Linux+ labs
Every hands-on lab that maps to the CompTIA Linux+ (XK0-005) certification. This is the full lab package for that certification.
Certification: CompTIA › Linux+ XK0-005 clear · browse all certifications
30 labs
Beginner
AI Platform Patch Triage & Remediation: CVE-2025-3248
Triage a Critical, CISA-KEV-listed Langflow unauthenticated code-injection RCE (CVE-2025-3248) on /api/v1/validate/code: confirm the version, score it with CVSS, identify CWE-306, judge the pre-auth exposure, upgrade and verify, and recognize that the endpoint should require auth.
Beginner
Analytics Server Patch Triage & Remediation: CVE-2023-38646
Triage a Critical, CISA-KEV-listed Metabase unauthenticated H2 JDBC RCE (CVE-2023-38646): confirm the version, score it with CVSS, identify CWE-94, judge the pre-auth exposure, upgrade and verify.
Beginner
Appliance Patch Triage & Remediation: CVE-2026-10520
Triage a maximum-severity, CISA-KEV-listed Ivanti Sentry unauthenticated OS command injection (CVE-2026-10520) that gives root RCE: confirm the build, score it with CVSS, identify CWE-78, judge the pre-auth appliance exposure, upgrade and verify, and recognize that the management interface should be restricted.
Beginner
Application Server Patch Triage & Remediation: CVE-2025-24813
Triage a maximum-severity, CISA-KEV-listed Apache Tomcat partial-PUT path-equivalence finding (CVE-2025-24813) that can reach RCE: confirm the version and the enabling config, score it with CVSS, identify CWE-44 + CWE-502, judge exposure, upgrade and verify, and recognize the hardening that breaks the chain.
Beginner
Application Server Patch Triage & Remediation: CVE-2026-48282
Triage a maximum-severity, CISA-KEV-listed Adobe ColdFusion path-traversal-to-RCE finding (CVE-2026-48282): confirm the version, score it with CVSS, identify CWE-22, judge the pre-auth exposure, apply the APSB26-68 update and verify, and recognize the lockdown hardening.
Beginner
Automation Platform Patch Triage & Remediation: CVE-2025-68613
Triage a Critical, CISA-KEV-listed n8n workflow-expression RCE (CVE-2025-68613) where a low-trust editor escapes the expression sandbox to run code on the server: confirm the version, score it with CVSS and see why it is 9.9 despite needing a login (scope changed), identify CWE-913, judge the insider threat model, upgrade and verify.
Beginner
BI Platform Patch Triage & Remediation: CVE-2026-72898
Triage a maximum-severity, CISA-KEV-listed Metabase unauthenticated SQL injection (CVE-2026-72898) on /reset_password that yields admin: confirm the version, score it with CVSS, identify CWE-89, judge the pre-auth exposure, upgrade and verify, and recognize that exploited instances need credential rotation.
Beginner
CI/CD Patch Triage & Remediation: CVE-2024-23897
Triage a Critical, CISA-KEV-listed Jenkins CLI arbitrary-file-read finding (CVE-2024-23897): confirm the version, score it with CVSS and see why a file read is 9.8 (unauthenticated, reads controller secrets), identify CWE-27, judge the pre-auth exposure, upgrade and verify, and rotate exposed secrets.
Beginner
DBA Tool Patch Triage & Remediation: CVE-2024-2044
Triage a Critical pgAdmin 4 session path-traversal-to-pickle-RCE finding (CVE-2024-2044): confirm the version, score it with CVSS, identify CWE-31, judge the authenticated low-trust exposure, upgrade and verify, and recognize that exploited instances need credential rotation.
Beginner
Framework Patch Triage & Remediation: CVE-2025-29927
Triage a Critical Next.js middleware authorization bypass (CVE-2025-29927): confirm the version, score it with CVSS and see why it is 9.1 despite A:N, identify CWE-285, judge the unauthenticated exposure, upgrade and verify, and know the edge workaround (strip the x-middleware-subrequest header).
Beginner
Framework Patch Triage & Remediation: CVE-2025-55182
Triage a maximum-severity, CISA-KEV-listed React Server Components deserialization RCE (CVE-2025-55182): confirm the package version, score it with CVSS and see why it is 10.0, identify CWE-502, judge the pre-auth exposure, upgrade and verify.
Beginner
Geospatial Server Patch Triage & Remediation: CVE-2024-36401
Triage a Critical, CISA-KEV-listed GeoServer unauthenticated OGC expression RCE (CVE-2024-36401): confirm the version, score it with CVSS, identify CWE-94, judge the pre-auth exposure, upgrade and verify.
Beginner
Graph Database Patch Triage & Remediation: CVE-2024-27348
Triage a Critical, CISA-KEV-listed Apache HugeGraph-Server unauthenticated Gremlin RCE (CVE-2024-27348): confirm the version, score it with CVSS, identify CWE-77, judge the pre-auth exposure, upgrade and verify.
Beginner
Healthcare Integration Engine Patch Triage & Remediation: CVE-2023-43208
Triage a Critical, CISA-KEV-listed NextGen Healthcare Mirth Connect unauthenticated deserialization RCE (CVE-2023-43208): confirm the version, score it with CVSS, identify CWE-502, judge the pre-auth exposure, upgrade and verify.
Beginner
Kernel Patch Triage & Remediation: CVE-2026-31431
Triage a High-severity Linux kernel local-privilege-escalation finding (CVE-2026-31431) on a shared multi-user host: confirm the running kernel, score it with CVSS, judge local exposure, install the branch's fixed release, reboot, and verify the host is clean.
Beginner
Kernel Patch Triage & Remediation: CVE-2026-43284 & CVE-2026-43500
Triage two Linux kernel local-privilege-escalation findings (CVE-2026-43284 and CVE-2026-43500) in one running kernel on a shared host: confirm the kernel, score both with CVSS, judge exposure, then apply the single update that fixes both and verify.
Beginner
LMS Patch Triage & Remediation: CVE-2023-34960
Triage a Critical Chamilo LMS unauthenticated OS command injection (CVE-2023-34960): confirm the version, score it with CVSS, identify CWE-78, judge the pre-auth exposure, upgrade and verify.
Beginner
Privilege Escalation Patch Triage & Remediation: CVE-2025-32463
Triage a Critical, CISA-KEV-listed sudo --chroot local privilege escalation (CVE-2025-32463) that gives any local user root: confirm the version, score it with CVSS and see why a local bug still scores 9.3 (scope-changed full root), identify CWE-829, judge the shared-host exposure, upgrade and verify.
Beginner
Server Patch Triage & Remediation: CVE-2026-42167
Triage a High-severity ProFTPD SQL-injection finding (CVE-2026-42167) on an internet-facing FTP server: confirm the version, score it with CVSS, understand the conditions it needs, upgrade to the fixed release and verify.
Beginner
Web Application Patch Triage & Remediation: CVE-2025-31131
Triage a High-severity YesWiki path-traversal file-read finding (CVE-2025-31131): confirm the version, score it with CVSS and see why a read-only bug is still High (unauthenticated, scope-changed), identify CWE-22, judge exposure, upgrade and verify, and recognize that exposed secrets must be rotated.
Beginner
Web Server Patch Triage & Remediation: CVE-2026-42945
Triage a High-severity NGINX heap-overflow finding (CVE-2026-42945) on an internet-facing reverse proxy: confirm the version, score it with CVSS and see why AC:H keeps it below Critical, judge exposure, upgrade to the fixed release and verify.
Beginner
Webmail Patch Triage & Remediation: CVE-2025-49113
Triage a Critical, CISA-KEV-listed Roundcube Webmail PHP object-injection RCE (CVE-2025-49113) reachable by any mailbox user: confirm the version, score it with CVSS, identify CWE-502, judge the low-trust authenticated exposure, upgrade and verify.
Beginner
WordPress Plugin Patch Triage & Remediation: CVE-2026-1357
Triage a Critical WPvivid Backup & Migration arbitrary-file-upload finding (CVE-2026-1357) on an internet-facing WordPress site: confirm the plugin version, score it with CVSS and see why it is Critical, identify CWE-434, judge exposure, update to the fixed release and verify.
Intermediate
Detection Engineering & Incident Response: CVE-2025-32463
Respond to a sudo --chroot local-privilege-escalation compromise (CVE-2025-32463). Reconstruct the timeline from the sudo auth and activity logs, see how --chroot loaded an attacker nsswitch.conf as root, find the SUID-root backdoor persistence, engineer a detection rule for the chroot option, then contain, eradicate, upgrade, verify and report.
Intermediate
Detection Engineering & Incident Response: CVE-2026-31431
Respond to a local privilege-escalation compromise on a shared Linux host (CVE-2026-31431). Reconstruct the timeline from auth and audit logs, find the attacker's sudoers persistence, engineer and tune a behavioral detection rule, then contain, eradicate, patch, verify and report.
Intermediate
Detection Engineering & Incident Response: CVE-2026-43284 & CVE-2026-43500
Respond to a local privilege-escalation compromise on a host exposed to two related kernel bugs (CVE-2026-43284 and CVE-2026-43500). Reconstruct the timeline, find the attacker's persistence, engineer one detection rule covering both vulnerable subsystems, then contain, eradicate, patch both with one update, verify and report.
Expert
Root-Cause & Secure Configuration: CVE-2026-42945
Analyze CVE-2026-42945 at the source: understand the NGINX rewrite-module buffer-size miscalculation (CWE-131/122) and the upstream fix, reject a config change that only relocates the trigger, deploy a named-capture config, upgrade, add a WAF control, and verify with audit and vulnscan.
Expert
Root-Cause & Secure-Code Remediation: CVE-2025-32463
Fix CVE-2025-32463 at the source. Read the vulnerable sudo chroot setup, see how it loads nsswitch.conf from the user-supplied chroot dir while privileged (CWE-829), reject a world-writable check, load config from the trusted real root instead, retire the deprecated chroot feature in sudoers, and verify with audit and vulnscan.
Expert
Root-Cause Analysis & Kernel Hardening: CVE-2026-31431
Analyze CVE-2026-31431 at the source: understand the CWE-669 cross-sphere flaw in the kernel's AF_ALG AEAD interface and the out-of-place upstream fix, then patch and apply defense-in-depth hardening (module blacklist, restricted user namespaces) and verify the posture.
Expert
Root-Cause Analysis & Kernel Hardening: CVE-2026-43284 & CVE-2026-43500
Analyze two related Linux kernel CVEs (CVE-2026-43284 and CVE-2026-43500) at the source: recognize the shared root cause (in-place decryption over shared socket-buffer fragments) across IPsec/ESP and RxRPC, read both upstream fixes, then patch both with one update and apply defense-in-depth hardening for both subsystems, and verify.