PulseAugur
EN
LIVE 15:20:00

Multiple critical software vulnerabilities disclosed, impacting GitLab, WordPress, and more · 3 sources…

By PulseAugur Editorial · [3 sources] ·

Multiple security vulnerabilities have been disclosed across various software platforms, with researchers highlighting their presence and potential impact. These include issues in SonicWall, OpenSSH, Barracuda ESG, and CF7, as well as a critical vulnerability in GitLab CE/EE (CVE-2026-97229) with a CVSS score of 10.0, affecting approximately 200 servers. Additionally, WordPress is affected by CVE-2026-119977, with nearly 15,000 sites potentially vulnerable. The reports emphasize the importance of patching these vulnerabilities promptly, providing specific version numbers for fixes. AI

RANK_REASON The cluster reports on multiple disclosed software vulnerabilities and their fixes, which falls under the category of security tools and advisories.

Read on Mastodon — mastodon.social →

AI-generated summary · Google Gemini · from 3 sources. How we write summaries →

Multiple critical software vulnerabilities disclosed, impacting GitLab, WordPress, and more · 3 sources…

How we ranked this

Signal score
2 / 100
Composite score across the factors below. Higher = stronger signal that this story matters right now.
Newsworthiness bucket
Tool
The cluster reports on multiple disclosed software vulnerabilities and their fixes, which falls under the category of security tools and advisories.
Source corroboration
3 independent sources
Multiple independent publishers reporting the same story raises confidence that it's real and newsworthy.
Topics
other
Editorial topic classification. Feeds into how the story surfaces on /topic/<slug> hub pages and into the per-entity coverage mix.
AI-industry relevance
Low
Off-topic or adjacent — cluster remains reachable but doesn't surface in AI-industry rankings.
Story freshness
Breaking (< 6h)
Fresh story with cross-source coverage still developing. Ranking may shift as more sources report.

Full methodology in our editorial standards.

COVERAGE [3]

  1. Mastodon — mastodon.social TIER_1 English(EN) · burso ·

    Also not tagged in Shodan yet — so no count (not zero): • SonicWall CVE-2026-19868 • OpenSSH SSHole CVE-2026-123158 • Barracuda ESG CVE-2026-116606 • CF7 CVE-20

    Also not tagged in Shodan yet — so no count (not zero): • SonicWall CVE-2026-19868 • OpenSSH SSHole CVE-2026-123158 • Barracuda ESG CVE-2026-116606 • CF7 CVE-2026-114432 (6.2-6.2.3): unauth upload -> RCE on stock Debian/Ubuntu Apache. Fix: 6.2.4. • React RSC GHSA-xqc2-xf4c-x3h3 (…

    LINKS github.com/…/GHSA-xqc2-xf4c-x3h3
  2. Mastodon — mastodon.social TIER_1 (CA) · burso ·

    GitLab CE/EE CVE-2026-97229 (CVSS 10.0, CISA KEV): 200 likely vulnerable servers. US 52 · CN 1 · RU 0 · CZ 3 · SK 1 · DE 25 · CH 0. Fix: upgrade to 19.2.8 / 19.

    GitLab CE/EE CVE-2026-97229 (CVSS 10.0, CISA KEV): 200 likely vulnerable servers. US 52 · CN 1 · RU 0 · CZ 3 · SK 1 · DE 25 · CH 0. Fix: upgrade to 19.2.8 / 19.3.5 / 19.4.2 or later. https:// docs.gitlab.com/releases/patch es/patch-release-gitlab-19-4-2-released/ # infosec # GitL…

    LINKS docs.gitlab.com/…/patch-release-gitlab-19…
  3. Mastodon — mastodon.social TIER_1 English(EN) · burso ·

    Shodan vuln: matches hosts by software version — likely vulnerable, not proven exploitable. WordPress CVE-2026-119977 (CVSS 8.1, CISA KEV): 14,893 likely vulner

    Shodan vuln: matches hosts by software version — likely vulnerable, not proven exploitable. WordPress CVE-2026-119977 (CVSS 8.1, CISA KEV): 14,893 likely vulnerable sites of ~1.42M. US 6,451 · CN 636 · RU 36 · CZ 78 · SK 25 · DE 1,162 · CH 85. Fix: block /wp-content/upgrade/ in t…

    LINKS thehackernews.com/…/installing-fix-for-ex… thehackernews.com/…/inst

RELATED ENTITIES

RELATED TOPICS