Alibaba Security Advisories · May 2026 — Alibaba Security Advisories
3 advisories 3 CVEs 2 EXPLOITED

Alibaba Cloud Linux 2 advisories and cross-source Alibaba/Aliyun CVEs for 2026-05. Mirrored into Vulnetix VDB.

Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity). 2 are already weaponised in the wild — see the Exploited section.

What would you fix first?

The advisories below are ordered by the Vulnetix risk prioritization strategy: exploitation evidence first, scores second. On the interactive page you can switch to three other lenses.

Advisories

ALINUX2-SA-2026:0001

ALINUX 2ExploitedCISA KEV listedHIGH2026-05-03

ALINUX2-SA-2026:0001: cloud-kernel bugfix, enhancement and security update (Important)

CVEs:CVE-2026-31431

Affected products

ProductStatusVendorPackageEcosystem
kernel affected Alibaba Cloud kernel —
Upstream advisory

ALINUX2-SA-2026:0002

ALINUX 2ExploitedVulnCheck KEV listedHIGH2026-05-09

ALINUX2-SA-2026:0002: cloud-kernel bugfix, enhancement and security update (Important)

CVEs:CVE-2026-43284

Affected products

ProductStatusVendorPackageEcosystem
kernel affected Alibaba Cloud kernel —
Upstream advisory

ALINUX2-SA-2026:0003

ALINUX 2Active exploitation (sightings)HIGH2026-05-26

ALINUX2-SA-2026:0003: cloud-kernel bugfix, enhancement and security update (Important)

CVEs:CVE-2026-46333

Affected products

ProductStatusVendorPackageEcosystem
kernel affected Alibaba Cloud kernel —
Upstream advisory

Need live exploit intelligence?

Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.