#CVSS10
LightNews LightNews
0daynews.bsky.social
Arista VeloCloud Orchestrator hits KEV with a max-severity unauthenticated RCE (CVE-2026-93952, CVSS 10.0). CISA deadline… https://0daynews.com/articles/2026-09-23-arista-velocloud-cve-2026-93952-cvss10-kev/?utm_source=bluesky&utm_medium=organic_social&utm_campaign=always_on&utm_content=hub-3403
Arista VeloCloud CVSS 10.0 Flaw Added to CISA KEV
September 23, 2026 at 2:31 PM
thedailytechfeed.com
Critical VeloCloud Orchestrator flaw (CVSS 10) under active exploit in certificate-based setups. #VeloCloud #Cybersecurity #Vulnerabilities #SDWAN #CVSS10 #NetworkSecurity https://thedailytechfeed.com/critical-cvss-10-0-flaw-in-velocloud-orchestrator-under-active-exploitation/
September 22, 2026 at 12:57 PM
0daynews.bsky.social
Microsoft fixed a missing-auth flaw in Azure AI Foundry — CVSS 10.0, unauthenticated privilege escalation… https://0daynews.com/articles/2026-09-19-azure-ai-foundry-cve-2026-85889-cvss10-privilege-escalation/?utm_source=bluesky&utm_medium=organic_social&utm_campaign=always_on&utm_content=hub-2610
Microsoft Fixes CVSS 10.0 Flaw in Azure AI Foundry
September 19, 2026 at 6:01 PM
0daynews.bsky.social
Microsoft Fabric patched CVE-2026-69843 — unauthenticated privilege escalation over the network, CVSS 10.0. check… https://0daynews.com/articles/2026-09-19-microsoft-fabric-cve-2026-69843-cvss10-auth-bypass/?utm_source=bluesky&utm_medium=organic_social&utm_campaign=always_on&utm_content=hub-2597
Microsoft Fabric Auth Bypass Reaches CVSS 10.0
September 19, 2026 at 2:00 PM
0daynews.bsky.social
Cisco ISE zero-day (CVE-2026-76460, CVSS 10.0) — auth bypass, active exploitation confirmed, no mitigations short of… https://0daynews.com/articles/2026-09-17-cisco-ise-cve-2026-76460-cvss10-auth-bypass/?utm_source=bluesky&utm_medium=organic_social&utm_campaign=always_on&utm_content=hub-2336
Cisco ISE Zero-Day CVSS 10.0 Under Active Exploitation
September 17, 2026 at 12:30 PM
0daynews.bsky.social
CVSS 10.0 unauthenticated RCE in SAP Extended Passport Processing — September Security Patch Day is out. Not a drill. #infosec https://0daynews.com/articles/2026-09-10-sap-september-patch-day-epp-cvss10-rce/?utm_source=bluesky&utm_medium=organic_social&utm_campaign=always_on&utm_content=hub-1648
SAP September Patches: CVSS 10 RCE in EPP Processing
September 12, 2026 at 2:15 AM
0daynews.bsky.social
SAP September patch day: unauthenticated RCE in Extended Passport Processing scores CVSS 10.0. Multiple additional critical… https://0daynews.com/articles/2026-09-10-sap-september-patch-day-epp-cvss10-rce/?utm_source=bluesky&utm_medium=organic_social&utm_campaign=always_on&utm_content=hub-1647
SAP September Patches: CVSS 10 RCE in EPP Processing
September 12, 2026 at 1:00 AM
thedailytechfeed.com
Critical CVSS 10 GitLab file-read flaw (CVE-2026-85706) under active exploit — upgrade now. #GitLab #Security #Vulnerability #CVSS10 #Cybersecurity #DevSecOps thedailytechfeed.com/gitlab-patch...
September 11, 2026 at 4:33 PM
miyacorata.m8a.app
ぎとらぼがCVSS10とかいう激ヤバパッチリリースを出してきやがったので残業です
September 11, 2026 at 10:29 AM
securityonline.bsky.social
An ASUS Control Center vulnerability, CVE-2026-75754 (CVSS 10), gives unauthenticated attackers a root shell. Update to v3.1.0.9 now.

#ASUS #CVE202675754 #RCE #ControlCenter #RootShell #CVSS10 #Infosec #PatchNow
CVE-2026-75754 (CVSS 10): ASUS Control Center Root RCE
ASUS published CVE-2026-75754 on September 4, 2026. This ASUS Control Center vulnerability earns a maximum CVSS score of 10.0. It lets an unauthenticated attacker gain a root shell and seize an entire fleet of managed machines. Why this matters ASUS Control Center manages servers, PCs, and workstations across a company. So one flaw here can expose an entire environment. The bug needs no login and no user interaction.
securityonline.info
September 4, 2026 at 5:12 PM
0daynews.bsky.social
ServiceNow Patches Three CVSS 10.0 Flaws in AI Platform — ServiceNow patches three CVSS 10.0 AI Platform flaws. Self-hosted customers must update now; hosted instances were auto-patched August 28. https://0daynews.com/articles/2026-08-29-servicenow-three-cvss10-ai-platform-flaws
August 31, 2026 at 4:00 AM
0daynews.bsky.social
ServiceNow Patches Three CVSS 10.0 Flaws in AI Platform https://0daynews.com/articles/2026-08-29-servicenow-three-cvss10-ai-platform-flaws
August 30, 2026 at 12:00 PM
thedailytechfeed.com
Cisco fixes nine critical Crosswork & Secure Workload flaws, including five CVSS 10s—update now. #Security #Cisco #Crosswork #SecureWorkload #CVSS10 #Vulnerability https://thedailytechfeed.com/cisco-urges-urgent-updates-after-9-critical-flaws-in-crosswork-secure-workload/
August 21, 2026 at 10:20 AM
cerberusit.bsky.social
SAP earned a perfect CVSS 10.0 score by accidentally forgetting authorization checks in Commerce Cloud. Cue the mad rush to install patches before attackers help themselves.

#SAPEngineers #CVSS10
SAP Delivers Perfect Score CVSS 10.0
August 12, 2026 at 11:50 AM
securityonline.bsky.social
A critical Veeam ONE vulnerability, CVE-2026-64633, allows remote unauthenticated code execution at CVSS 10.0. Update to build 13.1.0.7034 now.

#Veeam #VeeamONE #CVE202664633 #RCE #RemoteCodeExecution #Vulnerability #CVSS10 #PatchNow #CyberSecurity #InfoSec
Veeam ONE CVE-2026-64633 Enables Unauthenticated Remote Code Execution at CVSS 10.0
TL;DR Veeam patched a maximum-severity Veeam ONE vulnerability. CVE-2026-64633 allows remote unauthenticated code execution and scores a perfect CVSS 10.0. Admins should update to build 13.1.0.7034 right away. Why it matters Veeam ONE monitors backup and virtualization health across the enterprise. So it sits deep inside critical infrastructure. The flaw enables remote code execution with no login at all. This Veeam ONE vulnerability needs no password and no user interaction.
securityonline.info
August 4, 2026 at 3:36 PM
darknetsearch.bsky.social
🚨 A critical CVSS 10.0 "RufRoot" vulnerability highlights the need for immediate patching and secure configuration reviews.

🌐 spoofguard.io/blog/en/spoo...

#Vulnerability #CVSS10 #ThreatIntelligence #PatchManagement #SpoofGuard #InfoSec

Try it for FREE. 🆓
Spoofing Detection: CVSS 10 RufRoot Flaw Revealed | Spoofguard.io
✓ Spoofing detection helps organizations respond to the CVSS 10.0 RufRoot flaw. Learn the risks and best protection strategies.
spoofguard.io
July 30, 2026 at 6:10 AM
cerberusit.bsky.social
Arista patched a CVSS 10.0 VeloCloud bug that allows unauthenticated command injection. Naturally, CISA has to force admins to actually fix it.

#cvss10 #patchorpay
Perfect 10 Bug Requires Actual Work
July 28, 2026 at 11:42 AM
securityonline.bsky.social
JetBrains patched 18 vulnerabilities across its IDEs. CVE-2026-64812 and CVE-2026-64813 reach CVSS 10, and most of the rest allow arbitrary code execution.

#JetBrains #IntelliJIDEA #TeamCity #CVSS10 #DevSecOps
JetBrains Patches 18 Flaws, Including Two CVSS 10 Bugs in IntelliJ IDEA Remote Development
TL;DR JetBrains fixed 18 vulnerabilities across GoLand, IntelliJ IDEA, PhpStorm, PyCharm, TeamCity, and WebStorm. Two IntelliJ IDEA flaws in Remote Development sessions carry a maximum CVSS score of 10. A TeamCity issue in Git VCS roots follows at CVSS 9.1. Why It Matters Developer workstations hold source code, cloud tokens, and signing keys. An IDE that runs code from an untrusted project therefore becomes an attractive first step into a software supply chain.
securityonline.info
July 23, 2026 at 2:23 PM
intelnightowl.bsky.social
Ubiquiti patches 25 UniFi OS vulnerabilities, including critical CVE‑2026‑50746 with CVSS10, a move that may affect global network security in the #USA #CyberSecurity https://thecyberexpress.com/cve-2026-50746-ubiquiti-unifi-os-vulnerability/
CVE-2026-50746: Ubiquiti Fixes Critical UniFi OS Flaws
Ubiquiti patches CVE-2026-50746 and 24 more UniFi OS vulnerabilities. Update UniFi Connect, Talk, Access, Protect and Network now.
thecyberexpress.com
July 11, 2026 at 3:36 AM
cerberusit.bsky.social
Cisco patched a maximum-severity CVSS 10.0 flaw in their Secure Workload API that let random strangers read sensitive data. Who needs access controls anyway?

#cvss10 #ciscopatch
Cisco scores a perfect ten in failures
May 22, 2026 at 11:32 AM
ahmandonk.bsky.social
📰 Cisco Peringatkan Celah Kritis SD-WAN (CVE-2026-20182) yang Dieksploitasi dalam Serangan Zero-Day

👉 Baca artikel lengkap di sini: https://ahmandonk.com/2026/05/15/cisco-peringatkan-celah-kritis-sd-wan-cve-2026-20182-zero-day/

#cisa #cisao#cisco2#cve20182 #cvss1#cvss10a#keamananJaringand#rapid7
May 15, 2026 at 7:03 AM
cybersecurity.page
CVSS 10.0 in PTC Windchill PDMLink and FlexPLM
CVSS 10.0 in PTC Windchill PDMLink and FlexPLM
There is a critical vulnerability in PTC's Windchill PDMLink and FlexPLM: https://community.ptc.com/t5/Windchill/Critical-vulnerability-CVSS10-0/m-p/1059587 https://support.eacpds.com/hc/en-us/art...
reddit.com
March 22, 2026 at 11:42 PM
cybermaterial.bsky.social
Critical Modular DS Plugin Flaw Enables Admin Takeover
Read More: buff.ly/tMGGJ8O

#WordPress #CVE202623550 #PluginVulnerability #WebsiteSecurity #AdminTakeover #CVSS10 #PatchNow #CyberAlert #Infosec
January 20, 2026 at 7:00 PM
cybermaterial.bsky.social
n8n Warns Of Critical RCE Flaw
Read More: buff.ly/YGvZzGv

#n8nSecurity #WorkflowAutomation #CriticalVulnerability #RCE #CVSS10 #DevSecOps #CloudSecurity #PatchManagement
January 7, 2026 at 7:00 PM
it4intserver.bsky.social
iT4iNT SERVER HPE OneView Flaw Rated CVSS 10.0 Allows Unauthenticated Remote Code Execution VDS VPS Cloud #CyberSecurity #Vulnerability #RemoteCodeExecution #HPEOneView #CVSS10
HPE OneView Flaw Rated CVSS 10.0 Allows Unauthenticated Remote Code Execution
Hewlett Packard Enterprise (HPE) has resolved a maximum-severity security flaw in OneView Software that, if successfully exploited, could result in remote code execution. The critical vulnerability, assigned the CVE identifier CVE-2025-37164, carries a CVSS score of 10.0. HPE OneView is an IT infrastructure management software that streamlines IT operations and controls all systems via a
dlvr.it
December 18, 2025 at 4:49 PM