Saltstack CVE: Keep Patching

Censys tracked the internet exposure of SaltStack servers after disclosure of two critical CVEs (CVE-2020-11651 and CVE-2020-11652) that enable authentication/authorization bypass and full takeover of managed systems. Their monitoring showed exposed servers decreased from 5,841 on May 1 to 2,928 on May 12, indicating remediation and access-limiting measures but thousands of potentially vulnerable servers remained reachable.