Cvss
Entity.
- Evidence
- 251 documents · 27 separate publishers
- Standing
- A name from our starting list; its record is kept up to date automatically from coverage
- Time
- first seen 3 Sept 2026, last seen 3 Nov 2026
- Measured
- 3% of mentions say something specific about it; the rest only name it
- As of
- 3 Nov 2026
Where this comes from
- Rescana · 2026-11-02 · WSO2 API Manager CVE-2025-11969: System REST API Access Control Flaw Allows Unauthorized Admin Actions (CVSS 9.4) (opens the source in a new tab)
- Rescana · 2026-11-02 · Canonical LXD and MicroCloud CVE-2026-112816: Certificate Chain Flaw Lets Attackers Pose as Trusted Clients (CVSS 10.0) (opens the source in a new tab)
- The Hacker News · 2026-11-01 · CVSS 10.0 LXD, MicroCloud Flaw Lets Attackers Impersonate Trusted Clients Without a Private Key (opens the source in a new tab)
- The Hacker News · 2026-10-29 · Linux Kernel TCP Flaw With 9.8 CVSS Score Affects Ubuntu, Red Hat and Other Distributions (opens the source in a new tab)
- The Hacker News · 2026-10-29 · Attacker Tried to Exploit Alpine Linux’s GitLab via CVSS 10.0 Flaw Its Ruby Left Open (opens the source in a new tab)
- BleepingComputer · 2026-10-28 · Even after PHP2Shell, blast radius matters more than a CVSS score (opens the source in a new tab)
- The Hacker News · 2026-10-22 · Two CVSS 9.0 Linux KSMBD RCE Flaws Disclosed on Public Mailing Lists Before Kernel Fixes (opens the source in a new tab)
- The Hacker News · 2026-10-21 · PHP2Shell: Two Unpatched Critical PHP RCE Flaws (CVSS 9.2) Trigger Emergency Security Alert (opens the source in a new tab)
- The Hacker News · 2026-10-21 · Critical GitLab Flaw (CVSS 10.0) Could Allow Unauthenticated RCE Across 12 Years of Releases (opens the source in a new tab)
- shattered.io · 2026-10-14 · Ivanti VPN Zero-Day Hits CVSS 8.6, Root Still Open [2026] (opens the source in a new tab)
What is claimed about it
- Reported by two: Reported by two sources that did not copy each other.
- Canonical LXD and MicroCloud CVE-2026-112816: Certificate Chain Flaw Lets Attackers Pose as Trusted Clients (CVSS 10.0) Reported by two · first reported 1 Nov 2026