Palo Alto's May advisory reports exploit attempts on a GlobalProtect VPN bypass for cookie-enabled firewalls
Palo Alto Networks' May 13, 2026 advisory for CVE-2026-0257 rates the 7.8-score GlobalProtect bypass at highest urgency after limited exploit attempts. Exposure needs authentication override cookies plus a specific certificate setup, and the fix costs users one re-login.
Publishers:security.paloaltonetworks.com
Reality
- Evidence55
- Adoption
- Not scored
- Hype gap
- Not scored
- Incentives
- Not scored
- Confidence60
buildConfirmed2 publishers Noma Security reported that Claude Code Desktop's preview ran scripts in HTML files over 256KB, a flaw Anthropic fixed in 1.30096.1. Those scripts could read SSH keys, AWS credentials and GitHub tokens, so previewed repo files should be handled as untrusted code.
Reality
- Evidence58
- Adoption
- Not scored
- Hype gap+15
- Incentives40
- Confidence68
Each of the five NGINX flaws fixed on October 14 needs a directive the admin added
NGINX 1.30.6 and 1.31.7, released October 14, fix five flaws, three of them memory bugs that F5 scores 9.2 Critical on CVSS v4.0. F5 scores a fourth, in TLS session handling, at 8.3; it may let a forged session past client-certificate checks.
Reality
- Evidence62
- Adoption
- Not scored
- Hype gap+8
- Incentives
- Not scored
- Confidence60
GitLab patches a CVSS 10.0 code-execution flaw across its 19.2, 19.3 and 19.4 lines
GitLab released critical patches 19.4.2, 19.3.5 and 19.2.8 on October 12 to fix a CVSS 10.0 code-execution flaw. Self-managed installations are told to upgrade immediately, while GitLab.com is already patched and Dedicated customers need do nothing.
Publishers:docs.gitlab.com
Reality
- Evidence68
- Adoption
- Not scored
- Hype gap0
- Incentives
- Not scored
- Confidence72
Re-graded against their environments, 75.1% of HIGH cloud findings changed severity
Sola Security's AI agent changed the grade of 75.1% of 9,967 HIGH cloud findings; 58.5% of the total moved down. The researchers argue that one fixed severity per rule misorders queues because it ignores the environment around each resource.
Reality
- Evidence58
- Adoption
- Not scored
- Hype gap+15
- Incentives
- Not scored
- Confidence60
buildOne report1 publisher GuardDuty promotes weak runtime signals to CRITICAL once Inspector, Macie and Security Hub add context
Amazon GuardDuty Extended Threat Detection began attaching five new indicator types to attack sequences on May 20, 2026. Each indicator depends on a separate service being enabled, so what you get tracks what you already run.
Reality
- Evidence45
- Adoption
- Not scored
- Hype gap+30
- Incentives60
- Confidence55
buildOne report1 publisher F5 BIG-IP APM virtual servers with an OAuth Authorization Server profile carry a 9.8 code-execution flaw
F5 published CVE-2026-94127, a CVSS 9.8 heap overflow in BIG-IP APM that lets an attacker run code without credentials. Only virtual servers that pair an access policy with an OAuth Authorization Server profile are exposed, so the configuration check comes first.
Reality
- Evidence62
- Adoption
- Not scored
- Hype gap0
- Incentives
- Not scored
- Confidence64
buildOne report1 publisher OSV.dev returned 'not found' for five vLLM advisories that 0.31.0 fixes
vLLM published more than 30 security advisories on GitHub between 12 September and 9 October, most without a CVE ID, a dev.to author reports. The author's five OSV.dev lookups came back empty, so a clean scanner run says little about any server below 0.31.0.
Reality
- Evidence40
- Adoption
- Not scored
- Hype gap+20
- Incentives40
- Confidence45
buildOne report1 publisher Super Forms' second critical flaw in 2026 lets a form submission delete WordPress directories
Super Forms CVE-2026-17609 (CVSS 9.1) lets unauthenticated visitors recursively delete server directories when file cleanup is enabled. Versions through 6.3.316 are affected, and 6.3.317 fixes it, a dev.to analysis says.
Reality
- Evidence50
- Adoption
- Not scored
- Hype gap+15
- Incentives
- Not scored
- Confidence55
buildOne report1 publisher GROWI 7.5.5 closes an anonymous file read on wikis that store uploads locally
GROWI, Inc. shipped GROWI 7.5.5 to close CVE-2026-100727, a flaw letting visitors with no account read files from non-public pages on local-upload wikis. Because the read needs no login, any reachable Local-mode instance on an older release is a patch-now item.
Reality
- Evidence55
- Adoption30
- Hype gap+5
- Incentives
- Not scored
- Confidence50
Atlassian disclosed a 9.3-rated flaw, CVE-2026-21589, that lets attackers with no login read known files in 8 self-hosted Data Center products. It wants internet-facing instances taken offline or cut off from outside access until they are upgraded or behind a blocking rule.
Perspective Coverage
15 publishers
- Builder
- Builder 24%
- Operator
- Operator 75%
- Investor
- Investor 1%
Reality
- Evidence72
- Adoption58
- Hype gap−20
- Incentives68
- Confidence68
Exploited Zammad bug leaks helpdesk session cookies through Ruby error output
CISA added Zammad's unauthenticated WebSocket session-disclosure flaw, CVE-2026-102489, to its exploited-vulnerabilities catalog on October 2. The fix ships in Zammad 7.2.0, leaving teams on the unsupported 6.5-and-earlier releases to make a major-version jump.
Reality
- Evidence58
- Adoption
- Not scored
- Hype gap+5
- Incentives70
- Confidence55
SonicWall patches a CVSS 10 pre-login SSRF flaw in its SMA1000 appliances
SonicWall patched four SMA1000 flaws, led by CVE-2026-102255, a CVSS 10 request-forgery bug that an attacker can use without logging in. The company says none of the four is being exploited, so owners who update now are ahead of any known attack.
Reality
- Evidence58
- Adoption
- Not scored
- Hype gap+5
- Incentives
- Not scored
- Confidence62
Six 10.0s in the control plane, and nothing in your patch queue to show for it
Microsoft shipped 22 updates, six of them scored 10.0, mostly in Entra ID, Exchange Online and Azure. Fixed server-side is not the same as verified in your tenant.
Reality
- Evidence58
- Adoption55
- Hype gap0
- Incentives
- Not scored
- Confidence52
Microsoft issued an out-of-band Exchange Server fix for CVE-2026-96940, a bug letting signed-in attackers read colleagues' mail and attachments. The company expects the flaw to be consistently exploitable, so on-premises admins have good reason to install it ahead of the next maintenance window.
Perspective Coverage
3 publishers
- Builder
- Builder 15%
- Operator
- Operator 80%
- Investor
- Investor 5%
Reality
- Evidence74
- Adoption
- Not scored
- Hype gap0
- Incentives
- Not scored
- Confidence70
buildOne report1 publisher Patching FortiMail leaves the reboot-surviving ld.so.preload backdoor in place on exposed appliances
Fortinet confirmed a 9.8-rated, unauthenticated file-write zero-day in FortiMail that attackers are using to drop a reboot-surviving ld.so.preload rootkit. Patching closes the hole but leaves any implant already on the appliance in place.
Reality
- Evidence50
- Adoption
- Not scored
- Hype gap+5
- Incentives
- Not scored
- Confidence55
buildOne report1 publisher CrewAI deletes its code-sandbox blocklist after ctypes.CDLL(None) bypassed all nine names
MITRE rated CrewAI's nine-name code-sandbox blocklist a CVSS 8.1 flaw, bypassed by a call that executes no import. The fix removed the feature, so teams running agent-written code need isolation at the OS or process level.
Reality
- Evidence55
- Adoption
- Not scored
- Hype gap0
- Incentives
- Not scored
- Confidence50
buildOne report1 publisher Four MCP servers drew CVEs for exposing every tool without authentication
NVD logged CVEs for four MCP servers in about 35 hours, each because every tool it exposes needs no authentication. A fifth MCP flaw, LiteLLM's authentication bypass, is already on CISA's exploited-vulnerabilities list.
Reality
- Evidence62
- Adoption58
- Hype gap−6
- Incentives45
- Confidence52
buildOne report1 publisher vm2's prefix allowlist let one approved module load its unapproved siblings
vm2's maintainer patched a CVSS 9.5 flaw in 3.12.2 where the module allowlist matched an approved path as a bare prefix and cleared a neighboring package. With NodeVM's default host context, the unapproved sibling ran with full Node authority.
Reality
- Evidence62
- Adoption
- Not scored
- Hype gap+8
- Incentives
- Not scored
- Confidence58
buildOne report1 publisher Two known-exploited Chromium V8 bugs lead September's 36 device CVEs beyond the kernel
TECH VEDA counts 36 actionable device CVEs across 14 non-kernel packages in September, two of them Chromium V8 bugs on CISA's exploited list. How many apply to a given fleet depends on each image's SBOM and on which scorer a team trusts.
Reality
- Evidence55
- Adoption
- Not scored
- Hype gap+5
- Incentives
- Not scored
- Confidence50
Earlier coverage
- Google traces most of 2026's exploitation growth to fast n-day weaponization
Security · September 30, 2026 · Confirmed4 publishers
- OpenSSL patches a DTLS flaw that sends heap memory to unauthenticated peers
Security · September 30, 2026 · Confirmed3 publishers
- Forminator's 9.8 upload bug was fixed on July 31. The hard part is knowing you run it
Security · August 17, 2026 · Confirmed2 publishers
- Rapid7 counted 8,539 high-severity CVEs and 40 exploited ones. Patch coverage is now a vanity metric
Security · August 18, 2026 · Confirmed3 publishers
- Cisco's control planes are the exposure: four criticals in Crosswork, four in Secure Workload
Security · August 20, 2026 · Confirmed3 publishers
- One clicked link creates an attacker admin on Elementor 4.3.0 and 4.3.1
Security · September 26, 2026 · Confirmed2 publishers
- Five critical WordPress flaws hand attackers full site takeover
Security · August 30, 2026 · One report1 publisher
- Check Point patches two 9.8 VPN certificate flaws without naming what triggers them
Security · September 10, 2026 · Confirmed5 publishers
- Telegram Desktop exports made before July 14 still carry a bot's injected JavaScript
Security · September 14, 2026 · Confirmed2 publishers
- Attackers began probing WSO2's JWT bypass 133 days after the fixes went out
Build · September 17, 2026 · Confirmed2 publishers
- Attackers are exploiting CVE-2026-93952 in VeloCloud Orchestrators that authenticate Edges by certificate
Security · September 22, 2026 · Confirmed4 publishers
- A crafted request to one Cisco ISE API endpoint reaches root without a credential
Build · September 19, 2026 · Confirmed2 publishers