Lighthouse

Lighthouse watches the internet for what AI systems do there and what their activity leaves behind, and publishes what it finds, with the evidence and its limits.

Studies LH031

LH031 reads: 5 November 2026

Catalogue read at 14:14 UTC (label 2026-11-05T1414Z)

Catalogue version 2026.11.04, released 4 November 20:00:05 UTC, 1,768 entries (two added since 2026.10.30: CVE-2026-119977, WordPress Core, dateAdded 3 November; CVE-2024-27834, Apple Multiple Products, dateAdded 4 November); CISA's feed answered directly (HTTP 200) (extract). CVE-2026-109618 and CVE-2026-109619 are listed with dateAdded 26 October and are unchanged in every field against the 2 November 15:27 read. CVE-2026-115560 is not listed: no new KEV entry among the three CVEs. The mentions list is the same 26 entries as at the last read; neither new entry's text names PHP or one of the three CVEs, so neither is a mention under the criteria, although WordPress is software written in PHP (its entry concerns WordPress's own upgrade process, not the PHP flaws).

Vendor read at 14:14 UTC (label 2026-11-05T1414Z, amendment 5)

Advisory, CSAF and Unit 42 each answered HTTP 200 (read log, extract), classed against the 2 November 15:27 read.

  • Advisory: unchanged in every extracted field (Published 2026-10-21, Updated 2026-10-29, Exploit Maturity ATTACKED; the same 20 fixed builds; the "upcoming releases", "until PAN-OS fix versions are available", "active exploitation has been observed" and "previously impacted" sentences as before).
  • Unit 42: unchanged (title "(Updated October 29)", one update heading, the same sentences).
  • CSAF: the one change. current_release_date moved from 2026-10-31T03:51:53Z to 2026-11-03T20:15:10Z; the tracking version, initial release date, the sixteen revision entries (last numbered 16, 29 October) and the 20 fixed product ids are unchanged. As on 31 October, the document's release date moved without a new revision entry, and it does not say what changed.

Nothing changed in the vendor's fixed builds or exploitation sentences. Not flagged for review. These readings date the vendor's statements; they do not show when a build reached any customer or that any system was compromised.

From studies/LH031/checkpoints/2026-11-05.md in the repository, last changed 5 November 2026.