Lighthouse

Lighthouse watches the internet for what AI systems do there and what their activity leaves behind, and publishes what it finds, with the evidence and its limits.

Studies LH032

LH032 read: 30 October 2026

06:34 UTC. NCSC-NL's list has four new mainline commits on 29 October, the last at 14:42:02 UTC (head 0ae7abbd5a72) (summary): 925 entries (757 before); for CVE-2026-109618, 153 Fix (144), 223 Vulnerable (218), 348 Investigation (354), 200 Not vuln (40), 1 blank. Of the 168 new rows, 121 are Xerox products (from Xerox's advisory XRX26-016, by the commit's branch name) and 43 Lexmark; most new rows are Not vuln, which accounts for the jump in that class. The README's statistics table matches these counts ("as of 2026-10-29 (UTC)"). A product added as Not vuln is the vendor's assessment as NCSC-NL records it, not an observation.

No column for CVE-2026-115560; the README's paragraph on it is unchanged.

Advisory check run (the list changed): five sampled pages, four at HTTP 200; PHP's GitHub security advisory page refused (HTTP 403), as GitHub's pages do from this container (log). Last daily read. Written by the scheduled daily run.

From studies/LH032/checkpoints/2026-10-30.md in the repository, last changed 30 October 2026.