CVSS

Everything Patch Review has reported about CVSS: 2 stories, newest first. Part of our Vulnerabilities coverage.

Vulnerabilities

Patch Letta Immediately: Default Config Leaves API and DB Open to Unauthenticated Remote Code Execution

A critical flaw in Letta through version 0.16.8 leaves API routes and database ports open to attackers without authentication credentials.

Oct 20, 2026

Vulnerabilities

Shift Vulnerability Focus from CVSS Scores to Real Exploit Evidence

Dark Reading reports that security teams should prioritize actual exploit data over theoretical vendor scores when managing patch priorities.

Oct 15, 2026