Will CVE-2026-MPTCP (Linux kernel MPTCP RCE) be actively exploited in the wild by Dec 31, 2026?

Anthropic researchers have developed a functional exploit for a critical Linux kernel vulnerability affecting Multipath TCP (MPTCP) listeners, allowing unauthenticated remote code execution as root. The public PoC significantly increases exploitation risk. Source: Bleeping Computer.

Resolution Criteria

Public reports from security vendors, CISA advisories, or reputable threat intelligence confirming documented active exploitation in production environments; or CVE being added to CISA KEV with exploitation evidence; or vendor confirmation of customer-reported exploitation attempts.