Evidence to decisions

Cybersecurity intelligence

Technical severity, exploitation, likelihood and company response priority are evaluated separately.

CVE-2026-106931 · accelerated

CVE-2026-106931: what the evidence establishes and how to respond

CVE-2026-106931 affects EG Secure Solutions SiteGuard Server Edition. CISA has confirmed inclusion in its known-exploited catalog. DualScope assigns accelerated response priority under the stated generic context; each company should recalculate that priority from actual inventory, exposure and compensating controls.

Technical severity
HIGH
Exploitation
confirmed-in-the-wild-by-authority
Response priority
accelerated
Confidence
high
CVE-2026-109618 · urgent

CVE-2026-109618: what the evidence establishes and how to respond

CVE-2026-109618 affects PHP Group PHP. CISA has confirmed inclusion in its known-exploited catalog. DualScope assigns urgent response priority under the stated generic context; each company should recalculate that priority from actual inventory, exposure and compensating controls.

Technical severity
CRITICAL
Exploitation
confirmed-in-the-wild-by-authority
Response priority
urgent
Confidence
high
CVE-2026-109619 · urgent

CVE-2026-109619: what the evidence establishes and how to respond

CVE-2026-109619 affects PHP Group PHP. CISA has confirmed inclusion in its known-exploited catalog. DualScope assigns urgent response priority under the stated generic context; each company should recalculate that priority from actual inventory, exposure and compensating controls.

Technical severity
CRITICAL
Exploitation
confirmed-in-the-wild-by-authority
Response priority
urgent
Confidence
high
CVE-2026-110447 · accelerated

CVE-2026-110447: what the evidence establishes and how to respond

CVE-2026-110447 affects Collabora Collabora Online – Built-in CODE Server. CISA has confirmed inclusion in its known-exploited catalog. DualScope assigns accelerated response priority under the stated generic context; each company should recalculate that priority from actual inventory, exposure and compensating controls.

Technical severity
CRITICAL
Exploitation
confirmed-in-the-wild-by-authority
Response priority
accelerated
Confidence
high
CVE-2026-114625 · accelerated

CVE-2026-114625: what the evidence establishes and how to respond

CVE-2026-114625 affects Arista VeloCloud Orchestrator. CISA has confirmed inclusion in its known-exploited catalog. DualScope assigns accelerated response priority under the stated generic context; each company should recalculate that priority from actual inventory, exposure and compensating controls.

Technical severity
CRITICAL
Exploitation
confirmed-in-the-wild-by-authority
Response priority
accelerated
Confidence
high
CVE-2026-96652 · accelerated

CVE-2026-96652: what the evidence establishes and how to respond

CVE-2026-96652 affects Plex Media Server. CISA has confirmed inclusion in its known-exploited catalog. DualScope assigns accelerated response priority under the stated generic context; each company should recalculate that priority from actual inventory, exposure and compensating controls.

Technical severity
MEDIUM
Exploitation
confirmed-in-the-wild-by-authority
Response priority
accelerated
Confidence
high
CVE-2026-96654 · accelerated

CVE-2026-96654: what the evidence establishes and how to respond

CVE-2026-96654 affects Plex Media Server. CISA has confirmed inclusion in its known-exploited catalog. DualScope assigns accelerated response priority under the stated generic context; each company should recalculate that priority from actual inventory, exposure and compensating controls.

Technical severity
MEDIUM
Exploitation
confirmed-in-the-wild-by-authority
Response priority
accelerated
Confidence
high
CVE-2026-96655 · accelerated

CVE-2026-96655: what the evidence establishes and how to respond

CVE-2026-96655 affects Plex Media Server. CISA has confirmed inclusion in its known-exploited catalog. DualScope assigns accelerated response priority under the stated generic context; each company should recalculate that priority from actual inventory, exposure and compensating controls.

Technical severity
MEDIUM
Exploitation
confirmed-in-the-wild-by-authority
Response priority
accelerated
Confidence
high
CVE-2026-96656 · accelerated

CVE-2026-96656: what the evidence establishes and how to respond

CVE-2026-96656 affects Plex Media Server. CISA has confirmed inclusion in its known-exploited catalog. DualScope assigns accelerated response priority under the stated generic context; each company should recalculate that priority from actual inventory, exposure and compensating controls.

Technical severity
HIGH
Exploitation
confirmed-in-the-wild-by-authority
Response priority
accelerated
Confidence
high