#cvss10 — Public Fediverse posts

JetBrains patched 18 vulnerabilities across its IDEs. CVE-2026-64812 and CVE-2026-64813 reach CVSS 10, and most of the rest allow arbitrary code execution.

#JetBrains #IntelliJIDEA #TeamCity #CVSS10 #DevSecOps

https://securityonline.info/jetbrains-vulnerabilities-cvss-10/?utm_source=mastodon&utm_medium=jetpack_social

🚨 CRITICAL: CVE-2026-42901 in Microsoft Entra (CWE-346) enables remote privilege escalation via origin validation error. Immediate patching is essential — official fix available: https://radar.offseq.com/threat/cve-2026-42901-cwe-346-origin-validation-error-in--0744f928 #OffSeq #Microsoft #Vuln #CVSS10 #Security

Cisco Catalyst SD-WAN CVSS 10.0 zero-day (CVE-2026-20127) has been actively exploited, with attackers gaining admin access.

Full technical breakdown: https://forum.hashpwn.net/post/10802

#cisco #sdwan #cvss10 #cve202620127 #exploit #cybersecurity #infosec #news #hashpwn

Cisco Catalyst SD-WAN CVSS 10.0 zero-day (CVE-2026-20127) has been actively exploited, with attackers gaining admin access.

Full technical breakdown: https://forum.hashpwn.net/post/10802

#cisco #sdwan #cvss10 #cve202620127 #exploit #cybersecurity #infosec #news #hashpwn

🚨 ALERT! 🚨 #NextJS finally achieved what we all thought impossible: a CVSS 10.0 vulnerability! 🎯 Bravo, they've hit the bullseye of FAIL! 🙈 It's always heartwarming when devs leave the #backdoor open for #hackers to make themselves at home. 🏠🔓
https://nextjs.org/blog/CVE-2025-66478 #Vulnerability #CVSS10 #SecurityFail #HackerNews #ngated

🚨 ALERT! 🚨 #NextJS finally achieved what we all thought impossible: a CVSS 10.0 vulnerability! 🎯 Bravo, they've hit the bullseye of FAIL! 🙈 It's always heartwarming when devs leave the #backdoor open for #hackers to make themselves at home. 🏠🔓
https://nextjs.org/blog/CVE-2025-66478 #Vulnerability #CVSS10 #SecurityFail #HackerNews #ngated

⚠️ Kritisk sårbarhet i Cisco IOS XE Wireless Controller – godtycklig filuppladdning möjlig. CVSS-score på 10 av 10 möjliga!

https://kryptera.se/kritisk-sarbarhet-i-cisco-ios-xe-wireless-controller-godtycklig-filuppladdning-mojlig/

#Cisco #IOSXE #CiscoWLC #CVSS10 #CVE202520188 #Sårbarhet #Informationssäkerhet #ITsäkerhet #RootAccess #RCE #JWT #HardCodedCredentials #PathTraversal #WirelessLAN #Catalyst9800 #Nätverkssäkerhet #Sårbarhetsanalys #Exploit #Cybersecurity #SecurityAdvisory

⚠️ Kritisk sårbarhet i Cisco IOS XE Wireless Controller – godtycklig filuppladdning möjlig. CVSS-score på 10 av 10 möjliga!

https://kryptera.se/kritisk-sarbarhet-i-cisco-ios-xe-wireless-controller-godtycklig-filuppladdning-mojlig/

#Cisco #IOSXE #CiscoWLC #CVSS10 #CVE202520188 #Sårbarhet #Informationssäkerhet #ITsäkerhet #RootAccess #RCE #JWT #HardCodedCredentials #PathTraversal #WirelessLAN #Catalyst9800 #Nätverkssäkerhet #Sårbarhetsanalys #Exploit #Cybersecurity #SecurityAdvisory

Docker Patches Critical AuthZ Plugin Bypass Vulnerability Dating Back to 2018 https://www.securityweek.com/docker-patches-critical-authz-plugin-bypass-vulnerability-dating-back-to-2018/ #Vulnerabilities #CloudSecurity #CVE202441110 #DockerEngine #AuthZbypass #CVSS10 #Docker

Docker Patches Critical AuthZ Plugin Bypass Vulnerability Dating Back to 2018 https://www.securityweek.com/docker-patches-critical-authz-plugin-bypass-vulnerability-dating-back-to-2018/ #Vulnerabilities #CloudSecurity #CVE202441110 #DockerEngine #AuthZbypass #CVSS10 #Docker

Docker Patches Critical AuthZ Plugin Bypass Vulnerability Dating Back to 2018 https://www.securityweek.com/docker-patches-critical-authz-plugin-bypass-vulnerability-dating-back-to-2018/ #Vulnerabilities #CloudSecurity #CVE202441110 #DockerEngine #AuthZbypass #CVSS10 #Docker

Docker Patches Critical AuthZ Plugin Bypass Vulnerability Dating Back to 2018 https://www.securityweek.com/docker-patches-critical-authz-plugin-bypass-vulnerability-dating-back-to-2018/ #Vulnerabilities #CloudSecurity #CVE202441110 #DockerEngine #AuthZbypass #CVSS10 #Docker

#Patchday: #Intel schließt unter anderem kritische Lücke mit Höchstwertung | Security https://www.heise.de/news/Patchday-Intel-schliesst-unter-anderem-kritische-Luecke-mit-Hoechstwertung-9722185.html #CVSS10

GitLab admins: Get patchin'. Now. https://cku.gt/D4bjM
This 0day is exploited ITW as we speak, I have multiple reports of successful admin account takeovers.
#0day #gitlab #privesc #patchnow #cvss10

GitLab admins: Get patchin'. Now. https://cku.gt/D4bjM
This 0day is exploited ITW as we speak, I have multiple reports of successful admin account takeovers.
#0day #gitlab #privesc #patchnow #cvss10

This #owncloud graphapi vulnerability (seriously, phpinfo, in 2023?) is one of those things that only affect a fraction of users, but if you're affected, you'd better have already addressed it, because the #exploit is live.

https://arstechnica.com/security/2023/11/owncloud-vulnerability-with-a-maximum-10-severity-rating-comes-under-mass-exploitation/

#CVSS10

This #owncloud graphapi vulnerability (seriously, phpinfo, in 2023?) is one of those things that only affect a fraction of users, but if you're affected, you'd better have already addressed it, because the #exploit is live.

https://arstechnica.com/security/2023/11/owncloud-vulnerability-with-a-maximum-10-severity-rating-comes-under-mass-exploitation/

#CVSS10