Sent back to the kitchen

Every time a ticket changes because a better source said otherwise: what it said, what it says now, and who said so. Owning mistakes is part of the menu.

1. Re-scored 24 Oct 2026, 06:14 UTC Cisco Secure Client Privilege Escalation

   high → medium

   CVSS 3.1 5.5 (the vendor) for CVE-2026-76462 Source

2. Re-plated 24 Oct 2026, 06:14 UTC Cisco Secure Client Privilege Escalation

   On hold (status unknown) → Order up (fix available)

   Cisco has released software updates that address this vulnerability. Source

3. Re-plated 24 Oct 2026, 06:14 UTC Open Source Snort 3 Command Execution

   On hold (status unknown) → Order up (fix available)

   Cisco has released software updates that address this vulnerability. Source

4. Re-scored 24 Oct 2026, 06:14 UTC Cisco Unified CM Access Control Bypass

   high → medium

   CVSS 3.1 5.3 (the vendor) for CVE-2026-76487 Source

5. Re-plated 24 Oct 2026, 06:14 UTC Cisco Unified CM Access Control Bypass

   On hold (status unknown) → Order up (fix available)

   Cisco has released software updates that address this vulnerability. Source

6. Re-plated 24 Oct 2026, 06:14 UTC Cisco IOS XR IPv4 DoS

   On hold (status unknown) → Order up (fix available)

   Cisco has released software updates that address this vulnerability. Source

7. Fix found 24 Oct 2026, 06:14 UTC Siemens WinCC Database Privilege Escalation Vulnerability

   none → V8.0 Update 11, V8.1 Update 7

   CISA advisory icsa-26-295-13: vendor fix V8.0 Update 11 Source

8. Re-plated 24 Oct 2026, 06:14 UTC Siemens WinCC Database Privilege Escalation Vulnerability

   On hold (status unknown) → Order up (fix available)

   CISA advisory icsa-26-295-13: vendor fix V8.0 Update 11 Source

9. Fix found 24 Oct 2026, 06:14 UTC Siemens RUGGEDCOM CROSSBOW Vulnerability

   none → V6.0

   CISA advisory icsa-26-295-12: vendor fix V6.0 Source

10. Re-scored 24 Oct 2026, 06:14 UTC Siemens RUGGEDCOM CROSSBOW Vulnerability

    high → critical

    CVSS 3.1 9.8 (the vendor) for CVE-2025-71316 Source

11. Re-plated 24 Oct 2026, 06:14 UTC Siemens RUGGEDCOM CROSSBOW Vulnerability

    On hold (status unknown) → Order up (fix available)

    CISA advisory icsa-26-295-12: vendor fix V6.0 Source

12. Re-scored 24 Oct 2026, 06:14 UTC Godot 4.x Heap Out-of-Bounds Write

    high → low

    CVSS 3.1 2.5 (the vendor) for CVE-2026-110734 Source

13. Re-plated 24 Oct 2026, 06:14 UTC Cisco Expressway RCE

    On hold (status unknown) → Order up (fix available)

    Cisco has released software updates that address this vulnerability. Source

14. Fix found 24 Oct 2026, 06:14 UTC Siemens Industrial Edge App Publisher Vulnerability

    none → V1.27.9

    CISA advisory icsa-26-295-02: vendor fix V1.27.9 Source

15. Re-scored 24 Oct 2026, 06:14 UTC Siemens Industrial Edge App Publisher Vulnerability

    critical → high

    CVSS 3.1 8.3 (the vendor) for CVE-2026-78557 Source

16. Re-plated 24 Oct 2026, 06:14 UTC Siemens Industrial Edge App Publisher Vulnerability

    On hold (status unknown) → Order up (fix available)

    CISA advisory icsa-26-295-02: vendor fix V1.27.9 Source

17. Fix found 24 Oct 2026, 06:14 UTC nginx RCE

    1.31.7, 1.30.6 → NGINX Plus 37.1.0.1, NGINX Plus 37.0.5.1, NGINX Open Source 1.31.7, NGINX Open Source 1.30.6

    Vendor's CVE record for CVE-2026-15176: fixed in NGINX Plus 37.1.0.1 Source

18. Re-scored 24 Oct 2026, 06:14 UTC nginx RCE

    critical → high

    CVSS 3.1 8.1 (the vendor) for CVE-2026-15176 Source

19. Re-scored 24 Oct 2026, 06:14 UTC GPAC/MP4Box Heap Use-After-Free

    high → unknown

    no CVSS score published

20. Re-plated 24 Oct 2026, 06:14 UTC Siemens SIMATIC S7 PLCs Web Server Vulnerabilities

    On hold (status unknown) → 86'd (no fix yet)

    CISA advisory icsa-26-295-14: no vendor fix, only a mitigation: Disable the webserver if not required on the affected systems. Source

21. Off the board 24 Oct 2026, 06:14 UTC BlackX UEFI Bootkit Bypasses Secure Boot

    on the board → past orders

    CVE published 2022-01-11, over a year ago, and not newly added to KEV Source

22. Fix found 24 Oct 2026, 06:14 UTC BlackX UEFI Bootkit Bypasses Secure Boot

    none → Windows 10 Version 1809 10.0.17763.2452, Windows 10 Version 1909 10.0.18363.2037, Windows 10 Version 21H1 10.0.19043.1466, Windows Server 2022 10.0.20348.469, Windows 10 Version 20H2 10.0.19042.1466, Windows 11 version 21H2 10.0.22000.434, Windows 10 Version 21H2 10.0.19044.1466, Windows 10 Version 1507 10.0.10240.19177, Windows 10 Version 1607 10.0.14393.4886, Windows 8.1 6.3.9600.20246, Windows Server 2012 6.2.9200.23584

    Vendor's CVE record for CVE-2022-21894: fixed in Windows 10 Version 1809 10.0.17763.2452 Source

23. Re-scored 24 Oct 2026, 06:14 UTC BlackX UEFI Bootkit Bypasses Secure Boot

    critical → medium

    CVSS 3.1 4.4 (the vendor) for CVE-2022-21894 Source

24. Re-plated 24 Oct 2026, 06:14 UTC BlackX UEFI Bootkit Bypasses Secure Boot

    On hold (status unknown) → Order up (fix available)

    Vendor's CVE record for CVE-2022-21894: fixed in Windows 10 Version 1809 10.0.17763.2452 Source

25. Fix found 24 Oct 2026, 06:14 UTC Splunk Enterprise: critical vulnerability

    none → 10.4.3, 10.2.7

    Vendor's CVE record for CVE-2026-76268: fixed in Splunk Enterprise 10.4.3 Source

26. Re-plated 24 Oct 2026, 06:14 UTC Splunk Enterprise: critical vulnerability

    On hold (status unknown) → Order up (fix available)

    Vendor's CVE record for CVE-2026-76268: fixed in Splunk Enterprise 10.4.3 Source

27. Off the board 24 Oct 2026, 06:14 UTC fastjson: remote code execution

    on the board → past orders

    Only news is a public PoC for a CVE published 2026-07-23 Source

28. Off the board 24 Oct 2026, 06:14 UTC Apache Tomcat: authentication bypass

    on the board → past orders

    Only news is a public PoC for a CVE published 2026-09-23 Source

29. Off the board 24 Oct 2026, 06:14 UTC JetBrains YouTrack: authentication bypass

    on the board → past orders

    Only news is a public PoC for a CVE published 2026-09-07 Source

30. Fix found 24 Oct 2026, 06:14 UTC JetBrains YouTrack: authentication bypass

    none → 2025.3.161254, 2026.1.14042

    Vendor's CVE record for CVE-2026-86478: fixed in YouTrack 2025.3.161254 Source

31. Re-plated 24 Oct 2026, 06:14 UTC JetBrains YouTrack: authentication bypass

    On hold (status unknown) → Order up (fix available)

    Vendor's CVE record for CVE-2026-86478: fixed in YouTrack 2025.3.161254 Source

32. Off the board 24 Oct 2026, 06:14 UTC Spring Boot: critical vulnerability

    on the board → past orders

    Only news is a public PoC for a CVE published 2026-04-27 Source

33. Fix found 24 Oct 2026, 06:14 UTC Spring Boot: critical vulnerability

    none → Spring Boot 4.0.6, org.springframework.boot:spring-boot 4.0.6

    Vendor's CVE record for CVE-2026-40976: fixed in Spring Boot 4.0.6 Source

34. Re-plated 24 Oct 2026, 06:14 UTC Spring Boot: critical vulnerability

    On hold (status unknown) → Order up (fix available)

    Vendor's CVE record for CVE-2026-40976: fixed in Spring Boot 4.0.6 Source

35. Fix found 24 Oct 2026, 06:14 UTC Gitea's Org-mode markup renderer processes INCLUDE directives supplied to the repository m

    none → 1.27.1

    Vendor's CVE record for CVE-2026-59774: fixed in Gitea 1.27.1 Source

36. Re-plated 24 Oct 2026, 06:14 UTC Gitea's Org-mode markup renderer processes INCLUDE directives supplied to the repository m

    On hold (status unknown) → Order up (fix available)

    Vendor's CVE record for CVE-2026-59774: fixed in Gitea 1.27.1 Source

37. Re-plated 24 Oct 2026, 06:14 UTC Oracle Java SE: trusts compromised eMudhra CA certificates

    On hold (status unknown) → Order up (fix available)

    Oracle Security Alert for CVE-2026-91403: "To address this CVE, update to the latest Java version or apply the recommended mitigations." Source

38. Off the board 24 Oct 2026, 06:14 UTC GeoTools: SQL injection

    on the board → past orders

    Only news is a public PoC for a CVE published 2026-08-21 Source

39. Fix found 24 Oct 2026, 06:14 UTC GeoTools: SQL injection

    none → org.geotools.jdbc:gt-jdbc-postgis 35.1, org.geotools.jdbc:gt-jdbc-postgis 34.5, org.geotools.jdbc:gt-jdbc-postgis 33.6

    GitHub advisory for CVE-2026-76904: fixed in org.geotools.jdbc:gt-jdbc-postgis 35.1 Source

40. Re-plated 24 Oct 2026, 06:14 UTC GeoTools: SQL injection

    On hold (status unknown) → Order up (fix available)

    GitHub advisory for CVE-2026-76904: fixed in org.geotools.jdbc:gt-jdbc-postgis 35.1 Source

41. Off the board 24 Oct 2026, 06:14 UTC Forminator Forms: remote code execution

    on the board → past orders

    Only news is a public PoC for a CVE published 2026-08-18 Source

42. Off the board 24 Oct 2026, 06:14 UTC PII: remote code execution

    on the board → past orders

    Only news is a public PoC for a CVE published 2026-06-02 Source

43. Fix found 24 Oct 2026, 06:14 UTC PII: remote code execution

    none → 1.5.2, openmed 1.5.2

    Vendor's CVE record for CVE-2026-47117: fixed in openmed 1.5.2 Source

44. Re-plated 24 Oct 2026, 06:14 UTC PII: remote code execution

    On hold (status unknown) → Order up (fix available)

    Vendor's CVE record for CVE-2026-47117: fixed in openmed 1.5.2 Source

45. Off the board 24 Oct 2026, 06:14 UTC Python StateMachine: remote code execution

    on the board → past orders

    Only news is a public PoC for a CVE published 2026-06-17 Source

46. Fix found 24 Oct 2026, 06:14 UTC Python StateMachine: remote code execution

    none → 3.2.0, python-statemachine 3.2.0

    Vendor's CVE record for CVE-2026-47103: fixed in python-statemachine 3.2.0 Source

47. Re-plated 24 Oct 2026, 06:14 UTC Python StateMachine: remote code execution

    On hold (status unknown) → Order up (fix available)

    Vendor's CVE record for CVE-2026-47103: fixed in python-statemachine 3.2.0 Source

48. Off the board 24 Oct 2026, 06:14 UTC Oracle WebLogic Server: critical vulnerability

    on the board → past orders

    Only news is a public PoC for a CVE published 2026-07-21 Source

49. Off the board 24 Oct 2026, 06:14 UTC NGINX Plus: remote code execution

    on the board → past orders

    Only news is a public PoC for a CVE published 2026-07-15 Source

50. Fix found 24 Oct 2026, 06:14 UTC NGINX Plus: remote code execution

    none → NGINX Plus 37.0.3.1, NGINX Plus R36 P7, NGINX Open Source 1.31.3, NGINX Open Source 1.30.4

    Vendor's CVE record for CVE-2026-42533: fixed in NGINX Plus 37.0.3.1 Source

51. Re-scored 24 Oct 2026, 06:14 UTC NGINX Plus: remote code execution

    critical → high

    CVSS 3.1 8.1 (the vendor) for CVE-2026-42533 Source

52. Re-plated 24 Oct 2026, 06:14 UTC NGINX Plus: remote code execution

    On hold (status unknown) → Order up (fix available)

    Vendor's CVE record for CVE-2026-42533: fixed in NGINX Plus 37.0.3.1 Source

53. Off the board 24 Oct 2026, 06:14 UTC ServiceNow: remote code execution

    on the board → past orders

    Only news is a public PoC for a CVE published 2026-07-13 Source

54. Fix found 24 Oct 2026, 06:14 UTC ServiceNow: remote code execution

    none → Australia Patch 2, Yokohama Patch 12 Hot Fix 1b, Yokohama Patch 13, Zurich Patch 7b, Zurich Patch 9

    Vendor's CVE record for CVE-2026-6875: fixed in ServiceNow AI Platform Australia Patch 2 Source

55. Re-plated 24 Oct 2026, 06:14 UTC ServiceNow: remote code execution

    On hold (status unknown) → Order up (fix available)

    Vendor's CVE record for CVE-2026-6875: fixed in ServiceNow AI Platform Australia Patch 2 Source

56. Off the board 24 Oct 2026, 06:14 UTC Windows: memory corruption

    on the board → past orders

    Only news is a public PoC for a CVE published 2026-05-12 Source

57. Fix found 24 Oct 2026, 06:14 UTC Windows: memory corruption

    none → Windows Server 2012 6.2.9200.26079, Windows Server 2012 R2 6.3.9600.23181, Windows Server 2016 10.0.14393.9140, Windows Server 2019 10.0.17763.8755, Windows Server 2022 10.0.20348.5139, Windows Server 2022, 23H2 Edition (Server Core installation) 10.0.25398.2330, Windows Server 2025 10.0.26100.32860

    Vendor's CVE record for CVE-2026-41089: fixed in Windows Server 2012 6.2.9200.26079 Source

58. Re-plated 24 Oct 2026, 06:14 UTC Windows: memory corruption

    On hold (status unknown) → Order up (fix available)

    Vendor's CVE record for CVE-2026-41089: fixed in Windows Server 2012 6.2.9200.26079 Source

59. Off the board 24 Oct 2026, 06:14 UTC Invixium IXM WEB: critical vulnerability

    on the board → past orders

    Only news is a public PoC for a CVE published 2026-07-10 Source

60. Off the board 24 Oct 2026, 06:14 UTC Gitea Docker image versions up to and including 1.26.2 use REVERSE_PROXY_TRUSTED_PROXIES=*

    on the board → past orders

    Only news is a public PoC for a CVE published 2026-07-03 Source

61. Fix found 24 Oct 2026, 06:14 UTC Gitea Docker image versions up to and including 1.26.2 use REVERSE_PROXY_TRUSTED_PROXIES=*

    none → code.gitea.io/gitea 1.26.3

    GitHub advisory for CVE-2026-20896: fixed in code.gitea.io/gitea 1.26.3 Source

62. Re-plated 24 Oct 2026, 06:14 UTC Gitea Docker image versions up to and including 1.26.2 use REVERSE_PROXY_TRUSTED_PROXIES=*

    On hold (status unknown) → Order up (fix available)

    GitHub advisory for CVE-2026-20896: fixed in code.gitea.io/gitea 1.26.3 Source

63. Off the board 24 Oct 2026, 06:14 UTC Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.4

    on the board → past orders

    Only news is a public PoC for a CVE published 2026-07-01 Source

64. Fix found 24 Oct 2026, 06:14 UTC Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.4

    none → 150.0.7871.46

    Vendor's CVE record for CVE-2026-14382: fixed in Chrome 150.0.7871.46 Source

65. Re-plated 24 Oct 2026, 06:14 UTC Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.4

    On hold (status unknown) → Order up (fix available)

    Vendor's CVE record for CVE-2026-14382: fixed in Chrome 150.0.7871.46 Source

66. Off the board 24 Oct 2026, 06:14 UTC Apache Airflow: authentication bypass

    on the board → past orders

    Only news is a public PoC for a CVE published 2026-07-29 Source

67. Fix found 24 Oct 2026, 06:14 UTC Apache Airflow: authentication bypass

    none → apache-airflow-providers-fab 3.7.3

    Vendor's CVE record for CVE-2026-59243: fixed in apache-airflow-providers-fab 3.7.3 Source

68. Re-plated 24 Oct 2026, 06:14 UTC Apache Airflow: authentication bypass

    On hold (status unknown) → Order up (fix available)

    Vendor's CVE record for CVE-2026-59243: fixed in apache-airflow-providers-fab 3.7.3 Source

69. Fix found 24 Oct 2026, 06:14 UTC Citrix NetScaler ADC: memory corruption

    none → 14.1-73.37, 14.1-73.37 FIPS, 13.1-64.23, 13.1-37.279 and NDcPP, 13.1.37.279 FIPS and NDcPP

    Vendor's CVE record for CVE-2026-88773: fixed in ADC 14.1-73.37 Source

70. Re-plated 24 Oct 2026, 06:14 UTC Citrix NetScaler ADC: memory corruption

    On hold (status unknown) → Order up (fix available)

    Vendor's CVE record for CVE-2026-88773: fixed in ADC 14.1-73.37 Source

71. Off the board 24 Oct 2026, 06:14 UTC Linux kernel: critical vulnerability

    on the board → past orders

    Only news is a public PoC for a CVE published 2026-08-10 Source

72. Off the board 24 Oct 2026, 06:14 UTC Flowise: critical vulnerability

    on the board → past orders

    Only news is a public PoC for a CVE published 2026-08-04 Source

73. Fix found 24 Oct 2026, 06:14 UTC Flowise: critical vulnerability

    none → flowise 3.1.3, flowise-components 3.1.3

    GitHub advisory for CVE-2026-69254: fixed in flowise 3.1.3 Source

74. Re-plated 24 Oct 2026, 06:14 UTC Flowise: critical vulnerability

    On hold (status unknown) → Order up (fix available)

    GitHub advisory for CVE-2026-69254: fixed in flowise 3.1.3 Source

75. Fix found 24 Oct 2026, 06:14 UTC Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks

    github.com/argoproj/argo-cd/v3 3.3.15, github.com/argoproj/argo-cd/v3 3.4.10, github.com/argoproj/argo-cd/v3 3.5.4, github.com/argoproj/argo-cd/v3 3.6.0-rc2 → github.com/argoproj/argo-cd/v3 3.3.15, github.com/argoproj/argo-cd/v3 3.4.10, github.com/argoproj/argo-cd/v3 3.5.4

    GitHub advisory for CVE-2026-77459: fixed in github.com/argoproj/argo-cd/v3 3.3.15 Source

76. Re-plated 24 Oct 2026, 06:14 UTC Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks

    Order up (fix available) → 86'd (no fix yet)

    GitHub advisory for CVE-2026-77459: fixed in github.com/argoproj/argo-cd/v3 3.3.15 Source

77. Fix found 24 Oct 2026, 06:14 UTC PHP: session upload progress RCE in an unusual configuration

    PHP 8.5.12, PHP 8.4.27, PHP 8.3.36, PHP 8.2.35 → none

    php.net: a separate, unlikely RCE vector (needs the session serialize handler switched at runtime). Fixed in the next regular bugfix release, not in the PHP2Shell releases; no CVSS published yet. Source

78. Re-scored 24 Oct 2026, 06:14 UTC PHP: session upload progress RCE in an unusual configuration

    critical → unknown

    php.net: a separate, unlikely RCE vector (needs the session serialize handler switched at runtime). Fixed in the next regular bugfix release, not in the PHP2Shell releases; no CVSS published yet. Source

79. Re-plated 24 Oct 2026, 06:14 UTC PHP: session upload progress RCE in an unusual configuration

    Order up (fix available) → 86'd (no fix yet)

    php.net: a separate, unlikely RCE vector (needs the session serialize handler switched at runtime). Fixed in the next regular bugfix release, not in the PHP2Shell releases; no CVSS published yet. Source

80. Spreading 24 Oct 2026, 06:14 UTC HTTP2Shell

    Now hitting Python (Brotli) too

    Python (Brotli) fixed in 1.2.1 Source

81. Fix found 24 Oct 2026, 06:14 UTC HTTP2Shell

    none → Node.js 26.12.1, Node.js 24.22.1, Node.js 22.23.4, Brotli 1.0.10, Brotli 1.1.1, Brotli 1.2.1

    Vendor advisory: fixed in Node.js 26.12.1 Source

82. Re-plated 24 Oct 2026, 06:14 UTC HTTP2Shell

    86'd (no fix yet) → Order up (fix available)

    Vendor advisory: fixed in Node.js 26.12.1 Source

83. Fix found 24 Oct 2026, 06:14 UTC Kiloview E3 NDI Encoder Vulnerabilities

    1.30 → V1.30

    CISA advisory icsa-26-295-01: vendor fix V1.30 Source

84. Heat checked 24 Oct 2026, 06:14 UTC Kiloview E3 NDI Encoder Vulnerabilities

    exploited → no known exploitation

    No known public exploitation specifically targeting these vulnerabilities has been reported to CISA at this time. Source

85. Fix found 24 Oct 2026, 06:14 UTC Siemens Software Center Uncontrolled Search Path Element Vulnerability

    none → V4.0.9.8

    CISA advisory icsa-26-295-03: vendor fix V4.0.9.8 Source

86. Re-scored 24 Oct 2026, 06:14 UTC Siemens Software Center Uncontrolled Search Path Element Vulnerability

    high → medium

    CVSS 3.1 6.7 (the vendor) for CVE-2026-110936 Source

87. Re-plated 24 Oct 2026, 06:14 UTC Siemens Software Center Uncontrolled Search Path Element Vulnerability

    On hold (status unknown) → Order up (fix available)

    CISA advisory icsa-26-295-03: vendor fix V4.0.9.8 Source

88. Fix found 24 Oct 2026, 06:14 UTC Arista VeloCloud Orchestrator SQL Injection Vulnerability

    none → 5.2.3.18, 6.1.3.10, 6.4.2.12

    Vendor's CVE record for CVE-2026-114625: fixed in VeloCloud Orchestrator 5.2.3.18 Source

89. Re-plated 24 Oct 2026, 06:14 UTC Arista VeloCloud Orchestrator SQL Injection Vulnerability

    On hold (status unknown) → Order up (fix available)

    Vendor's CVE record for CVE-2026-114625: fixed in VeloCloud Orchestrator 5.2.3.18 Source

90. Fix found 24 Oct 2026, 06:14 UTC Collabora Online – Built-in CODE Server OS Command Injection Vulnerability

    none → 26.4.303

    Vendor's CVE record for CVE-2026-110447: fixed in Collabora Online - Built-in CODE Server 26.4.303 Source

91. Re-plated 24 Oct 2026, 06:14 UTC Collabora Online – Built-in CODE Server OS Command Injection Vulnerability

    On hold (status unknown) → Order up (fix available)

    Vendor's CVE record for CVE-2026-110447: fixed in Collabora Online - Built-in CODE Server 26.4.303 Source

92. Fix found 24 Oct 2026, 06:14 UTC EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability

    none → SiteGuard Server Edition for Apache httpd Ver8.00 Update 5, SiteGuard Server Edition for Apache httpd on FreeBSD Ver7.00 Update 6

    Vendor's CVE record for CVE-2026-106931: fixed in SiteGuard Server Edition for Apache httpd Ver8.00 Update 5 Source

93. Re-plated 24 Oct 2026, 06:14 UTC EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability

    On hold (status unknown) → Order up (fix available)

    Vendor's CVE record for CVE-2026-106931: fixed in SiteGuard Server Edition for Apache httpd Ver8.00 Update 5 Source

94. Off the board 24 Oct 2026, 06:14 UTC Siemens SENTRON 3NA COM Fuse Denial-of-Service Vulnerability

    on the board → past orders

    CVE published 2025-01-15, over a year ago, and not newly added to KEV Source

95. Fix found 24 Oct 2026, 06:14 UTC Siemens SENTRON 3NA COM Fuse Denial-of-Service Vulnerability

    none → V5.2

    CISA advisory icsa-26-295-05: vendor fix V5.2 Source

96. Heat checked 24 Oct 2026, 06:14 UTC Siemens SENTRON 3NA COM Fuse Denial-of-Service Vulnerability

    exploited → no known exploitation

    No strong exploitation signal: no KEV listing, vendor statement or reputable report.

97. Re-plated 24 Oct 2026, 06:14 UTC Siemens SENTRON 3NA COM Fuse Denial-of-Service Vulnerability

    On hold (status unknown) → Order up (fix available)

    CISA advisory icsa-26-295-05: vendor fix V5.2 Source

98. Re-scored 24 Oct 2026, 06:14 UTC InterSystems IRIS for Health Cleartext Transmission of Sensitive Information

    critical → high

    CVSS 3.1 8.1 (the vendor) for CVE-2026-111594 Source

99. Heat checked 24 Oct 2026, 06:14 UTC InterSystems IRIS for Health Cleartext Transmission of Sensitive Information

    exploited → no known exploitation

    No known public exploitation specifically targeting this vulnerability has been reported to CISA at this time. Source

100. Re-plated 24 Oct 2026, 06:14 UTC InterSystems IRIS for Health Cleartext Transmission of Sensitive Information

     On hold (status unknown) → 86'd (no fix yet)

     CISA advisory icsma-26-295-01: no vendor fix, only a mitigation: InterSystems recommends users configure IRIS superserver to require SSL/TLS Note that there are three settings: "Disabled", which means that client communications do not use TLS. Source

101. Fix found 24 Oct 2026, 06:14 UTC Plex Media Server External Control of File Name or Path Vulnerability

     none → 1.43.3.10861

     Vendor's CVE record for CVE-2026-96652: fixed in Media Server 1.43.3.10861 Source

102. Re-plated 24 Oct 2026, 06:14 UTC Plex Media Server External Control of File Name or Path Vulnerability

     86'd (no fix yet) → Order up (fix available)

     Vendor's CVE record for CVE-2026-96652: fixed in Media Server 1.43.3.10861 Source

103. Source moved 24 Oct 2026, 06:14 UTC LiteLLM Supply Chain Attack

     Microsoft blames ConnectWise attacks on Chinese state hacker using ARTEX AI agents → moved to connectwise-cloud-backup-security-incident

     The source doesn't mention litellm Source

104. Source moved 24 Oct 2026, 06:14 UTC PHP: session upload progress RCE in an unusual configuration

     URGENT - PHP Warns of Another Unpatched RCE Two Days After Emergency PHP2Shell Patches → moved to php2shell-bugs

     The headline names PHP2Shell, not CVE-2026-115560 Source

105. Source moved 24 Oct 2026, 06:14 UTC PHP: session upload progress RCE in an unusual configuration

     Widespread PHP Flaw May Cause Many Site Outages Today → moved to php2shell-bugs

     The article is about CVE-2026-109618, not CVE-2026-115560 Source

106. Source moved 24 Oct 2026, 06:14 UTC PHP: session upload progress RCE in an unusual configuration

     PHP Issues Emergency Patches for Two Critical PHP2Shell RCE Flaws as Exploit Attempts Emerge → moved to php2shell-bugs

     The headline names PHP2Shell, not CVE-2026-115560 Source

107. Source moved 24 Oct 2026, 06:14 UTC PHP: session upload progress RCE in an unusual configuration

     PHP2Shell: What Actually Protects You Before the 14:00 UTC PHP RCE Patch, and What Doesn't → moved to php2shell-bugs

     The headline names PHP2Shell, not CVE-2026-115560 Source

108. Source moved 24 Oct 2026, 06:14 UTC PHP: session upload progress RCE in an unusual configuration

     PHP2Shell: Two Unpatched Critical PHP RCE Flaws (CVSS 9.2) Trigger Emergency Security Alert → moved to php2shell-bugs

     The headline names PHP2Shell, not CVE-2026-115560 Source

109. Source moved 24 Oct 2026, 06:14 UTC x402 SDK Flaw

     Attackers Exploit Third VeloCloud Orchestrator Zero-Day in Four Months → moved to arista-velocloud-orchestrator-sql-injection-vulnerabilit-cve-2026-114625

     The source doesn't mention x402 Source

110. Source moved 24 Oct 2026, 06:14 UTC Arista VeloCloud Orchestrator SQL Injection Vulnerability

     Atlassian Patches 75 Flaws in Data Center and Server Products → dropped

     The source doesn't mention CVE-2026-114625 or velocloud orchestrator Source

111. Merged 24 Oct 2026, 06:14 UTC gitlab-critical-patch-release

     live → merged into another ticket

     The report names CVE-2026-110264 Source

112. Merged 24 Oct 2026, 06:14 UTC node-js-brotli-decoder-bug

     live → merged into another ticket

     Names HTTP2Shell, which is CVE-2026-111497 Source

113. Merged 24 Oct 2026, 06:14 UTC gitlab-max-severity-bug-allows-remote-code-execution

     live → merged into another ticket

     The report names CVE-2026-110264 Source