Exposure of File Descriptor to Unintended Control Sphere

Every one of the 7 is a mark on the map. Named now: 1 to 7, most at risk first.

1. runc container breakout through process.cwd trickery and leaked fdsCVE-2024-21626opencontainers · CVSS 8.6 · 19% likely

   Opencontainers

2. CMSimple 5.15 Remote Command Execution via Extensions ConfigurationCVE-2024-58280CMSimple · CVSS 8.6 · 1.0% likely

   Cmsimple

3. Pcp: pcp: privilege escalation to root via linux_sockets pmda vulnerabilityCVE-2026-16526Red Hat · CVSS 8.8 · 0.6% likely

   Red Hat

4. When mail_max_userip_connections is set (default 10) and reached, submission-login can crash with epoll() panic caused by file descriptor handling issues. If running in high-secur…CVE-2026-33263Open-Xchange GmbH · CVSS 4.3 · 0.6% likely

   Open-Xchange

5. Ksenia Security lares Home Automation 1.6 PIN Exposure VulnerabilityCVE-2025-15114Ksenia Security S.p.A. · CVSS 9.8 · 0.5% likely
6. Leaking file descriptors from the fork serverCVE-2025-3032Mozilla · CVSS 7.4 · 0.4% likely

   Mozilla

7. Pachno 1.0.6 Wiki TextParser XML External Entity InjectionCVE-2026-40042Pachno · CVSS 9.8 · 0.4% likely

   Pachno

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.