search
CVSS
Trends
- 1Privilege management flaw CVE-2026-93968 flagged in SxDevOpsโCVE-2026-93968: improper privilege management in SxDevOps 1.0/1.1 (UserSerializer update, backend/rbac/serializers.py),
A security advisory, CVE-2026-93968, describes an improper privilege management vulnerability in SxDevOps versions 1.0 and 1.1, located in the UserSerializer update handling in backend/rbac/serializers.py. The flaw is rated remotely exploitable with a CVSS score of 3.8. A patch with commit reference 2b4bf8585c3e is circulating, but its official status remains unconfirmed, and users are being urged to apply it.
- 2Google Cloud XSS vulnerability disclosed in Firebase Authenticationโ๐จ EUVD-2026-113761 ๐ Score: 8.7/10 (CVSS v3.1) ๐ฆ Product: Identity Platform and Firebase Authentication ๐ข Vendor: Google
A high-severity cross-site scripting vulnerability, tracked as EUVD-2026-113761, has been disclosed in the auth/handler component of Google Cloud Identity Platform and Firebase Authentication. The flaw carries a CVSS v3.1 score of 8.7 and was updated on 30 October 2026. Security teams using Firebase login flows are advised to review the advisory and patch affected implementations.
- 3Critical 9.8 vulnerability disclosed in Dahua Intelligent Connection Centerโ๐จ EUVD-2025-211216 ๐ Score: 9.8/10 (CVSS v3.1) ๐ฆ Product: Intelligent Connection Center, Intelligent Connection Center ๐ข
A critical security vulnerability, tracked as EUVD-2025-211216, has been disclosed in Dahua's Intelligent Connection Center software. The flaw carries a CVSS v3.1 severity score of 9.8 out of 10, indicating it is close to the maximum possible severity. According to the disclosure, a remote attacker could send a specially crafted request to exploit the product. Security teams are likely reviewing exposure of Dahua equipment in their networks.
- 4TeamViewer Patches Critical Vulnerability Enabling Unauthorized Code ExecutionโTeamViewer has released a critical security update to address CVE-2026-111585, a high-severity vulnerability carrying a
TeamViewer has issued a critical security update fixing CVE-2026-111585, a high-severity flaw with a CVSS score of 8.8 that could allow unauthorized code execution on technician machines. The vulnerability was discovered by researchers at Remedio within the remote-control screen-sharing component, and users are being urged to apply the patch promptly to avoid potential exploitation.
- 5Critical Linux Kernel TCP Flaw Scores 9.8 on CVSSโLinux Kernel TCP Flaw With 9.8 CVSS Score Affects Ubuntu, Red Hat and Other Distributions https:// lemmy.today/post/6247
A critical vulnerability in the Linux kernel's TCP networking code, carrying a maximum CVSS severity score of 9.8, reportedly affects a wide range of distributions including Ubuntu and Red Hat. The flaw is drawing attention in open-source communities, where users are discussing exposure, affected versions and the need for prompt security patches across major distributions.
- 6Gravitl flags high-severity hardcoded credential flawโGravitl carries a single high-severity CVE at CVSS 7.5, a hardcoded credential flaw (CWE-798), with 0% unpatched and no
A security assessment of Gravitl, the networking software behind Netmaker, reports a single high-severity vulnerability with a CVSS score of 7.5: a hardcoded credential flaw classified as CWE-798. The report notes that no instances remain unpatched and the flaw has not appeared in the CISA Known Exploited Vulnerabilities catalog, calling the vendor's record otherwise clean.
- 7Brave browser facing 11 unpatched vulnerabilities, report claimsโBrave browser: 11 CVEs, max CVSS 9.8, and 100% remain unpatched. Trust score D. Patch gaps undercut the privacy pitch. #
A security assessment of Brave browser has found 11 CVEs, including flaws with a maximum CVSS severity of 9.8, none of which are reportedly patched, earning the browser a trust score of D. The report argues that these patching gaps undermine Brave's core pitch as a privacy-focused browser. No response from Brave is cited in the findings.
- 8Scoreboard (UK) flagged for unpatched cross-site scripting flawโScoreboard (UK) carries a C trust score with 100% of its 1 CVE unpatched, a CVSS 6.4 XSS (CWE-79). No KEV, but unpatched
UK-based vendor Scoreboard has received a C trust score after leaving its only known vulnerability unpatched, a cross-site scripting flaw (CWE-79) rated CVSS 6.4. The bug does not appear on the KEV exploited-vulnerabilities list, but commentators stress the software remains exposed. Security observers are urging organisations to review whether they use the product and assess their exposure.