11th Aug 2026
Infrastructure fully patched against Zapscape, SCTPhantom and TONTOU vulnerabilities
In early August 2026, five security advisories were published affecting the Proxmox platform and the Linux kernel:
Zapscape (CVE-2026-64561, PSA-2026-00036-1), a use-after-free in the shadow MMU emulation code of KVM on x86_64. Under the right nested virtualization conditions, a privileged attacker inside a guest can corrupt host kernel memory, ...
26th Jul 2026
Infrastructure fully patched against GhostLock and IPv6 fragmentation kernel vulnerabilities
Two further serious Linux kernel vulnerabilities were publicly disclosed in early July 2026: GhostLock (CVE-2026-43499), a use-after-free in the kernel futex priority-inheritance code that lets any unprivileged local user gain root and escape containers, disclosed with a working proof of concept as part of the IonStack research series, and ...
10th Jul 2026
Infrastructure fully patched against Januscape and Bad Epoll kernel vulnerabilities
On 9 July 2026, two high-severity Linux kernel vulnerabilities were publicly disclosed: Januscape (CVE-2026-53359), a KVM guest-to-host escape affecting both Intel and AMD systems, and Bad Epoll (CVE-2026-46242), a local privilege escalation with a public proof-of-concept exploit.
We treated both with the highest priority. Our entire ...
25th May 2026
Retirement of Managed Nextcloud Service
MMITech will be retiring its managed Nextcloud service on 01.10.2026. After this date, the platform will be taken offline and stored data will be permanently removed.
Why we are doing this
Hardware and energy prices have risen sharply over the past two years, driven by AI demand, and software licensing terms continue to shift. Refreshing our ...