SSVC is CVSS backwards!

Last Notes

updated again placeholder: https://www.cisa.gov/news-events/alerts/2026/10/29/cisa-adds-two-known-exploited-vulnerabilities-catalog
#CISA #KEV

2026-10-29 13:31:49 UTC

On October 20 and 21, an attacker tried to exploit CVE-2026-97229 against Alpine Linux's GitLab instance.
We have found no evidence that it succeeded, but we cannot rule it out, so we treated the instance as compromised and rebuilt it from scratch. Our checks show that the aports repository, packages, and the October 21 releases were not tampered with.
https://alpinelinux.org/posts/GitLab-security-incident-CVE-2026-97229.html
#GitLab #CVE #eitw

2026-10-22 13:56:40 UTC

lol. lmao even.
https://www.phoronix.com/news/LKML-New-Trend-Vulnerabilities
#Linux #ZDI #CVE

2026-10-20 20:46:46 UTC

Get ready for PHP security updates tomorrow to address CVE-2026-109618 and CVE-2026-109619 (the leaked RCE CVEs with CVSSv4 9.2 scores)
https://www.php.net/archive/2026.php#2026-10-20-1
https://cert.europa.eu/publications/security-advisories/2026-018/
#PHP #CVE

2026-10-19 13:22:57 UTC

Plex2Shell chain exploited in the wild for cryptomining against Plex media servers: https://www.boredhackerblog.info/2026/10/plex-vulnerabilities-being-exploited-in.html
CVE-2026-96652 (5.3 med) Plex Media Server SSRF
CVE-2026-96654 (6.9 med) Plex Media Server URL injection
CVE-2026-96655 (5.3 med) Plex Media Server arbitrary-host SSRF
CVE-2026-96656 (8.6 high) Plex Media Server arbitrary file write
#threatintel #plex #IOC #eitw

2026-10-06 19:40:03 UTC

new SonicWall SMA1000 advisory. Check out CVE-2026-102255 (10.0 critical) Pre-authentication SSRF via unintended forward-proxy. No mention of exploitation, but it's not a good look that your Secure Mobile Access is not secure (including four known exploited vulnerabilities in the past 90 days)
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0017
#sonicwall #sma1000 #cve

2026-10-04 23:53:23 UTC

Our weekly Citrix NetScaler zero-day CVE-2026-88779. See you next Sunday I guess
https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697174&articleTitle=Citrix_NetScaler_ADC_and_Citrix_NetScaler_Gateway_Security_Bulletin_for_CVE_2026_88779
https://community.citrix.com/techzone-blogs/110_security-updates/understanding-and-addressing-cve-2026-88779-in-citrix-netscaler-adc-and-citrix-netscaler-gateway/
#citrix #netscaler #zeroday #eitw