CVSS 8.0 HIGH
🔴 ACTIVELY EXPLOITED
Vulnerability
CVE-2026-46331: PEdit-CoW (CVE-2026-46331): another page-cache write in the DirtyPipe family
A working POC for PEdit-CoW (CVE-2026-46331) is public, by sgkdev.
🔬 Technical Analysis
A working POC for PEdit-CoW (CVE-2026-46331) is public, by sgkdev. POC and explanations Our write-ups on detecting this family by thinking outside the box: Detecting CopyFail and DirtyFrag Detecting nf_tabl
🎯 Known Indicators of Compromise
{"type":"url","value":"https://github.com/rafaeldtinoco/security/tree/main/exploits/peditcow">POC","confidence_score":0.82,"first_seen":"2026-06-26","source_count":1}
{"type":"url","value":"https://medium.com/@miggo-engineering/detecting-copyfail-dirtyfrag-by-thinking-outside-the-box-3cae0","confidence_score":0.82,"first_seen":"2026-06-26","source_count":1}
{"type":"url","value":"https://medium.com/@miggo-engineering/detecting-the-nftables-catchall-use-after-free-cve-2026-23111-","confidence_score":0.82,"first_seen":"2026-06-26","source_count":1}
{"type":"url","value":"https://medium.com/@miggo-engineering">blog","confidence_score":0.82,"first_seen":"2026-06-26","source_count":1}
{"type":"url","value":"https://github.com/sgkdev/packet_edit_meme">the","confidence_score":0.82,"first_seen":"2026-06-26","source_count":1}
{"type":"domain","value":"medium.com","confidence_score":0.75,"first_seen":"2026-06-26","source_count":1}
{"type":"domain","value":"thehackernews.com","confidence_score":0.75,"first_seen":"2026-06-26","source_count":1}
{"type":"domain","value":"www.reddit.com","confidence_score":0.75,"first_seen":"2026-06-26","source_count":1}
⚡ DETECTION RULES AVAILABLE
Get CVE-2026-46331 Detection Pack
Sigma rules, YARA signatures, IOC table, and SIEM queries for Splunk, Elastic, Sentinel, and Chronicle — deployable in 5 minutes.
✓ Sigma Rules
✓ YARA Pack
✓ IOC Table
✓ SIEM Queries
🛡️ Get Detection Pack →
🔌 Access via API →