CVSS 9.8

Everything Sandbox Dispatch has reported about CVSS 9.8: 2 stories, newest first. Part of our Vulnerabilities coverage.

Vulnerabilities

Why do specific TLS settings disable HAProxy Data Plane API authentication for critical CVE-2026-109575?

A critical flaw in HAProxy Data Plane API allows unauthenticated access to administrative functions when specific TLS settings are active.

Oct 13, 2026

Vulnerabilities

Metasploit Web Service Exposes Credentials Without Authentication

A critical flaw in the Metasploit Framework allows attackers to steal or delete stored credentials without logging in, affecting all versions prior to 6.5.5.

Oct 13, 2026