CVSS 9.8

Everything Patch Observer has reported about CVSS 9.8: 2 stories, newest first. Part of our Vulnerabilities coverage.

Vulnerabilities

Organisations Must Patch Metasploit 6.5.5 to Stop Unauthenticated Credential Deletion via Web Service API

Rapid7 patches a critical flaw in Metasploit Framework that allows unauthenticated users to delete stored credentials via the web service API.

Oct 14, 2026

Vulnerabilities

Organisations Urged to Update PraisonAI 1.6.59 After CVSS 9.8 Flaw Exposed Agent Workflows and Data

A critical flaw in PraisonAI allowed anyone to access agent systems. Version 1.6.59 patches the missing access controls that exposed workflows and data.

Oct 13, 2026