https://severitydaily.com/cisa-bod-26-04-replaced-22-01-table-1-png/ 2026-08-28T13:09:19-05:00 Severity Daily en 2026-08-28T12:52:11-05:00 BOD 22-01 has been dead since June. Its replacement ships the deadline matrix as a screenshot, and the first compliance date passed unremarked. https://severitydaily.com/wp-content/uploads/2026/08/bod-26-04-the-record.png https://severitydaily.com/corrections/ 2026-08-28T07:40:06-05:00 Severity Daily en 2026-08-28T07:36:27-05:00 Corrections https://severitydaily.com/jfrog-artifactory-cve-2026-66384-kev-july-patch-gap/ 2026-08-28T11:37:33-05:00 Severity Daily en 2026-08-28T11:37:14-05:00 A medium-severity Artifactory flaw is on a federal clock, and the version everyone patched to in July does not cover it https://severitydaily.com/wp-content/uploads/2026/08/jfrog-artifactory-cve-2026-66384-kev-july-patch-gap.png https://severitydaily.com/linux-kernel-cve-2026-53362-kev-openai-agent-exploitation/ 2026-08-28T11:37:32-05:00 Severity Daily en 2026-08-28T11:36:56-05:00 CISA put a Linux kernel container escape on a three-day clock. The only documented exploitation is OpenAI's own agents https://severitydaily.com/wp-content/uploads/2026/08/linux-kernel-cve-2026-53362-kev-openai-agent-exploitation.png https://severitydaily.com/citrix-netscaler-cve-2026-8452-dos-label-root-shell/ 2026-08-28T11:36:26-05:00 Severity Daily en 2026-08-28T11:35:59-05:00 Citrix calls CVE-2026-8452 a denial of service. Researchers used it to get root, and the federal deadline is Saturday https://severitydaily.com/wp-content/uploads/2026/08/citrix-netscaler-cve-2026-8452-dos-label-root-shell.png https://severitydaily.com/entra-id-cve-2026-69836-exploited-flag-retracted/ 2026-08-28T09:17:11-05:00 Severity Daily en 2026-08-28T08:53:45-05:00 Microsoft flagged a CVSS 10.0 Entra ID flaw as exploited, then retracted it a day later. Much of the coverage never followed. https://severitydaily.com/wp-content/uploads/2026/08/entra-id-cve-2026-69836-exploited-flag-retracted.png https://severitydaily.com/gitlab-cve-2026-19478-exploitation-claim-sourcing/ 2026-08-28T09:17:13-05:00 Severity Daily en 2026-08-28T08:53:42-05:00 The GitLab flaw under “active exploitation” is one firm’s honeypot data — GitLab hasn’t said a word about it https://severitydaily.com/wp-content/uploads/2026/08/gitlab-cve-2026-19478-exploitation-claim-sourcing.png https://severitydaily.com/n-able-n-central-cve-2026-18577-managed-endpoints/ 2026-08-28T10:32:38-05:00 Severity Daily en 2026-08-28T08:53:18-05:00 N-able says attackers used N-central's own remote control to reach managed endpoints and plant Cloudflare tunnels https://severitydaily.com/wp-content/uploads/2026/08/n-able-n-central-cve-2026-18577-managed-endpoints.png https://severitydaily.com/gputhor-rowhammer-nvidia-ecc-ampere-workstation/ 2026-08-28T09:17:18-05:00 Severity Daily en 2026-08-28T08:51:02-05:00 GPUThor beats NVIDIA's ECC for a root shell in about a minute — on four workstation cards, not the AI fleet https://severitydaily.com/wp-content/uploads/2026/08/gputhor-rowhammer-nvidia-ecc-ampere-workstation.png https://severitydaily.com/carhartt-breach-12-9-million-benchmark-data/ 2026-08-28T09:17:21-05:00 Severity Daily en 2026-08-28T08:51:02-05:00 Carhartt's breach is 12.9 million records, not 25 — and the gap is benchmark data someone left in production https://severitydaily.com/wp-content/uploads/2026/08/carhartt-breach-12-9-million-benchmark-data.png https://severitydaily.com/vmware-vcenter-cve-2026-59310-exploited-patch-gap/ 2026-08-28T10:32:36-05:00 Severity Daily en 2026-08-28T08:51:01-05:00 vCenter servers are being backdoored five days after the patch, and Broadcom still hasn't mentioned exploitation https://severitydaily.com/wp-content/uploads/2026/08/vmware-vcenter-cve-2026-59310-exploited-patch-gap.png https://severitydaily.com/papercut-ng-mf-actively-exploited-emergency-patch/ 2026-08-28T09:17:26-05:00 Severity Daily en 2026-08-28T08:51:00-05:00 PaperCut is under active attack with no CVE, and the emergency patch skipped its own release process https://severitydaily.com/wp-content/uploads/2026/08/papercut-ng-mf-actively-exploited-emergency-patch.png