🧰 Orca Security Platform

The items that name it 12

• CVE-2026-101767: Critical Oracle EBS SQL Injection Actively Probed in the Wild
  advisory2026-10-28It is written here as Orca Security platform: identifies assets running vulnerable Oracle EBS versions and prioritizes remediation using internet accessibility, runtime reachability and asset criticality.
• Critical PHP “PHP2Shell” RCE Vulnerabilities Allow Unauthenticated Remote Code Execution (CVSS 9.2)
  advisory2026-10-21It is written here as Orca Security platform (identifies assets running vulnerable PHP versions, shows exposure by internet accessibility, runtime reachability and asset criticality, and prioritizes remediation).

  identifies assets running vulnerable PHP versions, shows exposure by internet accessibility, runtime reachability and asset criticality, and prioritizes remediation

• BOD 26-04 Just Changed How Federal Agencies Prioritize Vulnerabilities.
  article2026-08-20

  Correlates findings across exposure, KEV status, automation potential, and technical impact, mapping them onto CISA's five SSVC-based remediation tiers; adds a filter in the Vulnerability Management view to sort/filter findings by CISA tier, with a dashboard widget for environment-wide tier breakdow

• Orca Security: Zoom Zero-Click RCE Flaws Allow Any Meeting Attendee to Compromise All Participants
  advisory2026-08-12

  Identifies assets running vulnerable Zoom client versions, assesses exposure (internet accessibility, runtime reachability, asset criticality), and prioritizes remediation based on real risk rather than CVSS alone; highlights affected assets in the alert view

• Orca Security: Critical Ubuntu Pro Client Vulnerability Enables Root Code Execution Across Cloud Workloads
  advisory2026-07-20

  Identifies assets running vulnerable versions of ubuntu-advantage-tools, assesses exposure (internet accessibility, runtime reachability, asset criticality), highlights affected assets in the alert view, and helps prioritize remediation based on real risk rather than CVSS alone.

• Orca Security: FortiBleed
  writeup2026-07-03

  Identifies assets running vulnerable FortiClient EMS versions and internet-facing FortiGate deployments, assesses exposure (internet accessibility, runtime reachability, asset criticality), and prioritizes remediation via 'From the News' widget

• Orca Security: Langflow RCE (CVE-2026-33017) Actively Exploited
  advisory2026-07-02

  Identifies assets running vulnerable Langflow versions, assesses exposure (internet accessibility, runtime reachability, asset criticality), and prioritizes remediation based on real risk rather than CVSS alone; highlights affected assets in the newItem view.

• Orca Security: nginx Flaw in 1.45M Tengine Servers (CVE-2026-42945 + CVE-2026-9256)
  writeup2026-06-16

  Cloud security platform used to identify every Tengine instance across cloud environments, assess internet accessibility, runtime reachability, and asset criticality, and prioritize remediation; builds full software inventory from runtime block storage to detect vulnerable Tengine builds missed by t

• Orca Security: Critical Jupyter Enterprise Gateway Vulnerabilities
  advisory2026-06-11

  Agentless SideScanning to identify assets running vulnerable versions of Jupyter Enterprise Gateway, assess exposure (internet accessibility, runtime reachability, asset criticality), and prioritize remediation via the newItem view

• Orca Security: Critical Unauthenticated RCE in Kopia Backup via SSH ProxyCommand Injection
  advisory2026-05-26

  Identifies assets running vulnerable Kopia versions, assesses exposure (internet accessibility, runtime reachability, asset criticality), and prioritizes remediation via the 'newItem view'

• Orca Security: Critical Coder Signature Bypass Exposes Developer Keys and Tokens
  advisory2026-05-22

  identify assets running vulnerable versions of Coder, assess exposure (internet accessibility, runtime reachability, asset criticality), and prioritize remediation based on real risk rather than CVSS alone; highlights affected assets in the newItem view

• Orca Security: Critical Pre-Auth RCE in ChromaDB Threatens AI Infrastructure
  advisory2026-05-22

  identifies assets running vulnerable versions of ChromaDB, assesses exposure (internet accessibility, runtime reachability, asset criticality), and prioritizes remediation based on real risk