#CVSS
LightNews LightNews
thehotdrop.live
A TeamViewer flaw (CVSS 8.8) lets a compromised machine hijack the technician's PC. Update past 15.83.

YouTube: www.youtube.com/shorts/ZdJKx...

#Cybersecurity #TeamViewer #PatchNow
TeamViewer flaw lets a support session hijack the technician's PC
A TeamViewer flaw (CVSS 8.8) lets a compromised machine hijack the technician's PC. Update past 15.83.
www.youtube.com
November 3, 2026 at 12:00 AM
kikta.net
And this will just make it worse...

A pre-auth use-after-free in the Linux TCP handshake, reachable from any IPv4 listener since kernel 4.4, CVSS 9.8

Impacts are remote crash, kernel heap leak, and out-of-bounds writes

You must patch AND reboot

atlasum.net/blog/cve-202...
November 1, 2026 at 11:07 PM
robotranny.soy
cvss 10.0 mime girls
November 3, 2026 at 6:49 AM
patrickcmiller.bsky.social
CVSS 10.0 LXD, MicroCloud Flaw Lets Attackers Impersonate Trusted Clients Without a Private Key thehackernews.com/2026/11/crit...
CVSS 10.0 LXD, MicroCloud Flaw Lets Attackers Impersonate Trusted Clients Without a Private Key
Canonical patches CVE-2026-112816 in LXD and MicroCloud, a CVSS 10.0 flaw enabling trusted client impersonation without private keys.
thehackernews.com
November 3, 2026 at 4:12 AM
fistfulofknowledge.bsky.social
Linux kernelinde 9.8 CVSS puanlı bir güvenlik açıklığı var: multipath TCP dinleyicilerinde uzaktan root erişimi sağlayabiliyor. Sistem sağlayıcıları hızlı tepki verdi. #Linux #Güvenlik #TCP
Yüksek CVSS Puanlı Linux TCP Açıklığı ve Sistem Sağlayıcılarının Tepkisi
Yüksek CVSS Puanlı Linux TCP Açıklığı ve Sistem Sağlayıcılarının Tepkisi BirLinux kernelindeki 9.8 CVSS puanlı güvenlik açığı, hem sunucu hem de bulut ortamlarında çalışan sistemleri ciddi tehdit altında bırakıyor. Bu açıklık, özellikle multipath TCP (MPTCP) dinleyicisi olan…
almazlar.com
November 3, 2026 at 7:09 AM
josephhall.org
👀👀👀 atlasum.net/blog/cve-202... “CVE-2026-98432 is a CVSS 9.8 remote use-after-free in Linux's IPv4 TCP handshake, fixed upstream Oct 15.” ht Roy!
Linux's October 2026 TCP Use-After-Free: CVE-2026-98432 — Atlas
CVE-2026-98432 is a CVSS 9.8 remote use-after-free in Linux's IPv4 TCP handshake, fixed upstream Oct 15. Ubuntu and RHEL haven't shipped a fixed kernel yet.
atlasum.net
November 1, 2026 at 1:19 PM
araya.dev
blueskyはCVSS過剰驚き屋がいなくて平和
November 1, 2026 at 5:35 PM
hncompanion.com
TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8
View Article | Discussion + AI Summary

Summary of HN discussion 🧵👇
Linux's October 2026 TCP Use-After-Free: CVE-2026-98432 — Atlas
CVE-2026-98432 is a CVSS 9.8 remote use-after-free in Linux's IPv4 TCP handshake, fixed upstream Oct 15. Ubuntu and RHEL haven't shipped a fixed kernel yet.
atlasum.net
November 1, 2026 at 3:00 AM
cybowl.bsky.social
Vulnérabilités élevées (7 ≤ CVSS < 9) · 3
• Ivanti Connect Secure (CVE-2026-104935), CVSS 8.6 🔴 (CERT-FR)
• Dell OpenManage Enterprise (CVE-2026-91913), CVSS 8.8 (Cyberveille)
• OpenSearch SQL (CVE-2026-63393), CVSS 8.7 (Cyberveille)
November 3, 2026 at 6:36 AM
thehotdrop.live
An AI model wrote an exploit that gets root on Linux servers with multipath TCP. CVE-2026-98432 is CVSS 9.8; patch your kernels.

YouTube: www.youtube.com/shorts/1cfFW...

#Cybersecurity #Linux #PatchNow
AI-Written Linux Root Exploit Hits Multipath TCP
An AI model wrote an exploit that gets root on Linux servers with multipath TCP. CVE-2026-98432 is CVSS 9.8; patch your kernels.
www.youtube.com
November 3, 2026 at 10:00 PM
cybowl.bsky.social
Vulnérabilités critiques (CVSS ≥ 9) · 4
• LXD et MicroCloud (CVE-2026-112816), CVSS 10.0 (CERT-FR)
• pgAdmin 4 (CVE-2026-116241), CVSS 9.4 (Cyberveille)
• WSO2 API Manager (CVE-2025-11969), CVSS 9.4 (Cyberveille)
• JetBrains Toolbox App et IDE JetBrains (CVE-2026-118697), CVSS 9.0 (Cyberveille)
November 3, 2026 at 6:36 AM
noahweinberger2003.bsky.social
Just checked, you're right.

But I can't think of anything else with a CVSS 9 that would shut an entire website down for a month
October 29, 2026 at 7:11 PM
skillbobby.bsky.social
Microsoft Critical Vulnerabilities (Patch Tuesday)

CVE-2026-70352 (CVSS 10.0 - Azure AI Language)

CVE-2026-83711 (CVSS 10.0 - Azure AD B2C)

CVE-2026-72982 (CVSS 9.8 - Windows Netlogon)

CVE-2026-69730 (CVSS 9.8 - Windows DNS Server)

CVE-2026-78509 & CVE-2026-78510 (CVSS 9.8 - Microsoft Outlook)
November 3, 2026 at 3:52 PM
hexhen.eurosky.social
cvss 0.1.2 [updated]

CVSS (Common Vulnerability Scoring System) library for Erlang

Licenses: Apache-2.0 MIT
November 4, 2026 at 12:00 AM
hexhen.eurosky.social
cvss 0.1.2-beta.1 [updated]

CVSS (Common Vulnerability Scoring System) library for Erlang

Licenses: Apache-2.0 MIT
November 3, 2026 at 11:45 PM
aman179102.bsky.social
CVSS measures technical severity without context, meaning asset exposure and compensating controls dictate actual exploitability.
November 1, 2026 at 1:44 PM
edufabtech.com
Canonical Patches a CVSS 10.0 Flaw Letting Attackers Impersonate Trusted LXD, MicroCloud Clients

#Canonical #Cybersecurity #Lxd #Microcloud #Vulnerability

edufabtech.com/news/canonic...
November 3, 2026 at 10:24 AM
365tipu.cz
Ubuntu k 2. listopadu 2026 stále neopravilo kritickou chybu jádra CVE-2026-98432 (CVSS 9,8), která ohrožuje všechny podporované verze včetně LTS. chalmovsky.com/posts...
November 3, 2026 at 8:17 PM
dastechno.com
GitLab-Lücke mit CVSS 10 und Cisco-Firewall-Bug werden angegriffen

Die US-Behörde CISA meldet aktive Angriffe auf eine GitLab-Lücke (CVSS 10,0) und einen DoS-Fehler in Cisco ASA/FTD. Updates gibt es – bei GitLab zählt auch Ruby.

#News
GitLab-Lücke mit CVSS 10 und Cisco-Firewall-Bug werden angegriffen
Die US-Behörde CISA meldet aktive Angriffe auf eine GitLab-Lücke (CVSS 10,0) und einen DoS-Fehler in Cisco ASA/FTD. Updates gibt es – bei GitLab zählt auch Ruby.
dastechno.com
October 30, 2026 at 8:19 AM
finfet.sh
announcing a cvss 9.8 in linux on a friday afternoon :'(
October 30, 2026 at 8:39 PM
netsecio.bsky.social
A critical RCE vulnerability (CVE-2026-98432) with a 9.8 CVSS score has been found in the Linux kernel's TCP module. Unauthenticated attackers can gain root access on systems with exposed MPTCP listeners. #Linux #Kernel #CyberSecurity #RCE

🌐 cyber[.]netsecops[.]io
Critical RCE Flaw in Linux Kernel
A critical remote code execution flaw (CVE-2026-98432, CVSS 9.8) in the Linux kernel
cyber.netsecops.io
November 3, 2026 at 1:36 AM
ninjaowl.ai
CVSS 10.0 LXD, MicroCloud Flaw Lets Attackers Impersonate Trusted Clients Without a Private Key #cybersecurity #hacking #news #infosec #security #technology #privacy thehackernews.com/20...
November 2, 2026 at 2:29 AM
euvd-bot.bsky.social
📊 EUVD Daily CVSS
🟠 Avg: 7.0/10 (High)
📈 317 vulns | Min: 1.9 Max: 10.0
📅 2026-11-02
#cybersecurity #infosec #cvss #euvd
November 3, 2026 at 5:00 PM
euvd-bot.bsky.social
📊 EUVD Daily CVSS
🟠 Avg: 7.13/10 (High)
📈 69 vulns | Min: 2.1 Max: 10.0
📅 2026-11-01
#cybersecurity #infosec #cvss #euvd
November 2, 2026 at 5:00 PM
patrickcmiller.bsky.social
Attacker Tried to Exploit Alpine Linux’s GitLab via CVSS 10.0 Flaw Its Ruby Left Open thehackernews.com/2026/10/atta...
Attacker Tried to Exploit Alpine Linux’s GitLab via CVSS 10.0 Flaw Its Ruby Left Open
Alpine Linux rebuilt its GitLab server after an RCE exploit attempt and found that upgrading GitLab alone had left the Ruby flaw unpatched.
thehackernews.com
November 1, 2026 at 1:12 PM