CVE-2026-74580 — Linux: a Tencent AI reportedly found a flaw that gives full control of the machine

Not listed so far in CISA’s catalog of actively exploited vulnerabilities.

Our analyses

Linux: a Tencent AI reportedly found a flaw that gives full control of the machine

The flaw, dubbed Vghost, has been patched since August, but a machine that was updated without being rebooted remains vulnerable. The two attack scenarios, and the setting to change while you wait to reboot.

Oct 14, 20262 min read

What to do

Check whether your estate includes the affected product, including internet-facing devices.
Apply the vendor’s patch or mitigations (references below).
Watch for exploitation: this entry is updated if the vulnerability enters the exploited catalog or is the subject of a CERT-FR alert.

References

NVD entry (NIST)