Tag: enisa-critical
All entries tagged enisa-critical.
- 2026-W34 vulnerability status roll-up — seven flaws crossed into reported exploitation this week; six were catalogue listings against fixes that had existed for weeks or months, and the seventh went from out-of-band patch to exploitation in two days with no catalogue involved at all
- Five CVEs this week where the exploitation flag came apart — four where two authorities disagree outright, in both directions and once in this constituency's own national feed, and one where no feed had a flag to disagree about
- CVE-2026-58053 — Gitea act_runner Docker backend: container-hardening bypass to host escape (public PoC, ENISA-critical)
- CVE-2026-58053 — Gitea act_runner Docker backend: container-hardening bypass to host escape (CVSS 9.4, public PoC)
- CVE-2026-35087 / CVE-2026-35089 / CVE-2026-35090 — Slican PBX telephony exchanges, triple pre-authentication admin bypass (CERT Polska)
- CVE-2026-9058 — Szafir SDK (KIR): signature-verification routine reports success on an untrusted certificate chain, enabling auth bypass in Polish e-government