Fake Kernel Threads Are Hiding Backdoors on Linux Servers and Appliances
Attackers keep disguising malware as Linux kernel worker processes, but careful checks will expose the disguise On September 5, 2026, Sansec, a security firm that investigates attacks on online stores, reported that attackers were exploiting a zero-day in Magento and Adobe Commerce to install a backdoor written in Rust. The vulnerability is tracked as CVE-2026-75650 […] The post Fake Kernel Threads Are Hiding Backdoors on Linux Servers and Appliances appeared first on Eclypsium .
- Vendor
- Adobe, Linux kernel
- Product
- Commerce / Magento, Linux kernel
- EPSS
- 0.039 (p90)
- Exposure class
- Web platform, Operating system
Why it ranks 25 (Notable)
- Product class: web platform, operating system
- Widely deployed vendor product (Adobe)
- Covered by 6 independent sources
- Threat research
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- Eclypsium (eclypsium.com)
- CVE-2026-75650 on this site · NVD · CVE.org · Vulnpedia
- CVE-2026-20079 on this site · NVD · CVE.org · Vulnpedia
Related coverage
Other items that share a CVE or were clustered with this one.