By Howard Solomon
Publication Date: 2026-10-14 02:29:00
He noted that the volume of CVEs isn’t the real story anymore. “What matters is that discovery is scaling faster than exploitation, so teams that triage by sheer CVE count instead of exploitability are burning cycles on the wrong bugs,” he said. “Patch what’s proven, prioritized, and public, and treat everything else as this month’s new normal.”
Jack Bicer, director of vulnerability research at Action1, drew attention to several critical vulnerabilities that present substantial risks to externally accessible systems and enterprise infrastructure. Windows Message Queuing Queue Manager Remote Code Execution Vulnerability (CVE-2026-100202), Microsoft PostScript Printer Driver Remote Code Execution Vulnerability (CVE-2026-70147 and CVE-2026-70153), and Microsoft QUIC Remote Code Execution Vulnerability (CVE-2026-105016 and CVE-2026-100219) each carry CVSS scores of 9.8 and could allow attackers to execute malicious code remotely without authentication or user…