Citrix confirmed CVE-2026-88779, a third exploited NetScaler zero-day, after appliances patched against the previous two began rebooting under attack. The vendor rates it denial of service, though logged payloads and a researcher's honeypot point toward code execution.
Perspective Coverage
11 publishers
- Builder
- Builder 19%
- Operator
- Operator 68%
- Investor
- Investor 13%
Reality
- Evidence78
- Adoption
- Not scored
- Hype gap+20
- Incentives50
- Confidence70
The licence plate reader company is making most of its new safeguards mandatory on 1 January, after its chief executive conceded that optional abuse controls sat unused at two-thirds of agencies.
Perspective Coverage
7 publishers
- Builder
- Builder 32%
- Operator
- Operator 47%
- Investor
- Investor 21%
Reality
- Evidence70
- Adoption35
- Hype gap+35
- Incentives70
- Confidence65
A crafted URL runs attacker script inside an authenticated Teamcenter session
CVE-2026-58113 sits in the /auth/ redirect flow of Siemens Teamcenter. The attacker needs no credentials and no more than a link an engineer loads, and Siemens has shipped fixed builds for four release branches.
Reality
- Evidence74
- Adoption18
- Hype gap+8
- Incentives45
- Confidence66
buildOne report1 publisher PMapper throws away four minutes of IAM graph work when one region times out
PMapper writes nothing to disk until all nine edge checks finish, and one silent endpoint is enough to erase the entire account map. cloudfox, the tool that did run, still ships a privilege-escalation column, but every cell in it just points back to PMapper.
Reality
- Evidence62
- Adoption25
- Hype gap−10
- Incentives25
- Confidence55
buildOne report1 publisher One unauthenticated SAML request reaches root on NetScaler before signature verification runs
The overflow in CVE-2026-8452 sits in PrefixList canonicalization, which NetScaler performs before it validates the SAML signature, so an attacker needs no trust with your IdP and only a reachable virtual server with SAML turned on.
Reality
- Evidence56
- Adoption63
- Hype gap−8
- Incentives44
- Confidence55
One static binary now decrypts FortiOS firmware end to end, key included
fortitool folds a scatter of version-specific scripts into one dependency-free Go binary, and the drop in cost to inspect a Fortinet appliance lands the same for a defender and an attacker.
Publishers:blog.n0p.me
Reality
- Evidence55
- Adoption
- Not scored
- Hype gap+12
- Incentives45
- Confidence52
Flock now asks officers to type a criminal case number before searching its plate-reader network. It told MIT Technology Review it does not verify the numbers.
Reality
- Evidence76
- Adoption64
- Hype gap+42
- Incentives78
- Confidence74