Topic

CVSS 10.0: news, advisories and analysis

6 articlesUpdated 22 Oct 2026

CyberSecureToday covers CVSS 10.0 across 6 articles published between 13 Sep 2026 and 22 Oct 2026. The coverage includes 4 vulnerability advisories, 1 incident or breach report and 1 analysis or guidance piece. 3 advisories are rated critical or high severity.

Stories on CVSS 10.0 most often intersect with Remote Code Execution, Cloud Security and Authentication Bypass, with Technology, Cloud & SaaS the most affected sector. The most recent story, “GitLab Patches Maximum-Severity CVSS 10.0 Unauthenticated RCE Flaw Spanning 12 Years of Releases”, was published 22 Oct 2026. Every article is listed below, newest first, with the affected products, severity and remediation guidance in each piece.

Latest coverage

ThreatsCloud & SaaS
GitLab Patches Maximum-Severity CVSS 10.0 Unauthenticated RCE Flaw Spanning 12 Years of Releases
GitLab has released emergency security updates resolving CVE-2026-110264, a critical CVSS 10.0 integer overflow in the Onigmo regular expression compiler enabling unauthenticated RCE.
CST Editorial Desk22 Oct 202612 min read
ThreatsIndustrial & OTCritical
Viidure Dashcam App Hardcoded Cloud Keys Expose Global Fleet Telemetry and Firmware
CISA advisory ICSA-26-272-07 reveals permanent hardcoded cloud storage credentials in the Viidure Dashcam app, exposing commercial fleets to full takeover.
Daniel Okafor2 Oct 20268 min read
ThreatsCloud & SaaSCritical
Microsoft Azure Arc Confused Deputy Flaw Enables Privilege Escalation Across Hybrid Clusters
Microsoft discloses critical CVSS 10.0 flaw CVE-2026-69399 in Azure Arc, enabling unauthenticated attackers to exploit confused deputy proxies across hybrid cloud nodes.
Daniel Okafor25 Sep 202618 min read
ThreatsCloud & SaaSCritical
Oracle WebLogic Server Flaw Allows Unauthenticated Remote Code Execution Across Java Clusters
Oracle's Critical Security Patch Update fixes maximum-severity CVSS 10.0 flaw CVE-2026-83021 in WebLogic Server Core enabling unauthenticated remote takeover.
Priya Raman22 Sep 202617 min read
InsightsCloud & SaaS
Microsoft Resolves CVSS 10.0 Azure AI Foundry Authentication Bypass and Privilege Escalation Flaw
Microsoft patches maximum-severity CVSS 10.0 flaw CVE-2026-85889 in Azure AI Foundry enabling unauthenticated remote network privilege escalation.
Aisha Noor18 Sep 202612 min read
Cyber AttackCloud & SaaS
Cisco Secure FMC authentication bypass CVE-2026-20079 exploited by Qilin ransomware affiliates
Threat actors and Qilin ransomware affiliates are actively weaponizing CVE-2026-20079 in Cisco Secure FMC to bypass web authentication and achieve root command execution.
Daniel Okafor13 Sep 20266 min read

Latest coverage

GitLab Patches Maximum-Severity CVSS 10.0 Unauthenticated RCE Flaw Spanning 12 Years of Releases

Viidure Dashcam App Hardcoded Cloud Keys Expose Global Fleet Telemetry and Firmware

Microsoft Azure Arc Confused Deputy Flaw Enables Privilege Escalation Across Hybrid Clusters

Oracle WebLogic Server Flaw Allows Unauthenticated Remote Code Execution Across Java Clusters

Microsoft Resolves CVSS 10.0 Azure AI Foundry Authentication Bypass and Privilege Escalation Flaw

Cisco Secure FMC authentication bypass CVE-2026-20079 exploited by Qilin ransomware affiliates