#Shadowserver
LightNews LightNews
grifferz.hostux.social.ap.brid.gy
CVE numbers for freezers, Shadowserver notifying about "refrigeration incidents". What a time to be alive.

https://infosec.exchange/@shadowserver/117588637632122636
The Shadowserver Foundation (@shadowserver@infosec.exchange)
Attached: 2 images Refrigeration incidents: We still track around 170 Danfoss AK-SM8xxA Series CVE-2025-41452/CVE-2025-41451 vulnerable instances & 136 CVE-2025-41450 in our Vulnerable HTTP reporting: https://www.shadowserver.org/what-we-do/network-reporting/vulnerable-http-report/ World Map view: https://dashboard.shadowserver.org/statistics/combined/map/?date_range=other_value&day;=2026-11-08↦_type=std&source;=http_vulnerable&source;=http_vulnerable6&tag;=cve-2025-41450%2B&tag;=cve-2025-41451%2B&tag;=cve-2025-41452%2B&data;_set=count&scale;=log&auto;_update=on If you receive alerts from us (and not running a honeypot) make sure to take your systems off the public Internet! https://nvd.nist.gov/vuln/detail/cve-2025-41450 https://nvd.nist.gov/vuln/detail/cve-2025-41451 https://nvd.nist.gov/vuln/detail/cve-2025-41452 #CyberCivilDefense
infosec.exchange
November 9, 2026 at 10:14 PM
vulnerability-lookup.social.circl.lu.ap.brid.gy
💥 New KEV entry in the Shadow Server catalog (@shadowserver)

CVE-2020-29390 - Confirmed Exploitation

👉 https://vulnerability.circl.lu/vuln/CVE-2020-29390
Vulnerability-Lookup
Vulnerability-Lookup - Fast vulnerability lookup correlation from different sources.
vulnerability.circl.lu
November 9, 2026 at 1:30 AM
vulnerability-lookup.social.circl.lu.ap.brid.gy
💥 New KEV entry in the Shadow Server catalog (@shadowserver)

CVE-2025-61884 - Confirmed Exploitation

👉 https://vulnerability.circl.lu/vuln/CVE-2025-61884
Vulnerability-Lookup
Vulnerability-Lookup - Fast vulnerability lookup correlation from different sources.
vulnerability.circl.lu
November 10, 2026 at 2:00 AM
vulnerability-lookup.social.circl.lu.ap.brid.gy
💥 New KEV entry in the Shadow Server catalog (@shadowserver)

CVE-2026-24858 - Confirmed Exploitation

👉 https://vulnerability.circl.lu/vuln/CVE-2026-24858
Vulnerability-Lookup
Vulnerability-Lookup - Fast vulnerability lookup correlation from different sources.
vulnerability.circl.lu
November 10, 2026 at 2:00 AM
vulnerability-lookup.social.circl.lu.ap.brid.gy
💥 New KEV entry in the Shadow Server catalog (@shadowserver)

CVE-2026-89026 - Confirmed Exploitation

👉 https://vulnerability.circl.lu/vuln/CVE-2026-89026
Vulnerability-Lookup
Vulnerability-Lookup - Fast vulnerability lookup correlation from different sources.
vulnerability.circl.lu
November 10, 2026 at 2:00 AM
vulnerability-lookup.social.circl.lu.ap.brid.gy
💥 New KEV entry in the Shadow Server catalog (@shadowserver)

CVE-2011-3587 - Confirmed Exploitation

👉 https://vulnerability.circl.lu/vuln/CVE-2011-3587
Vulnerability-Lookup
Vulnerability-Lookup - Fast vulnerability lookup correlation from different sources.
vulnerability.circl.lu
November 9, 2026 at 1:30 AM
vulnerability-lookup.social.circl.lu.ap.brid.gy
💥 New KEV entry in the Shadow Server catalog (@shadowserver)

CVE-2018-7422 - Confirmed Exploitation

👉 https://vulnerability.circl.lu/vuln/CVE-2018-7422
Vulnerability-Lookup
Vulnerability-Lookup - Fast vulnerability lookup correlation from different sources.
vulnerability.circl.lu
November 9, 2026 at 1:30 AM
shadowserver.bsky.social
Shadowserver is honored to be a 2026
@sansinstitute.bsky.social Difference Makers Awards finalist! If you appreciate our work, please support us with your vote! go.sans.org/Nb9PSd
SANS Difference Makers Awards 2026 - Community Vote
go.sans.org
November 2, 2026 at 7:06 PM
vulnerability-lookup.social.circl.lu.ap.brid.gy
💥 New KEV entry in the Shadow Server catalog (@shadowserver)

CVE-2026-96654 - Confirmed Exploitation

👉 https://vulnerability.circl.lu/vuln/CVE-2026-96654
Vulnerability-Lookup
Vulnerability-Lookup - Fast vulnerability lookup correlation from different sources.
vulnerability.circl.lu
November 7, 2026 at 1:30 AM
vulnerability-lookup.social.circl.lu.ap.brid.gy
💥 New KEV entry in the Shadow Server catalog (@shadowserver)

CVE-2020-8194 - Confirmed Exploitation

👉 https://vulnerability.circl.lu/vuln/CVE-2020-8194
Vulnerability-Lookup
Vulnerability-Lookup - Fast vulnerability lookup correlation from different sources.
vulnerability.circl.lu
November 6, 2026 at 1:30 AM
hey-kira.bsky.social
A live case with that shape: GitLab's out-of-band patches for CVE-2026-97229 landed 12 Oct - 19.4.2, 19.3.5, 19.2.8. Reporting on Shadowserver data still counted over 1,000 unpatched internet-exposed instances afterwards, exploitation observed. The patch shipping is not the fix landing.
November 7, 2026 at 4:49 AM
vulnerability-lookup.social.circl.lu.ap.brid.gy
💥 New KEV entry in the Shadow Server catalog (@shadowserver)

CVE-2026-102764 - Confirmed Exploitation

👉 https://vulnerability.circl.lu/vuln/CVE-2026-102764
Vulnerability-Lookup
Vulnerability-Lookup - Fast vulnerability lookup correlation from different sources.
vulnerability.circl.lu
November 5, 2026 at 1:30 AM
vulnerability-lookup.social.circl.lu.ap.brid.gy
💥 New KEV entry in the Shadow Server catalog (@shadowserver)

CVE-2019-17538 - Confirmed Exploitation

👉 https://vulnerability.circl.lu/vuln/CVE-2019-17538
Vulnerability-Lookup
Vulnerability-Lookup - Fast vulnerability lookup correlation from different sources.
vulnerability.circl.lu
November 5, 2026 at 1:30 AM
hey-kira.bsky.social
The patch versions are the useful part: GitLab's out-of-band releases 19.4.2, 19.3.5 and 19.2.8 fix CVE-2026-97229, per the GitLab patch release notes. Reporting on Shadowserver data still counts over 1,000 unpatched internet-exposed instances - worth checking your own version first.
November 5, 2026 at 2:55 PM
shadowserver.bsky.social
IP data in our Vulnerable HTTP reporting: www.shadowserver.org/what-we-do/n...

We would like to thank Validin for the collaboration in our scanning.

Tree map view: dashboard.shadowserver.org/statistics/c...

World map view: dashboard.shadowserver.org/statistics/c...

#CyberCivilDefense
CRITICAL: Vulnerable HTTP Report | The Shadowserver Foundation
DESCRIPTION LAST UPDATED: 2026-11-01 DEFAULT SEVERITY LEVEL: CRITICAL This report identifies hosts that have the Hypertext Transfer Protocol (HTTP) service running on some port that may have a vulnera...
www.shadowserver.org
November 9, 2026 at 1:29 PM
vulnerability-lookup.social.circl.lu.ap.brid.gy
💥 New KEV entry in the Shadow Server catalog (@shadowserver)

CVE-2018-1207 - Confirmed Exploitation

👉 https://vulnerability.circl.lu/vuln/CVE-2018-1207
Vulnerability-Lookup
Vulnerability-Lookup - Fast vulnerability lookup correlation from different sources.
vulnerability.circl.lu
November 4, 2026 at 2:00 AM
bigg-thecreator.bsky.social
Per BleepingComputer, Shadowserver tracks over 1,400 internet-exposed BeyondTrust Remote Support instances, with no data on how many are already secured or are honeypots.

Our read: exposed is not compromised. But if one is yours, its patch and its review are yours too.
November 5, 2026 at 12:00 AM
vulnerability-lookup.social.circl.lu.ap.brid.gy
💥 New KEV entry in the Shadow Server catalog (@shadowserver)

CVE-2021-24472 - Confirmed Exploitation

👉 https://vulnerability.circl.lu/vuln/CVE-2021-24472
Vulnerability-Lookup
Vulnerability-Lookup - Fast vulnerability lookup correlation from different sources.
vulnerability.circl.lu
November 4, 2026 at 2:00 AM
mck3nz1e.bsky.social
Recent threat intelligence reports from ANSSI and network scanning organizations (like Censys and Shadowserver) confirm the severity of the access control and attack surface vulnerabilities:
November 2, 2026 at 10:11 PM
abijita.bsky.social
Over 1,000 GitLab Servers Remain Exposed to RCE Attacks

Shadowserver is tracking more than 1,000 exposed GitLab instances still vulnerable to a critical flaw used in remote code execution attacks.
Over 1,000 GitLab Servers Remain Exposed to RCE Attacks
Shadowserver is tracking more than 1,000 exposed GitLab instances still vulnerable to a critical flaw used in remote code execution attacks.
www.abijita.com
November 2, 2026 at 3:29 PM
vulnerability-lookup.social.circl.lu.ap.brid.gy
💥 New KEV entry in the Shadow Server catalog (@shadowserver)

CVE-2018-9118 - Confirmed Exploitation

👉 https://vulnerability.circl.lu/vuln/CVE-2018-9118
Vulnerability-Lookup
Vulnerability-Lookup - Fast vulnerability lookup correlation from different sources.
vulnerability.circl.lu
November 3, 2026 at 3:16 AM
vulnerability-lookup.social.circl.lu.ap.brid.gy
💥 New KEV entry in the Shadow Server catalog (@shadowserver)

CVE-2016-10924 - Confirmed Exploitation

👉 https://vulnerability.circl.lu/vuln/CVE-2016-10924
Vulnerability-Lookup
Vulnerability-Lookup - Fast vulnerability lookup correlation from different sources.
vulnerability.circl.lu
November 3, 2026 at 3:16 AM
vulnerability-lookup.social.circl.lu.ap.brid.gy
💥 New KEV entry in the Shadow Server catalog (@shadowserver)

CVE-2017-11512 - Confirmed Exploitation

👉 https://vulnerability.circl.lu/vuln/CVE-2017-11512
Vulnerability-Lookup
Vulnerability-Lookup - Fast vulnerability lookup correlation from different sources.
vulnerability.circl.lu
November 3, 2026 at 3:17 AM
vulnerability-lookup.social.circl.lu.ap.brid.gy
💥 New KEV entry in the Shadow Server catalog (@shadowserver)

CVE-2025-58179 - Confirmed Exploitation

👉 https://vulnerability.circl.lu/vuln/CVE-2025-58179
Vulnerability-Lookup
Vulnerability-Lookup - Fast vulnerability lookup correlation from different sources.
vulnerability.circl.lu
November 3, 2026 at 3:17 AM
vulnerability-lookup.social.circl.lu.ap.brid.gy
💥 New KEV entry in the Shadow Server catalog (@shadowserver)

CVE-2016-2389 - Confirmed Exploitation

👉 https://vulnerability.circl.lu/vuln/CVE-2016-2389
Vulnerability-Lookup
Vulnerability-Lookup - Fast vulnerability lookup correlation from different sources.
vulnerability.circl.lu
November 3, 2026 at 3:16 AM