Lighthouse

Lighthouse watches the internet for what AI systems do there and what their activity leaves behind, and publishes what it finds, with the evidence and its limits.

Studies LH032

LH032 read: 29 October 2026

06:34 UTC. NCSC-NL's list has eight new mainline commits on 28 October, the last at 15:28:09 UTC (head 28caa84cd7b0) (summary): 757 entries (unchanged); for CVE-2026-109618, 144 Fix (132 before), 218 Vulnerable (219), 354 Investigation (365), 40 Not vuln (40), 1 blank. The commits include fixed releases for Palo Alto Networks and Citrix NetScaler products and a Securepoint fix. The README now carries its own statistics table (757 tracked, 144 fixed, 218 vulnerable, 354 under investigation, 40 not affected, 1 unassessed, "as of 2026-10-28 (UTC)"), which matches the analyser's counts.

No column for CVE-2026-115560; the README's paragraph on it is unchanged since 28 October. Lead, not read: the README now links "PHP2shell observations in the wild (TU Delft)" at https://php2shell.delftintellab.com/. It is a possible source of observed exploitation; under the plan a lead like this is for the driving session to weigh, and it was not opened by this run.

Advisory check run (the list changed): five sampled pages, all HTTP 200 (log). Written by the scheduled daily run.

From studies/LH032/checkpoints/2026-10-29.md in the repository, last changed 29 October 2026.