Skip to content
OriginalSign in

CISACISA

Hitachi Energy APM Edge flaws let local users gain root access

Part of the CVE-2026-43284 story · since 8 May

Developinglatest 16 hours ago9 articles7 outlets
8 May · Microsoft first11 Aug12 Sep14 OctNowThis article8th of 9
  • Fri 8 May, 19:01 UTC. Microsoft, first report. Dirty Frag Linux flaw (CVE-2026-43284) lets users gain root.
  • Mon 11 May, 08:41 UTC. SecurityWeek, its first report on the story. Dirty Frag (CVE-2026-43284) lets Linux users gain root.
  • Mon 11 May, 15:10 UTC. Infosecurity, its first report on the story. Linux Kernel Dirty Frag Flaws Trigger Urgent Patch Rollout.
  • Mon 11 May, 16:20 UTC. Dark Reading, its first report on the story. Dirty Frag exploit released, putting Linux root at risk.
  • Mon 11 May, 23:01 UTC. Ars Technica, its first report on the story. Dirty Frag Linux kernel flaw lets users gain root, patches issued.
  • Wed 27 May, 02:11 UTC. SecurityOnline, its first report on the story. GitHub fixes SSRF bug CVE-2026-9312 and kernel flaws.
  • Wed 27 May, 10:31 UTC. SecurityOnline. Moxa Linux Flaw Lets Local Users Gain Root Access via Dirty Frag.
  • Thu 13 Aug, 17:51 UTC. CISA, its first report on the story. Hitachi Energy APM Edge flaws let local users gain root access. This article, 8th of 9.
  • Wed 11 Nov, 21:30 UTC. Microsoft. Microsoft warns attackers use GSocket relay tool to retain access to Linux servers.

The advisory highlights vulnerabilities in Hitachi Energy's APM Edge product, specifically related to two critical flaws: CVE-2026-43284 and CVE-2026-43500. Both vulnerabilities could allow local unprivileged users to escalate privileges to root, affecting the product's confidentiality, integrity, and availability. Affected versions include APM Edge versions 6.10 and earlier. The advisories recommend immediate mitigation actions such as disabling vulnerable kernel modules (esp4, esp6, and rxrpc).

The advisory emphasizes the importance of implementing security best practices to protect industrial control systems. The release date for this advisory is August 13, 2026.

How the story developed

All 9 articles
Developinglatest 16 hours ago9 articles7 outlets

9 articles from 7 outlets since 8 May. Picked up again on 11 Nov after 13 weeks quiet. This was the 8th report, 97 days after the first.

Now8 May13161922252812 AugFirst reportMicrosoft · 8 May, 19:01This article8th of 9 · day 97
  • Fri 8 May, 19:01 UTC. Microsoft, first report. Dirty Frag Linux flaw (CVE-2026-43284) lets users gain root.
  • Mon 11 May, 08:41 UTC. SecurityWeek, its first report on the story. Dirty Frag (CVE-2026-43284) lets Linux users gain root.
  • Mon 11 May, 15:10 UTC. Infosecurity, its first report on the story. Linux Kernel Dirty Frag Flaws Trigger Urgent Patch Rollout.
  • Mon 11 May, 16:20 UTC. Dark Reading, its first report on the story. Dirty Frag exploit released, putting Linux root at risk.
  • Mon 11 May, 23:01 UTC. Ars Technica, its first report on the story. Dirty Frag Linux kernel flaw lets users gain root, patches issued.
  • Wed 27 May, 02:11 UTC. SecurityOnline, its first report on the story. GitHub fixes SSRF bug CVE-2026-9312 and kernel flaws.
  • Wed 27 May, 10:31 UTC. SecurityOnline. Moxa Linux Flaw Lets Local Users Gain Root Access via Dirty Frag.
  • Thu 13 Aug, 17:51 UTC. CISA, its first report on the story. Hitachi Energy APM Edge flaws let local users gain root access. This article, 8th of 9.
  • Wed 11 Nov, 21:30 UTC. Microsoft. Microsoft warns attackers use GSocket relay tool to retain access to Linux servers.
  • CVE not in KEV
  • No CVE
  • Larger: an outlet’s first report
  • Square: official source
  • Coverage over time
  • Quiet time, folded
Show all 9 articles as a list
  1. Fri 8 MayDay 01
    1. Dirty Frag Linux flaw (CVE-2026-43284) lets users gain root19:01 · Microsoft · First report

  2. Quiet for 3 days

    Mon 11 MayDay 34
    1. Dirty Frag (CVE-2026-43284) lets Linux users gain root08:41 · SecurityWeek · Picked up again
    2. Linux Kernel Dirty Frag Flaws Trigger Urgent Patch Rollout15:10 · Infosecurity
    3. Dirty Frag exploit released, putting Linux root at risk16:20 · Dark Reading
    4. Dirty Frag Linux kernel flaw lets users gain root, patches issued23:01 · Ars Technica

  3. Quiet for 2 weeks

    Wed 27 MayDay 192
    1. GitHub fixes SSRF bug CVE-2026-9312 and kernel flaws02:11 · SecurityOnline · Picked up again
    2. Moxa Linux Flaw Lets Local Users Gain Root Access via Dirty Frag10:31 · SecurityOnline

  4. Quiet for 11 weeks

    Thu 13 AugDay 971
    1. Hitachi Energy APM Edge flaws let local users gain root access17:51 · CISA · official · CISA alert · Picked up again · This article, 8th of 9

  5. Quiet for 13 weeks

    Wed 11 NovDay 1871
    1. Microsoft warns attackers use GSocket relay tool to retain access to Linux servers21:30 · Microsoft · Picked up again

Sources

CyberSIXTSignal over noise
Updated AboutDevelopersSign in