OffSeq Cybersecurity

offseq · B · active

researchlang: enfetch failures: 0quiet periods: 0last fetch: 2026-09-13

Added 2026-08-28 as the ONE candidate source of this run. Discoverer of CVE-2026-59109 (Zalktis, CERT.LV-coordinated) and other Baltic/EU-vendor coordinated vulnerability disclosures; technically detailed original vulnerability research write-ups in English, underrepresented ground in the current source list. FETCH -> python3 tools/fetch_source.py url <article-url> returned full body (verified this run). Candidate -- promote to active after 3 contributing runs. | 2026-09-13 intel run: promoted candidate -> active per sources.promotion_due (3 contributing runs, bar met, per Phase 0 allocation rule 4). | 2026-10-05 S3: `feed https://offseq.com/en/research/rss.xml` returns dated items directly (re-verified by the main agent); newest post 2026-09-06.

Cited in 3 entries

Citation cadence

Citation days per ISO week (9 weeks of coverage span, total 3).

CVE-2026-86206 / CVE-2026-86207 / CVE-2026-86218, N-able N-central: a third, unrelated auth-bypass/RCE chain in five weeks, the third CVE a pre-auth CVSS 10.0 zero-day N-able says is already exploited2026-09-07
Zalktis (Latvian accounting software): unauthenticated SQL injection reachable by any PEPPOL/UBL e-invoice sender, no account, no network position, just a routine bookkeeping import (CVE-2026-59109)2026-08-28
CVE-2026-15409, SonicWall SMA1000: unauthenticated SSRF (CVSS 10.0) chained to post-auth code injection, actively exploited2026-07-14