July 23, 2026
- Qualys discloses local-root flaws in default Ubuntu. A
snap-confineLPE (CVE-2026-8933, CVSS 7.8) grants root on default Ubuntu Desktop 24.04/25.10/26.04 installs (The Hacker News), alongside "RefluXFS" (CVE-2026-64600), a Linux kernel XFS local privilege escalation to root (Qualys). · Vulnerabilities & Exploits