Multiple critical cybersecurity vulnerabilities identified across major tech platforms

A series of high-severity cybersecurity vulnerabilities have been identified across several major technology providers, with many receiving CVSS scores of 9.8 or higher.

In the Linux ecosystem, a critical vulnerability (CVE-2026-98432) in the TCP stack was demonstrated by Anthropic’s Claude AI, which successfully developed a working exploit. The flaw involves a use-after-free race condition that could allow remote attackers to execute commands with root privileges.

Hardware and infrastructure providers are also affected. Juniper Networks reported a critical flaw in its Session Smart Router (CVE-2026-103409) that could grant administrator rights during the device onboarding process. Similarly, a vulnerability in Baseboard Management Controllers (CVE-2026-18450) allows attackers to execute arbitrary commands via IPMI.

In the enterprise and AI sectors, NVIDIA’s NeMo Agent Toolkit faces a maximum CVSS score of 10.0 due to a lack of authentication that could lead to remote code execution. Additionally, Dell’s PowerProtect Data Domain and Management Center are impacted by seven severe to critical vulnerabilities, posing a significant risk to backup and data recovery infrastructures.