Medium severity · published Jul 16, 2026
CVE-2026-6424
Use-after-free vulnerability in ESET security products for Linux
6.7
CVSS
0.2%
EPSS
No
On KEV
Description
Use-after-free vulnerability in ESET Linux products potentially allowed an attacker to trigger kernel panic on the system
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 5% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EE
ESET Endpoint Antivirus for Linux · ESET, spol. s.r.o.
13.1 through 13.1.3.0; 13.0 through 13.0.3.0; 12.2 through 12.2.8.0; 12.1 through 12.1.1.0; 12.0 through 12.0.13.0 · source: vendor
ES
ESET Server Security for Linux · ESET, spol. s.r.o.
13.1 through 13.1.116.0; 13.0 through 13.0.34.0; 12.2 through 12.2.72.0; 12.1 through 12.1.406.0; 12.0 through 12.0.287.0 · source: vendor
Affected product
EE
ESET Endpoint Antivirus for Linux
ESET, spol. s.r.o.