12th October , Threat Intelligence Report
Admiralty grading (A–F · 1–6)
Source reliability
- A Completely reliable
- B Usually reliable
- C Fairly reliable
- D Not usually reliable
- E Unreliable
- F Cannot be judged
Information credibility
- 1 Confirmed
- 2 Probably true
- 3 Possibly true
- 4 Doubtful
- 5 Improbable
- 6 Cannot be judged
NATO Admiralty (AJP-2.1) grades confidence, independent of the risk score. Cross-source corroboration isn't tracked for non-CVE news, so single-source items are capped at a lower credibility number; a low number does not imply low quality.
Key insight
The report is a roundup; the only immediately stack-relevant item is the critical Veeam RCE, while the other reports mainly provide situational awareness and supply-chain context.
Description
The Check Point report summarizes several unrelated incidents and vulnerabilities. Veeam has released security updates for Backup & Replication 12 addressing, among others, CVE-2025-64393, a critical remote code execution vulnerability with CVSS 9.4 that allows low-privileged backup users to execute commands on affected servers; versions before build 12.3.2.4934 are vulnerable. Citrix NetScaler ADC and Gateway are affected by CVE-2026-88779, a high-severity memory overflow vulnerability with CVSS 8.7 that has been added to CISA's KEV catalog. The report also mentions a Danish registry breach via a private supplier exposing data on approximately 8.8 million individuals and an ASOS attack using stolen employee credentials.
Risk score
- cvss base
- 0.00
- kev bonus
- 0.00
- epss bonus
- 0.00
- poc bonus
- 15.00
- raw before weight
- 15.00
- industry weight
- 1.10
- freshness factor
- 0.50
- exploitability factor
- 1.00
- days old
- 29.00
- vendor mismatch penalty
- 0.00
- consensus penalty
- -5.00
Path: operational
Consensus check
The pipeline self-checks before delivery. These rules lowered the score:
-
VENDOR_MISMATCHVendor not found in alert title −5
- Consensus penalty:
- −5.0
- Total penalty:
- −5.0