---
id: 8858
title: "No Time to Pwn: CVE-2026-72018"
cve: CVE-2026-72018
source_domain: xbow.com
source_url: "https://xbow.com/blog/no-time-to-pwn-cve-2026-72018"
published_at: "2026-09-28T18:02:55Z"
tags: ["vulnerability-research", "lpe", "linux-kernel", "xbow", "ai-agent", "cve-2026-72018"]
phying_url: "https://phying.com/item/8858"
lang: en
---

# No Time to Pwn: CVE-2026-72018

## Summary

XBOW discovered and exploited CVE-2026-72018, an out-of-bounds write in the Linux kernel reachable by unprivileged users with CAP_NET_ADMIN. A seemingly weak 16-byte write primitive chains into local privilege escalation to root, with human judgment still needed at a few critical research moments.

## Intelligence Metadata

- **Sources:** xbow.com
- **CVE:** CVE-2026-72018
- **Published:** 2026-09-28T18:02:55Z
- **Original:** https://xbow.com/blog/no-time-to-pwn-cve-2026-72018
- **Phying News:** https://phying.com/item/8858