ISC Stormcast For Tuesday, November 10th, 2026 https://isc.sans.edu/podcastdetail/10172, (Tue, Nov 10th)

2026-11-10T07:23:40Z•13d19f8f5114752fa349cab0352f07f6c7b5602237426fc96575e2a3d2094a4e

CVE-2000-0411CVE-2023-20198CVE-2026-123158CGICisco-IOSPHPSAP-NetWeaverSSHemail-serverexploitation-attemptshoneypotinternet-wide-scanningssholevulnerability-scanningwebshell

Open source link →

What happened

SANS ISC honeypot reporting highlights active vulnerability scanning and exploitation attempts, including searches for SAP NetWeaver webshells, exploitation of the emerging SSH “sshole” vulnerability (CVE-2026-123158), suspected scans for Cisco IOS CVE-2023-20198, and legacy vulnerable email CGI scripts associated with CVE-2000-0411. Activity reflects opportunistic internet-wide reconnaissance and exploitation against exposed services.

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID: sans_isc_diary
Record identifier: 13d19f8f5114752fa349cab0352f07f6c7b5602237426fc96575e2a3d2094a4e
Enrichment time: 2026-11-10T07:23:40Z
AI-assisted enrichment: Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.

← Back to published records