VMSA-2026-0006.1 was released in July, and CVE-2026-59310 was added to KEV on 2026-08-18T07:00:00Z.
This breakdown from Mobeta explains the details of both CVSSv3 9.8 vulnerabilities from the advisory and how they share a root cause. They demo an exploit (but do not release it). They do however provide Sigma rules for detection based on the exploit.
