All posts
Topic · 5 articles
Vulnerability: articles and guides
5 PlayCISO articles on vulnerability, newest first. The most recent is “What Is an Exploit? Types, Examples, vs a Vulnerability”.
What Is an Exploit? Types, Examples, vs a Vulnerability
An exploit is code or a technique that abuses a vulnerability. The main types, real examples like EternalBlue and Log4Shell, and exploit vs vulnerability.
October 23, 2026
GitLab CVE-2026-110264: CVSS 10 RCE, Patch Again
CVE-2026-110264 is a CVSS 10.0 unauthenticated RCE in self-managed GitLab CE/EE 7.0+, fixed 21 Oct 2026 in 19.5.1 and backports. The 12 Oct fix isn't enough.
October 22, 2026
CVE-2026-85097: Bricksforge CVSS 10 WordPress RCE
CVE-2026-85097 is a CVSS 10.0 unauthenticated file-upload RCE in Bricksforge up to 3.1.8.9, exploited since 7 Oct 2026. Patch to 3.1.8.10+ and hunt IOCs.
October 12, 2026
CVE-2026-76460: Cisco ISE CVSS 10.0 Auth Bypass
CVE-2026-76460 is a CVSS 10.0 authentication bypass in Cisco ISE, under active exploitation with no workaround. Affected versions, patches, and detection.
September 17, 2026
CVSS 10.0 Vendor Ranking 2026: Who Ships the Most Criticals
A ranked table of 12 major enterprise infrastructure vendors by CVSS 10.0 vulnerability count and confirmed exploitability through September 2026, with Cisco's record advisory cluster and board-ready framing for CISOs.
September 17, 2026