# Hetzner: CVE-2026-99999 (PwnEscape)

> Hetzner status incident “CVE-2026-99999 (PwnEscape)” on 2026-10-16: impact minor (vendor’s label), 1 update(s). Archived by Rewindex.

Canonical: https://rewindex.com/company/hetzner/incidents/dc591a73-758c-4b18-a4a2-7ed98e7c6428
Last updated: 2026-10-26T03:15:00Z

- Impact (vendor’s label): minor
- Status: investigating · edited after publishing
- Started: 2026-10-16 06:00 UTC · Resolved: not resolved · Duration: ongoing
- Updates: 1
- [Vendor status page: https://status.hetzner.com/incident/dc591a73-758c-4b18-a4a2-7ed98e7c6428](https://status.hetzner.com/incident/dc591a73-758c-4b18-a4a2-7ed98e7c6428)
- [Company: Hetzner](https://rewindex.com/company/hetzner.md)

## CVEs mentioned

- [CVE-2026-99999](https://rewindex.com/cve/CVE-2026-99999.md) ipv4: validate checksum\_start before completing checksum (CVSS 9.3 critical): names this CVE

_Only CVEs the incident text names by id, or that the notice says the vendor is not affected by. Not a statement of cause._

## Timeline of updates

- **investigating** 2026-10-19 11:06 UTC: Start: 2026-10-16T06:00:00+00:00 On Thursday, October 15, 2026, a security vulnerability in the Linux kernel was disclosed. Shortly after this disclosure, a temporary mitigation was developed; it detects the attack vector at the system level and, based on current knowledge, effectively neutralizes it. Further measures will be implemented over the coming hours and days.

## Rewindex changes for this incident

- 2026-10-22 08:23 UTC: [Incident silently edited: CVE-2026-99999 (PwnEscape)](https://rewindex.com/change/rc0d89543431a74.md)


---
Canonical: https://rewindex.com/company/hetzner/incidents/dc591a73-758c-4b18-a4a2-7ed98e7c6428 · Markdown: https://rewindex.com/company/hetzner/incidents/dc591a73-758c-4b18-a4a2-7ed98e7c6428.md · JSON: https://rewindex.com/api/v1/companies/hetzner/incidents/dc591a73-758c-4b18-a4a2-7ed98e7c6428 · Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) · Generated 2026-10-26T03:15:00.129Z