + io_uring fixed buffers → SUID page-cache overwrite. Authorized research only.","modified":"2026-07-16T08:49:34Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-43494","url":"https://github.com/jayhutajulu1/CVE-2026-43494-PinTheft-PoC"},{"source":"poc-in-github","sourceId":"CVE-2026-43494","modified":"2026-07-16T08:49:34Z","url":"https://github.com/jayhutajulu1/CVE-2026-43494-PinTheft-PoC"}],"tags":[]},{"url":"https://github.com/tanzz1337/CVE-2026-43494-PinTheft-PoC","source":"poc-in-github","sourceId":"CVE-2026-43494","description":"Proof-of-concept for CVE-2026-43494 (PinTheft): Linux LPE via RDS zerocopy refcount bug + io_uring fixed buffers → SUID page-cache overwrite. Authorized research only.","modified":"2026-06-03T10:14:04Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-43494","url":"https://github.com/tanzz1337/CVE-2026-43494-PinTheft-PoC"},{"source":"poc-in-github","sourceId":"CVE-2026-43494","modified":"2026-06-03T10:14:04Z","url":"https://github.com/tanzz1337/CVE-2026-43494-PinTheft-PoC"}],"tags":[]},{"url":"https://github.com/Koshmare-Blossom/PinTheft-asm","source":"poc-in-github","sourceId":"CVE-2026-43494","description":"A x86_64 ASM implementation of PinTheft (CVE-2026-43494)","modified":"2026-05-28T17:30:42Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-43494","url":"https://github.com/Koshmare-Blossom/PinTheft-asm"},{"source":"poc-in-github","sourceId":"CVE-2026-43494","modified":"2026-05-28T17:30:42Z","url":"https://github.com/Koshmare-Blossom/PinTheft-asm"}],"tags":[]},{"url":"https://github.com/letsr00t/CVE-2026-43494-PinTheft-PoC","source":"poc-in-github","sourceId":"CVE-2026-43494","modified":"2026-07-25T05:40:40Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-43494","url":"https://github.com/letsr00t/CVE-2026-43494-PinTheft-PoC"},{"source":"poc-in-github","sourceId":"CVE-2026-43494","modified":"2026-07-25T05:40:40Z","url":"https://github.com/letsr00t/CVE-2026-43494-PinTheft-PoC"}],"tags":[]}],"detection_sources":[],"discovery_links":[{"kind":"github-search","url":"https://github.com/search?q=%22CVE-2026-43494%22&type=repositories","executable":false}]}