Vulnerability · Published Jul 16, 2026 · Assigned by ESET
CVE-2026-6424Use-after-free vulnerability in ESET security products for Linux
Medium 6.7
In plain English
A medium-severity use-after-free in ESET Endpoint Antivirus for Linux from ESET, spol. s.r.o.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 5% of all known vulnerabilities).
Severity (CVSS 4.0)6.7Medium
Exploit odds (30 days)0.2%top 94.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Use-after-free vulnerability in ESET Linux products potentially allowed an attacker to trigger kernel panic on the system
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| ESET, spol. s.r.o. | ESET Endpoint Antivirus for Linux | 13.1 – through 13.1.3.013.0 – through 13.0.3.012.2 – through 12.2.8.012.1 – through 12.1.1.012.0 – through 12.0.13.0 |
| ESET, spol. s.r.o. | ESET Server Security for Linux | 13.1 – through 13.1.116.013.0 – through 13.0.34.012.2 – through 12.2.72.012.1 – through 12.1.406.012.0 – through 12.0.287.0 |
Weakness: CWE-416 · Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N