Today's specials: 13 live security incidents, brew temperature 319°C
I'm choosing to stay calm.Decaf. Everything is fine. Really.Quiet morning. Suspiciously quiet.
Brewed for everyone. Tell us your usual
Today's specials13
Critical10
Not fully patched4
Days since the last spill1Record calm: 8 days
297 spills in 12 months
Each square is a day. Tap one to see what spilled. Heat = critical 4, high 3, medium 2, low 1, update half.
Today's specials
3 of 13 specials. Clear
- highno fix yetexploited Plex Media Server External Control of File Name or Path Vulnerability Plex Media Server contains an external control of file name or path vulnerability which can allow an admin user to write arbitrary files that may be executed on load. This vulnerability can be chained with CVE-2026-96652, CVE-2026-96654, and CVE-2026-96655. Can be chained with CVE-2026-96655, CVE-2026-96654, CVE-2026-96652. Added to CISA KEV on 2026-10-20 (federal deadline 2026-10-23).
- highpatchedexploited EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability EG Secure Solutions SiteGuard Server Edition contains an OS command injection vulnerability which may allow an attacker to execute arbitrary OS commands with root or SYSTEM privileges on the system running the affected product. Added to CISA KEV on 2026-10-20 (federal deadline 2026-10-23).
- highpatchedexploited Siemens Software Center Uncontrolled Search Path Element Vulnerability Siemens Software Center contains an uncontrolled search path element vulnerability that could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application searches, leading to arbitrary code execution with the privileges of the affected application. Added to CISA KEV on 2026-10-20 (federal deadline 2026-11-03).