cvss 10

6 articles · newest first

A Ubiquiti UniFi Dream Machine network appliance, the kind of device affected by the newly patched UniFi OS vulnerability

Ubiquiti just shipped three perfect-10 security bugs in one bulletin — and one needs zero password

UniFi Protect, UniFi OS and UniFi Talk each got their own maximum-severity flaw this week — the fourth time this year a Ubiquiti bug has hit a perfect 10.

Ravi Malhotra · Aug 27 · 7 min

A business intelligence dashboard interface displaying charts and data tables, representative of the kind of analytics platform Metabase provides

Software

One free BI tool had a password-reset bug that handed out admin — hackers found it first

A single API endpoint let anyone become an administrator on thousands of self-hosted Metabase servers, and Framework, n8n and Kilo Code already got hit before the patch even shipped.

Priya Nair · Aug 24 · 7 min

Rows of networking equipment and server racks in a data center, the kind of infrastructure Cisco's Crosswork and Secure Workload platforms manage

Hardware

Cisco just found five perfect-10 bugs in its own network tools — before anyone else did

Nine vulnerabilities, five of them maximum severity, were sitting in the software that runs and secures corporate networks — Cisco caught them first, but that clock is already running.

Ravi Malhotra · Aug 24 · 6 min

Software

SAP patched a perfect-10 bug in its store software. Hackers cracked it in 3 days flat

CVE-2026-58231 scores a maximum 10.0 — and honeypots caught real exploitation attempts before most companies even applied the fix.

Priya Nair · Aug 20 · 7 min

Cloud server infrastructure representing Microsoft Azure services patched for critical vulnerabilities

Software

Microsoft just fixed three perfect-10 bugs in Azure and Teams — five days before Patch Tuesday

Three CVSS 10.0 vulnerabilities in Planetary Computer Pro, Azure SQL Database, and Teams got quietly patched on August 6 — completely outside Microsoft's scheduled August 11 Patch Tuesday.

Priya Nair · Aug 9 · 6 min

Data center backup infrastructure racks, representing the Veeam ONE monitoring platform affected by CVE-2026-64633

Software

the software that's supposed to save you from ransomware just scored a perfect 10

Veeam disclosed six vulnerabilities in Veeam ONE, and the worst one lets a stranger run code on your backup monitoring server with zero credentials — exactly the kind of hole ransomware crews go looking for first.

Priya Nair · Aug 6 · 7 min