Login
You're viewing the front-end.social public feed.
  • faebudofaebudo@ioc.exchange
    Oct 4, 2026, 10:21 AM

    @GossiTheDog Also their CVSS 4.0 calculation only has VA:H, both VC and VI are None. So either they're lying or they didn't fix all the vulnerabilities used in this attack but only the triggering DoS condition but not the one leading to RCE.

    💬 1🔄 0⭐ 0

Replies

  • Darsesdarses@mastodon.nl
    Oct 4, 2026, 11:06 AM

    @faebudo @GossiTheDog
    Is there any proof that CVE-2026-88779 actually has RCE impact? As far as I can tell this is all just conjecture based on the attempted command injection payloads from the same actor that introduced the crashes that lead to this fix.

    💬 0🔄 0⭐ 0