{"schema":"vulnpedia.poc/1","cve":"CVE-2026-99999","generated":"2026-10-26T13:52:32.101Z","kev":null,"epss":{"score":0.00788,"percentile":0.55916},"cvss":{"version":"3.1","score":9.3,"severity":"CRITICAL","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H"},"has_public_poc":true,"poc_sources":[{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/d78be1b0f067","executable":false,"sourceId":"d78be1b0f067","verification":"catalogued","source":"vulncheck-kev","modified":"2026-10-19T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"d78be1b0f067","modified":"2026-10-19T00:00:00Z","url":"https://vulncheck.com/xdb/d78be1b0f067"}],"repositoryUrl":"https://github.com/PeronGH/CVE-2026-99999"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/319a7fb4465f","executable":false,"sourceId":"319a7fb4465f","verification":"catalogued","source":"vulncheck-kev","modified":"2026-10-19T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"319a7fb4465f","modified":"2026-10-19T00:00:00Z","url":"https://vulncheck.com/xdb/319a7fb4465f"}],"repositoryUrl":"https://github.com/gandli/CVE-2026-99999-pwnescape"}],"detection_sources":[],"discovery_links":[{"kind":"github-search","url":"https://github.com/search?q=%22CVE-2026-99999%22&type=repositories","executable":false}],"poc_candidates":[{"url":"https://github.com/MChorfa/csumguard","source":"poc-in-github","sourceId":"CVE-2026-99999","description":"Restricted eBPF TC ingress guard, CO-RE detector, verified loader, and C11 VMM launch supervisor for CVE-2026-99999","modified":"2026-10-20T17:48:45Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-99999","url":"https://github.com/MChorfa/csumguard"},{"source":"poc-in-github","sourceId":"CVE-2026-99999","modified":"2026-10-20T17:48:45Z","url":"https://github.com/MChorfa/csumguard"}],"tags":[]},{"url":"https://github.com/PeronGH/CVE-2026-99999","source":"poc-in-github","sourceId":"CVE-2026-99999","description":"PoC for CVE-2026-99999 (PwnEscape) on a prepared TAP.","modified":"2026-10-23T03:17:14Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-99999","url":"https://github.com/PeronGH/CVE-2026-99999"},{"source":"poc-in-github","sourceId":"CVE-2026-99999","modified":"2026-10-23T03:17:14Z","url":"https://github.com/PeronGH/CVE-2026-99999"}],"tags":[]},{"url":"https://github.com/Quaerendir/cve-2026-99999-audit","source":"poc-in-github","sourceId":"CVE-2026-99999","description":"cve-2026-99999-audit script (PwnEscape)","modified":"2026-10-18T21:51:08Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-99999","url":"https://github.com/Quaerendir/cve-2026-99999-audit"},{"source":"poc-in-github","sourceId":"CVE-2026-99999","modified":"2026-10-18T21:51:08Z","url":"https://github.com/Quaerendir/cve-2026-99999-audit"}],"tags":[]},{"url":"https://github.com/kingahmadr/CVE-2026-99999-kernel-check","source":"poc-in-github","sourceId":"CVE-2026-99999","modified":"2026-10-18T10:07:22Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-99999","url":"https://github.com/kingahmadr/CVE-2026-99999-kernel-check"},{"source":"poc-in-github","sourceId":"CVE-2026-99999","modified":"2026-10-18T10:07:22Z","url":"https://github.com/kingahmadr/CVE-2026-99999-kernel-check"}],"tags":[]},{"url":"https://github.com/nsrg-fmlorg/kpatch-alma-cve-2026-99999","source":"poc-in-github","sourceId":"CVE-2026-99999","description":"kpatch livepatch build for CVE-2026-99999 on AlmaLinux 8/9 GA kernels","modified":"2026-10-21T02:47:38Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-99999","url":"https://github.com/nsrg-fmlorg/kpatch-alma-cve-2026-99999"},{"source":"poc-in-github","sourceId":"CVE-2026-99999","modified":"2026-10-21T02:47:38Z","url":"https://github.com/nsrg-fmlorg/kpatch-alma-cve-2026-99999"}],"tags":[]},{"url":"https://github.com/01luyicheng/CVE-2026-99999","source":"poc-in-github","sourceId":"CVE-2026-99999","description":"CVE-2026-99999 PwnEscape PoC - Linux kernel IPv4 csum_start validation bug guest-to-host memory leak (CVSS 9.3)","modified":"2026-10-21T02:36:09Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-99999","url":"https://github.com/01luyicheng/CVE-2026-99999"},{"source":"poc-in-github","sourceId":"CVE-2026-99999","modified":"2026-10-21T02:36:09Z","url":"https://github.com/01luyicheng/CVE-2026-99999"}],"tags":[]},{"url":"https://github.com/gandli/CVE-2026-99999-pwnescape","source":"poc-in-github","sourceId":"CVE-2026-99999","description":"CVE-2026-99999 (PwnEscape) reproduction: IPv4 csum_start validation bug — IHL rewrite and 32-byte kernel heap disclosure","modified":"2026-10-26T07:36:44Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-99999","url":"https://github.com/gandli/CVE-2026-99999-pwnescape"},{"source":"poc-in-github","sourceId":"CVE-2026-99999","modified":"2026-10-26T07:36:44Z","url":"https://github.com/gandli/CVE-2026-99999-pwnescape"}],"tags":[]},{"url":"https://github.com/shizuku198411/CVE-2026-99999-KVM-checksum-metadata-non-destructive-PoC","source":"poc-in-github","sourceId":"CVE-2026-99999","modified":"2026-10-19T09:45:29Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-99999","url":"https://github.com/shizuku198411/CVE-2026-99999-KVM-checksum-metadata-non-destructive-PoC"},{"source":"poc-in-github","sourceId":"CVE-2026-99999","modified":"2026-10-19T09:45:29Z","url":"https://github.com/shizuku198411/CVE-2026-99999-KVM-checksum-metadata-non-destructive-PoC"}],"tags":[]},{"url":"https://github.com/nsrg-fmlorg/kpatch-rocky-cve-2026-99999","source":"poc-in-github","sourceId":"CVE-2026-99999","description":"kpatch livepatch build and load test for CVE-2026-99999 on Rocky Linux 8.10 (4.18.0-553.144.1.el8_10)","modified":"2026-10-22T01:30:10Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-99999","url":"https://github.com/nsrg-fmlorg/kpatch-rocky-cve-2026-99999"},{"source":"poc-in-github","sourceId":"CVE-2026-99999","modified":"2026-10-22T01:30:10Z","url":"https://github.com/nsrg-fmlorg/kpatch-rocky-cve-2026-99999"}],"tags":[]},{"url":"https://github.com/alvaroguzmancode/CVE-2026-99999","source":"poc-in-github","sourceId":"CVE-2026-99999","modified":"2026-10-19T15:53:21Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-99999","url":"https://github.com/alvaroguzmancode/CVE-2026-99999"},{"source":"poc-in-github","sourceId":"CVE-2026-99999","modified":"2026-10-19T15:53:21Z","url":"https://github.com/alvaroguzmancode/CVE-2026-99999"}],"tags":[]},{"url":"https://github.com/sqzer-x/cve-2026-99999-scanner","source":"poc-in-github","sourceId":"CVE-2026-99999","description":"Checks whether a Linux system is affected by CVE-2026-99999 (PwnEscape) and prints or applies the distribution-specific kernel fix","modified":"2026-10-21T00:07:20Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-99999","url":"https://github.com/sqzer-x/cve-2026-99999-scanner"},{"source":"poc-in-github","sourceId":"CVE-2026-99999","modified":"2026-10-21T00:07:20Z","url":"https://github.com/sqzer-x/cve-2026-99999-scanner"}],"tags":[]},{"url":"https://github.com/01luyicheng/CVE-2026-99999-analysis","source":"poc-in-github","sourceId":"CVE-2026-99999","description":"CVE-2026-99999 Educational Analysis — attack chain simulation of Linux kernel csum_start bug (CVSS 9.3). See also: CVE-2026-99999-exploit (Working PoC).","modified":"2026-10-20T09:33:59Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-99999","url":"https://github.com/01luyicheng/CVE-2026-99999-analysis"},{"source":"poc-in-github","sourceId":"CVE-2026-99999","modified":"2026-10-20T09:33:59Z","url":"https://github.com/01luyicheng/CVE-2026-99999-analysis"}],"tags":[]},{"url":"https://github.com/01luyicheng/CVE-2026-99999-exploit","source":"poc-in-github","sourceId":"CVE-2026-99999","description":"CVE-2026-99999 Working PoC — real VM escape for Linux kernel csum_start bug (CVSS 9.3). Guest-to-Host heap leak. See also: CVE-2026-99999-analysis (Educational).","modified":"2026-10-21T11:52:58Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-99999","url":"https://github.com/01luyicheng/CVE-2026-99999-exploit"},{"source":"poc-in-github","sourceId":"CVE-2026-99999","modified":"2026-10-21T11:52:58Z","url":"https://github.com/01luyicheng/CVE-2026-99999-exploit"}],"tags":[]},{"url":"https://github.com/unixreaper/CVE-2026-99999-Research","source":"poc-in-github","sourceId":"CVE-2026-99999","modified":"2026-10-25T06:27:44Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-99999","url":"https://github.com/unixreaper/CVE-2026-99999-Research"},{"source":"poc-in-github","sourceId":"CVE-2026-99999","modified":"2026-10-25T06:27:44Z","url":"https://github.com/unixreaper/CVE-2026-99999-Research"}],"tags":[]}],"test_commands":[{"tool":"poc.json","cmd":"curl -s https://vulnpedia.com/cve/CVE-2026-99999/poc.json","note":"Machine-readable PoC index for this CVE (for automation)."}]}