The licence plate reader company is making most of its new safeguards mandatory on 1 January, after its chief executive conceded that optional abuse controls sat unused at two-thirds of agencies.
Perspective Coverage
7 publishers
- Builder
- Builder 32%
- Operator
- Operator 47%
- Investor
- Investor 21%
Reality
- Evidence70
- Adoption35
- Hype gap+35
- Incentives70
- Confidence65
CVE-2026-58113 sits in the /auth/ redirect flow of Siemens Teamcenter. The attacker needs no credentials and no more than a link an engineer loads, and Siemens has shipped fixed builds for four release branches.
Reality
- Evidence74
- Adoption18
- Hype gap+8
- Incentives45
- Confidence66
PMapper writes nothing to disk until all nine edge checks finish, and one silent endpoint is enough to erase the entire account map. cloudfox, the tool that did run, still ships a privilege-escalation column, but every cell in it just points back to PMapper.
Reality
- Evidence62
- Adoption25
- Hype gap−10
- Incentives25
- Confidence55
The overflow in CVE-2026-8452 sits in PrefixList canonicalization, which NetScaler performs before it validates the SAML signature, so an attacker needs no trust with your IdP and only a reachable virtual server with SAML turned on.
Reality
- Evidence56
- Adoption63
- Hype gap−8
- Incentives44
- Confidence55
fortitool folds a scatter of version-specific scripts into one dependency-free Go binary, and the drop in cost to inspect a Fortinet appliance lands the same for a defender and an attacker.
Publishers:blog.n0p.me
Reality
- Evidence55
- Adoption
- Insufficient
- Hype gap+12
- Incentives45
- Confidence52
Flock now asks officers to type a criminal case number before searching its plate-reader network. It told MIT Technology Review it does not verify the numbers.
Reality
- Evidence76
- Adoption64
- Hype gap+42
- Incentives78
- Confidence74