Linux’s CVE-2026-53266 Was Exploited in 85 Days — Faster Than Its 551-Day Median (September 2026)

Our automated tracking framework flagged that CISA added CVE-2026-53266 (Linux Kernel) to the Known Exploited Vulnerabilities (KEV) catalog on September 20, 2026. A KEV listing is CISA’s official confirmation that the flaw is being exploited in the wild — U.S. federal agencies must patch it by a fixed deadline. Here is what our data shows. […]