CVE-2026-77933 (CRITICAL, CVSS 9.3): DB-GPT <=0.8.2 ships with hardcoded MySQL root credentials in docker-compose.yml & exposes port 3306. Remote attackers can gain full DB access. Change credentials & restrict port now. https://radar.offseq.com/threat/cve-2026-77933-use-of-default-credentials-in-eosphoros-ai-db-gpt-bfef4b198f4b1032 #OffSeq #vuln #infosec #docker
XFEDI
ActivityPubRemote profile

OffSequence
OffSeq is a cybersecurity company enhancing organizational digital resilience through comprehensive protection against evolving cyber threats. We offer specialized services for businesses of all sizes, with particular expertise in Baltic, Scandinavian, Belgian markets and EU regulatory compliance.
Open remote profile ↗Posts
CVE-2026-112371: CRITICAL code injection in H3C Magic NX15 (CVSS 9.4). Public exploit allows remote code execution via /api/esps. No patch yet — restrict device access. Details: https://radar.offseq.com/threat/cve-2026-112371-code-injection-in-h3c-magic-nx15-047130e6380b2198 #OffSeq #H3C #infosec #vulnerability

