Everything Threat Times has reported about CVSS 9.8: 3 stories, newest first. Part of our Vulnerabilities coverage.
A critical vulnerability in the Metasploit Framework Web Service allows unauthenticated users to read, modify, or delete stored credentials without any authentication checks.
A critical flaw in HAProxy Data Plane API allows unauthenticated access to administrative controls when specific TLS settings are active.
A CVSS 9.8 vulnerability in IBM Guardium Data Protection enables unauthenticated remote attackers to execute arbitrary management operations on affected systems.