Mitigation
A temporary measure that lowers risk until you can patch, such as disabling a feature or restricting access.
Advisories that mention this term
OpenSSH Issues Emergency Patch for "SSHole" Long-Password Authentication Bypass Vulnerability (CVE-2026-123158)
On November 5, 2026, OpenSSH released version 10.
Exploited SonicOS SSLVPN flaw CVE-2026-19868 lets attackers sidestep SAML and MFA, now on KEV
CVE-2026-19868 in SonicWall SonicOS SSLVPN can let a user holding valid credentials for another authentication method bypass SAML authentication, and possibly the MFA that SAML enforces .
PHP2Shell: Two Unauthenticated Remote Code Execution Vulnerabilities in PHP (CVSS 9.2); MODA Estimates ~28,000 Websites Affected in Taiwan
On October 21, PHP released security updates patching CVE-2026-109618 and CVE-2026-109619, two vulnerabilities with CVSS v4.
European Supermarket Refrigeration Remote Controllers Hacked; TWCERT Relays CERT-FR and International Warnings Urging Review of Internet-Connected OT
An alert from France's CERT-FR warned of widespread compromises affecting Danfoss AK-SM/AK-SC and Copeland/Dixell XWEB refrigeration remote controllers, with attackers primarily exploiting internet-exposed management interfaces .
Senao says an automated attack on an external server took some order information, and it has issued anti-fraud alerts
According to iThome, Senao International announced on September 29 that an external server suffered an automated attack in which partial order information was extracted .