🧰 CVSS

The items that name it 150

• Max-Severity GitLab Vulnerability Exploited Against Alpine Linux
  articleas classification.technologies2026-10-30
• TeamViewer Flaw Could Let Malicious Hosts Take Over Support Technicians’ Machines
  articleas classification.technologies2026-10-30
• What are shell vulnerabilities? PHP2Shell, Node2Shell (HTTP2Shell), React2Shell and Log4Shell explained
  articleas tools2026-10-29

  Scoring standard; Log4Shell and React2Shell both rated 10.0.

• Threat Brief: Critical Vulnerabilities in PHP: CVE-2026-109618, CVE-2026-109619 (Updated October 29)
  advisoryas classification.technologies2026-10-29
• CVE-2026-98432: 9.8 CVE affecting all Ubuntu versions
  advisoryas classification.technologies2026-10-29
• Cisco SD-WAN Zero-Day Exploitation Tied to Volt Typhoon’s ‘Silent Train’ Network
  articleas classification.technologies2026-10-29
• lee1981 (@lee1981b) on X
  advisoryas classification.technologies2026-10-29
• Attackers Exploit Second Cisco Firewall VPN Zero-Day Since August
  articleas classification.technologies2026-10-29
• Node2Shell: Reproducing CVE-2026-111497 in the Node.js Brotli decoder
  writeupas classification.technologies2026-10-29
• CVE-2026-20362 | Cisco Finesse Server-Side Request Forgery Vulnerability
  advisoryas classification.technologies2026-10-28
• TLS Flaws Found in GoAhead Web Server Used in Hundreds of Millions of Devices
  articleas classification.technologies2026-10-28
• Long-Hidden Flaws Patched in EPICS Research Facility Control Software
  articleas classification.technologies2026-10-28
• lee1981 (@lee1981b) on X
  advisoryas classification.technologies2026-10-28
• Hackers Start Probing Fresh Oracle EBS Vulnerability
  articleas classification.technologies2026-10-28
• Dark Web Informer (@DarkWebInformer) on X
  advisoryas tools2026-10-28

  Scoring standard used to rate the severity of the five vulnerabilities

• The Impact of AI on CVEs: Industry Challenges
  articleas classification.technologies2026-10-27
• lee1981 (@lee1981b) on X
  advisoryas classification.technologies2026-10-27
• Maritime Coalition Launches Free Vulnerability Database for Ship and Port Systems
  articleas classification.technologies2026-10-27
• EPICS Base
  advisoryas classification.technologies2026-10-26
• Masoud (@dev3mike) on X
  threadas classification.technologies2026-10-26
• dbugs (@ptdbugs) on X
  advisoryas classification.technologies2026-10-26
• Brotli vulnerability affects curl and Git
  advisoryas classification.technologies2026-10-23
• Attackers Exploit Third VeloCloud Orchestrator Zero-Day in Four Months
  articleas classification.technologies2026-10-23
• lee1981 (@lee1981b) on X
  advisoryas classification.technologies2026-10-23
• CVE-2026-76268 | Splunk Enterprise Patroni REST API Missing Authentication Vulnerability
  advisoryas classification.technologies2026-10-22
• Dark Web Intelligence (@DailyDarkWeb) on X
  advisoryas classification.technologies2026-10-22
• Signal Vulnerability Lets Malicious Callers Block Hang-Ups
  articleas classification.technologies2026-10-22
• Several Linux kernel vulnerabilities accidentally posted to public mailing list
  articleas classification.technologies2026-10-22
• lee1981 (@lee1981b) on X
  advisoryas classification.technologies2026-10-22
• Nagli (@galnagli) on X
  threadas classification.technologies2026-10-22
• Oracle Security Alert Advisory – CVE-2026-91403 (eMudhra cert revocation)
  advisoryas classification.technologies2026-10-21
• Today's PHP Security Release, and How We're Strengthening PHP Security
  articleas classification.technologies2026-10-21
• PHP Panic: Two Critical Bugs Put 70% of the Internet at Risk, and Everyone Is Freaking Out
  articleas classification.technologies2026-10-21
• Two critical RCEs in PHP core
  advisoryas classification.technologies2026-10-21
• PHP Remote Code Execution ("PHP2Shell" CVE-2026-109618 & CVE-2026-109619)
  advisoryas classification.technologies2026-10-21
• lee1981 (@lee1981b) on X
  articleas classification.technologies2026-10-21
• PHP2Shell: Mass Exploitation Looms for Leaked Critical PHP Flaws
  articleas classification.technologies2026-10-21
• Critical vulnerabilities in PHP (PHP2SHELL)
  advisoryas classification.technologies2026-10-21
• PHP2Shell - Critical vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619): detection, analysis, and remediation
  writeupas classification.technologies2026-10-21
• CVE-2026-101767 | Oracle E-Business Suite TCF SQL Injection and Remote Code Execution
  advisoryas classification.technologies2026-10-20
• Upcoming Critical PHP Security Release
  advisoryas classification.technologies2026-10-20
• Frequently Asked Questions About PHP Remote Code Execution (PHP2Shell CVE-2026-109618 & CVE-2026-109619)
  advisoryas classification.technologies2026-10-20
• Upcoming Critical PHP Security Release
  advisoryas classification.technologies2026-10-20
• lee1981 (@lee1981b) on X
  advisoryas classification.technologies2026-10-20
• lee1981 (@lee1981b) on X
  advisoryas classification.technologies2026-10-19
• Dark Web Intelligence (@DailyDarkWeb) on X
  threadas classification.technologies2026-10-18
• Your CVE is reachable. But is it exploitable?
  articleas classification.technologies2026-10-17
• Dark Web Intelligence (@DailyDarkWeb) on X
  threadas classification.technologies2026-10-17
• BeyondTrust Remote Support Arbitrary File Upload (CVE-2026-102764)
  advisoryas classification.technologies2026-10-16
• lee1981 (@lee1981b) on X
  threadas classification.technologies2026-10-16
• S2W_DailyThreat (@S2W_DailyThreat) on X
  advisoryas classification.technologies2026-10-16
• lee1981 (@lee1981b) on X
  advisoryas classification.technologies2026-10-15
• Cisco Warns of Exploited Secure Email Gateway Vulnerability
  articleas classification.technologies2026-10-15
• Microsoft Patches Record 1,413 Vulnerabilities, Including Exploited Windows Zero-Day
  articleas classification.technologies2026-10-14
• SAP Patches Critical NetWeaver, S/4HANA Vulnerabilities
  articleas classification.technologies2026-10-14
• Dark Web Intelligence (@DailyDarkWeb) on X
  advisoryas classification.technologies2026-10-13
• Visual Studio Copilot and SSMS Remote Code Execution (CVE-2026-103572)
  writeupas classification.technologies2026-10-13
• ♫Why♥Not♪ (@Python_s_) on X
  advisoryas classification.technologies2026-10-13
• Dark Web Informer (@DarkWebInformer) on X
  threadas classification.technologies2026-10-13
• Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)
  advisoryas classification.technologies2026-10-13
• CVE-2026-97229: Critical Unauthenticated Remote Code Execution in GitLab
  advisoryas classification.technologies2026-10-13
• lee1981 (@lee1981b) on X
  advisoryas classification.technologies2026-10-13
• GuardDuty Extended Threat Detection has added five new indicators to surface attack sequences
  articleas tools2026-10-12It is written here as CVSS (inherent severity score).

  inherent severity score

• 2024 Dependency Management Report | Endor Labs
  paperas tools2026-10-12It is written here as CVSS (measures severity, not risk).

  measures severity, not risk

• Bricksforge WordPress Plugin Vulnerability Exploited in the Wild
  articleas classification.technologies2026-10-12
• lee1981 (@lee1981b) on X
  advisoryas classification.technologies2026-10-12
• Critical SonicWall Vulnerability Exploited Days After Disclosure
  articleas classification.technologies2026-10-12
• ♫Why♥Not♪ (@Python_s_) on X
  advisoryas classification.technologies2026-10-11
• ThreatWire (@ThreatWire_) on X
  threadas classification.technologies2026-10-10
• lee1981 (@lee1981b) on X
  advisoryas classification.technologies2026-10-10
• Dark Web Informer (@DarkWebInformer) on X
  threadas classification.technologies2026-10-09
• lee1981 (@lee1981b) on X
  advisoryas classification.technologies2026-10-09
• Attackers Target Critical Atlassian Vulnerability Within Hours of PoC Publication
  articleas classification.technologies2026-10-08
• lee1981 (@lee1981b) on X
  writeupas classification.technologies2026-10-08
• Critical Atlassian Path Traversal Exposes Sensitive Files Across 8 Products
  advisoryas classification.technologies2026-10-07
• lee1981 (@lee1981b) on X
  advisoryas classification.technologies2026-10-07
• Atlassian Patches Critical Vulnerability Affecting 8 Products
  advisoryas classification.technologies2026-10-07
• You Won’t Hear About These, Even In Myths (Atlassian Jira, Confluence (and more) Pre-Auth Arbitrary File Read CVE-2026-21589)
  writeupas tools2026-10-06

  Scoring standard. The advisory vector showed no authentication or complexity prerequisites.

• Dark Web Intelligence (@DailyDarkWeb) on X
  advisoryas classification.technologies2026-10-06
• Ayyaz (@ayyazdev) on X
  threadas classification.technologies2026-10-05
• Citrix NetScaler Zero-Day Exploited in the Wild Crashes SAML Authentication Services
  advisoryas classification.technologies2026-10-05
• Cyber Security News (@The_Cyber_News) on X
  advisoryas classification.technologies2026-10-05
• Slade 🛡️ LLM Hacker (@llm_redteam) on X
  threadas classification.technologies2026-10-04
• Dark Web Intelligence (@DailyDarkWeb) on X
  threadas classification.technologies2026-10-03
• Dark Web Intelligence (@DailyDarkWeb) on X
  threadas classification.technologies2026-10-01
• Critical Cisco Catalyst SD-WAN Manager API authentication bypass exploited in the wild (CVE-2026-76504)
  advisoryas classification.technologies2026-09-30
• lee1981 (@lee1981b) on X
  threadas classification.technologies2026-09-30
• https://github.com/dmdhrumilmistry/security-harness
  repoas classification.technologies2026-09-29
• OperTraitors: How Kubernetes Operators Betray Your Security Posture
  articleas classification.technologies2026-09-29
• Check Point Research — 28th September Threat Intelligence Report
  articleas classification.technologies2026-09-28
• Zero-Day Exploitation of Citrix NetScaler ADC and Gateway: CVE-2026-88771 and CVE-2026-88772
  advisoryas classification.technologies2026-09-28
• watchTowr: CVE-2026-88771 Citrix NetScaler ADC/Gateway unauthenticated RCE
  advisoryas classification.technologies2026-09-27
• CVE-2026-94127: Critical Unauthenticated RCE in F5 BIG-IP APM
  advisoryas classification.technologies2026-09-23
• The Apple Security Update Review for September 2026
  articleas classification.technologies2026-09-16
• CVE-2026-76461: Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild
  advisoryas classification.technologies2026-09-15
• Breaking: GitLab Critical Path Traversal Flaw Exploited in the Wild — Patch Immediately
  advisoryas classification.technologies2026-09-14
• CVE-2026-85706: Critical GitLab Path Traversal Exploited in the Wild
  advisoryas classification.technologies2026-09-14
• How Should I Prioritize Software Vulnerabilities? | Blog | Endor Labs
  articleas tools2026-09-11It is written here as CVSS (Common Vulnerability Scoring System).

  Standardized severity scoring rubric for software vulnerabilities, maintained by FIRST, scores range 0-10 (Low 0.1-3.9, Medium 4.0-6.9, High 7.0-8.9, Critical 9.0-10.0)

• Combining EPSS and Reachability Analysis to Optimize Vulnerability Management | Blog | Endor Labs
  articleas tools2026-09-11It is written here as CVSS (Common Vulnerability Scoring System).

  Scoring system giving an arbitrary exploitability score for vulnerabilities; contrasted with EPSS's probabilistic approach; EPSS also pulls CVSS v3 base metrics (attack vector, privileges required) and impact measurements (confidentiality, integrity, availability) from NVD

• What is VEX and Why Should I Care? | Blog | Endor Labs
  articleas classification.technologies2026-09-11
• OWASP OSS Risk 1: Known Vulnerabilities | Blog | Endor Labs
  articleas classification.technologies2026-09-11
• FedRAMP Requirements for Vulnerability Management and Dependency Upgrades | Blog | Endor Labs
  articleas tools2026-09-11It is written here as CVSS (Common Vulnerability Scoring System).

  Original risk rating standard required by FedRAMP for vulnerability scanning outputs

• Why OVAL Feeds Outperform NVD for Linux Vulnerability Management | Blog | Endor Labs
  articleas classification.technologies2026-09-11
• CVE-2026-85706: GitLab CE/EE Repository Commits API Path Traversal
  advisoryas classification.technologies2026-09-11
• Rapid Reaction: GitLab Path Traversal Vulnerability (CVE-2026-85706)
  advisoryas classification.technologies2026-09-11
• The CVE spike across major software companies is a remediation problem
  articleas classification.technologies2026-09-10
• Microsoft Patch Tuesday for September 2026 — Snort rules and prominent vulnerabilities
  advisoryas classification.technologies2026-09-08
• Application Security Monitoring for AI-Assisted Development | Blog | Endor Labs
  articleas classification.technologies2026-09-02
• YesWeHack Claude Kit
  repoas classification.technologies2026-08-27
• BOD 26-04 Just Changed How Federal Agencies Prioritize Vulnerabilities.
  articleas tools2026-08-20It is written here as CVSS (Common Vulnerability Scoring System).

  Technical severity scoring system, described as insufficient on its own for determining patching urgency since it doesn't account for exposure or real-world exploitation

• Critical Elementor Pro File Upload Flaw Enables Unauthenticated Remote Code Execution on WordPress Sites
  advisoryas classification.technologies2026-08-20
• NIST NVD: V-etalon AI Enrichment Tool Announced After Audit Finds Backlog, Wasted Spend
  articleas tools2026-08-19It is written here as CVSS (Common Vulnerability Scoring System).

  Used to assign severity scores to CVEs; NIST stopped routinely producing an independent CVSS score when a CNA has already supplied one

• Visa Vulnerability Agentic Harness (VVAH)
  repoas classification.technologies2026-07-29
• wp2shell CVE-2026-63030: The WordPress RCE Putting 500+ Million Sites at Risk
  articleas classification.technologies2026-07-21
• AI Security Briefing
  advisoryas classification.technologies2026-07-18
• AI-Assisted Vulnerability Management
  articleas classification.technologies2026-07-18
• Endor Labs’ AI SAST Finds Zero Day Memory-Amplification DoS in Anthropic’s buffa library | Blog | Endor Labs
  writeupas classification.technologies2026-07-06
• One Request to Own Every Repo: How We Hijacked GitLab Through Its MCP Server - Pluto Security
  writeupas classification.technologies2026-07-06
• AI Security Briefing
  advisoryas classification.technologies2026-07-05
• JFrog: Where CVE Severity Scores Go Wrong
  writeupas tools2026-07-01

  Common Vulnerability Scoring System used to assign severity scores to CVEs; page argues it should be treated as a starting point, not a final risk assessment.

• NVD in the AI Era: The Case for Multi-Source Vulnerability Intelligence
  articleas classification.technologies2026-06-25
• Vulnerability-Lookup
  advisoryas classification.technologies2026-06-18
• Full Fathom Five: The context of Anthropic’s Mythos-class public release
  articleas tools2026-06-13It is written here as CVSS (severity scoring; described as theater).

  severity scoring; described as theater

• Orca: CVE-2026-5027 Langflow Path Traversal RCE
  advisoryas classification.technologies2026-06-12
• Orca: Splunk Enterprise Critical CVEs
  advisoryas classification.technologies2026-06-12
• Socket: Federal Audit
  articleas tools2026-06-04It is written here as CVSS (Common Vulnerability Scoring System).

  Severity scoring standard used by NVD and CISA for vulnerability enrichment

• Tachi
  repoas classification.technologies2026-05-23
• offensive-claude
  repoas classification.technologies2026-05-22
• Orca Security: Critical Coder Signature Bypass Exposes Developer Keys and Tokens
  advisoryas classification.technologies2026-05-22
• Criminal Liabilities for Disclosure of IT Security Vulnerabilities
  videoas technologies2026-05-20
• CSA: VulnOps in the Age of AI
  articleas classification.technologies2026-05-13
• Critical Buffer Overflow Vulnerability in PAN-OS Exploited in-the-Wild | Wiz Blog
  advisoryas classification.technologies2026-05-06
• MCP TypeScript SDK Cross-Client Data Leak (CVE-2026-25536)
  advisoryas classification.technologies2026-02-04
• MCPJam Inspector RCE (CVE-2026-23744)
  advisoryas classification.technologies2026-02-01
• The Vulnerable MCP Project — MCP vulnerability database
  repoas classification.technologies
• GitLab patches critical 9.9 AI Gateway template-sandbox-escape RCE (CVE-2026-90970)
  advisoryas classification.technologies
• Critical FortiMail Zero-Day Flaw (CVE-2026-104286)
  advisoryas classification.technologies
• OpenAI Agents Linked to RubyGems Campaign That Gained RCE on RubyDoc Servers
  articleas classification.technologies
• Veeam, Terraform MCP, Django Patch Critical Flaws, Led by CVSS 10.0 Cross-Tenant Bug
  articleas classification.technologies
• Marimo Notebook Flaw Could Run MCP Commands Before Cells Execute in Edit Mode
  articleas classification.technologies
• Critical Cursor Flaws Could Let Prompt Injection Escape Sandbox and Run Commands
  articleas classification.technologies
• ServiceNow Patches Critical AI Platform Flaw Allowing Unauthenticated User Impersonation
  advisoryas classification.technologies
• CVE-2026-65695: Office-Word-MCP-Server through 1
  advisoryas classification.technologies
• "Allowed HTTP Request Domains" Restriction Bypass via AI Agents MCP Connector
  advisoryas classification.technologies
• Google Service Account Private Key Exposed in JWT Header
  advisoryas classification.technologies
• CVE-2026-21852 - GitHub Advisory Database
  advisoryas classification.technologies
• Cisco Warns of New Zero-Day ISE Auth Bypass (CVSS 10.0) Exploited in Active Attacks
  advisoryas classification.technologies
• cyanheads/osv-advisory-mcp-server
  repoas classification.technologies
• CVE-2026-12773
  advisoryas classification.technologies
• Grafana MCP server-side request forgery via X-Grafana-URL header (grafana_api_request) | Grafana Labs
  advisoryas classification.technologies