No review-now item passed evidence gates. Treat today as monitor/background unless new exploitation evidence arrives. Highest-scored item: Capsule is a multi-tenancy and policy-based framework for Kubernetes. The Cap….

Monitor

These are notable but currently lack active-exploitation evidence in configured sources.

• Capsule is a multi-tenancy and policy-based framework for Kubernetes. The Cap… — score 25 — exploit status none — CVE CVE-2026-22872 — flags: no_exploitation_signal — KQL: MDE exposure: devices with CVE-2026-22872. Evidence: nvd.

• Vibe coders are gonna vibe code: How CISOs are tackling code sprawl — score 25 — exploit status none — flags: no_primary_source, no_exploitation_signal. Evidence: Vibe coders are gonna vibe code: How CISOs are tackling code sprawl.

• Chinese hackers breach REDCap servers, steal medical research — score 25 — exploit status none — flags: no_primary_source, no_exploitation_signal. Evidence: Chinese hackers breach REDCap servers, steal medical research.

Background

• ⚡ Weekly Recap: Chrome 0-Day, UniFi Exploits, macOS Stealers, VPN Flaw and More — score 78 — exploit status poc — flags: no_primary_source, exploitation_claim_downgraded, critic_downgraded — KQL: MDE edge/service exploitation telemetry triage. Evidence: ⚡ Weekly Recap: Chrome 0-Day, UniFi Exploits, macOS Stealers, VPN Flaw and More.

• FlexRIC v2.0.0 crashes when the near-RT RIC receives a RIC_INDICATION message… — score 25 — exploit status none — CVE CVE-2026-37230 — flags: no_exploitation_signal — KQL: MDE exposure: devices with CVE-2026-37230. Evidence: nvd.

• FlexRIC v2.0.0 contains a reachable assertion in e2ap_create_pdu() triggered … — score 25 — exploit status none — CVE CVE-2026-37229 — flags: no_exploitation_signal — KQL: MDE exposure: devices with CVE-2026-37229. Evidence: nvd.

• FlexRIC v2.0.0 contains a reachable assertion in e2ap_recv_sctp_msg() (src/li… — score 25 — exploit status none — CVE CVE-2026-37228 — flags: no_exploitation_signal — KQL: MDE exposure: devices with CVE-2026-37228. Evidence: nvd.

• FlexRIC v2.0.0 crashes when the iApp receives an E42_RIC_SUBSCRIPTION_REQUEST… — score 25 — exploit status none — CVE CVE-2026-37226 — flags: no_exploitation_signal — KQL: MDE exposure: devices with CVE-2026-37226. Evidence: nvd.