# Q2 2026 Vulnerability and Exploit Landscape: Exploited AI-platform flaws (OpenClaw CVE-2026-25253, Dify CVE-2026-41948, Open WebUI CVE-2026-45386), Exchange CVE-2026-45501, and Linux kernel page-cache LPE exploit wave (Copy Fail, Dirty Frag)

> Kaspersky Securelist's Q2 2026 report describes exploitation and public exploits across AI tooling (OpenClaw, Dify, Open WebUI, Langflow), Microsoft Exchange, Windows Defender/BitLocker zero-days released by 'Nightmare Eclipse', and a family of Linux kernel page-cache privilege-escalation flaws (Copy Fail, Dirty Frag, Fragnesia, DirtyDecrypt, PinTheft, pedit COW). Legacy Office and WinRAR CVEs remain the dominant Windows exploit vectors.

- **Published:** 2026-10-20T04:04:25Z
- **Last reviewed:** 2026-10-20T04:04:25Z
- **Canonical:** https://intel.threadlinqs.com/threat/TL-2026-3924
- **ID:** TL-2026-3924
- **Severity:** HIGH
- **Category:** VULNERABILITY
- **Status:** ACTIVE
- **Detections:** 9 · **IOCs:** 16 (full data via the Threadlinqs MCP server — Purple tier)
- **CVEs:** CVE-2026-25253, CVE-2026-41948, CVE-2026-45386, CVE-2026-45501, CVE-2026-31431, CVE-2026-43284, CVE-2026-43500, CVE-2026-46300, CVE-2026-31635, CVE-2026-43494, CVE-2026-46331, CVE-2026-33825, CVE-2026-35273, CVE-2018-0802, CVE-2017-11882, CVE-2017-0199, CVE-2023-38831, CVE-2025-6218, CVE-2025-8088

## Description

Securelist's Q2 2026 vulnerability report (published 2026-08-26) notes unprecedented CVE volume driven by AI-assisted discovery, a sharp rise in critical (CVSS > 9.0) flaws, and a growing practice of publishing working exploits before a CVE is assigned.

AI platforms: OpenClaw (formerly Clawdbot/Moltbot) CVE-2026-25253 (CVSS 8.8, fixed in 2026.1.29 on 2026-01-30) lets the Control UI trust a gatewayUrl query parameter and auto-open a WebSocket that sends the stored gateway token to an attacker-controlled server; with the token an attacker can change sandbox/tool policy, disable confirmation prompts and run commands on the host (one-click RCE), even when the gateway listens on loopback only. Dify CVE-2026-41948 (CVSS 3.1 9.4, versions <= 1.14.1) is a path traversal in BasePluginClient._prepare_request that escapes the tenant path to the Plugin Daemon internal API using '..' or encoded variants; Dify Cloud allows free self-registration so only a victim tenant UUID is needed. Open WebUI CVE-2026-45386 (CVSS 4.3, fixed in 0.9.5) lets read-only users pin/unpin channel messages because only read permission is checked. Securelist reports OpenClaw with 200+ CVEs in Q2 2026 alone and records the first documented APT exploitation of an AI technology (Langflow, attributed in the report to Mirage Kitten). CVE-2026-45501 is a Microsoft Exchange XSS/spoofing flaw (CVSS 6.1) affecting Exchange 2016 CU23, 2019 CU14/CU15 and Subscription Edition.

Linux: the 'Dirty Frag' family abuses page-cache write primitives so an unprivileged user can modify the in-memory copy of a privileged file without changing it on disk. Copy Fail (CVE-2026-31431, crypto subsystem, CVSS 7.8, present since 2017) was disclosed 2026-04-29 and added to CISA KEV on 2026-05-01. Dirty Frag (CVE-2026-43284 xfrm-ESP and CVE-2026-43500 RxRPC) was disclosed 2026-05-08 and needs no user-namespace creation, relying on add_key("rxrpc"), socket(AF_RXRPC) and splice(). Related flaws are Fragnesia (CVE-2026-46300), DirtyDecrypt (CVE-2026-31635), PinTheft (CVE-2026-43494) and pedit COW (CVE-2026-46331, tc-pedit). Because the malicious cache state exists only in RAM, disk-hash integrity checks can miss it. Mitigation is patching or disabling the rxrpc/ESP modules where feasible.

Windows: researcher 'Nightmare Eclipse' published working exploits before CVE assignment: BlueHammer (Defender TOCTOU LPE, later CVE-2026-33825), RedSun (Defender logic flaw), UnDefend (Defender update-blocking DoS), YellowKey (BitLocker bypass via WinRE, physical access), GreenPlasma (CTF loader object injection, partial LPE) and RoguePlanet (Defender TOCTOU enabling wermgr.exe overwrite). Huntress reported in-the-wild use from 2026-04-10 with intrusion activity linked to Russian-geolocated infrastructure. Legacy Equation Editor (CVE-2018-0802, CVE-2017-11882), CVE-2017-0199 and WinRAR flaws (CVE-2023-38831, CVE-2025-6218, CVE-2025-8088) remain the main Windows exploit encounters, although Windows exploit encounters hit an 18-month low. Securelist also lists common APT C2 frameworks (Sliver, Havoc, AdaptixC2, Metasploit) and an observed exploit chain from PeopleSoft CVE-2026-35273 to ActiveMQ CVE-2023-46604 to BeyondTrust CVE-2024-12356/CVE-2026-1731 to WinRAR-based privilege escalation.

No network IOCs (IPs/domains/hashes) are published in the source, so BeaconBeagle correlation was not applicable. CVSS is not stated in the Securelist report; cvss_score is null because this is an aggregate of many CVEs.

## MITRE ATT&CK

- T1190 Exploit Public-Facing Application
- T1203 Exploitation for Client Execution
- T1204.002 User Execution: Malicious File
- T1685 Disable or Modify Tools
- T1553.005 Subvert Trust Controls: Mark-of-the-Web Bypass
- T1528 Steal Application Access Token
- T1071.001 Application Layer Protocol: Web Protocols

## Sources

- [Exploits and vulnerabilities in Q2 2026 (Securelist)](https://securelist.com/vulnerabilities-and-exploits-in-q2-2026/121091/)
- [OpenClaw bug enables one-click remote code execution (The Hacker News)](https://thehackernews.com/2026/02/openclaw-bug-enables-one-click-remote.html)
- [OpenClaw auth token theft leading to RCE CVE-2026-25253 (SonicWall)](https://www.sonicwall.com/blog/openclaw-auth-token-theft-leading-to-rce-cve-2026-25253)
- [Copy Fail (CVE-2026-31431) FAQ (Tenable)](https://tenable.com/blog/copy-fail-cve-2026-31431-frequently-asked-questions-about-linux-kernel-privilege-escalation)
- [CVE-2026-43500 and CVE-2026-43284: Dirty Frag analysis (SOC Prime)](https://socprime.com/blog/cve-2026-43500-and-cve-2026-43284-analysis/)
- [Dirty Frag Linux kernel LPE (XM Cyber)](https://xmcyber.com/blog/linux-kernel-dirty-frag-local-privilege-escalation-lpe-cve-2026-43284-and-43500/)
- [Nightmare-Eclipse: six zero-days, six weeks and one big grudge (Barracuda)](https://blog.barracuda.com/2026/05/19/nightmare-eclipse-zero-days-grudge)
- [Researchers uncover YellowKey and GreenPlasma Windows zero-days (Security Affairs)](https://securityaffairs.com/192173/hacking/researchers-uncover-yellowkey-and-greenplasma-windows-zero-days.html)
- [NVD: CVE-2026-45501 Microsoft Exchange](https://nvd.nist.gov/vuln/detail/CVE-2026-45501)
- [NVD: CVE-2026-41948 Dify](https://nvd.nist.gov/vuln/detail/CVE-2026-41948)
- [OSV: CVE-2026-45386 Open WebUI](https://osv.dev/vulnerability/CVE-2026-45386)

## Full data

Detection queries (Splunk SPL / Microsoft KQL / Sigma) and IOC values require the Threadlinqs MCP server (Purple tier): https://intel.threadlinqs.com/mcp

Canonical: https://intel.threadlinqs.com/threat/TL-2026-3924