I did. The article is scant, and the source report is everything bad about ai in the vuln world; high drama, low info. LPEs are not RCEs!

And we don't know what the exploits are. If it's a bunch of local jvm consoles or vi escapes into shell where it's like "oh this could give you root!", that's not super useful without knowing if it's a dumb initial config or an actual use-after-free or other memory exploit.

That's why we don't classify manufacturers with bad/no default creds as CVEs, that's just bad

Like I said, there is a lot of work to do before these become legit, and it almost certainly won't be 958 exploits after actual professionals review them properly.

And again, stop taking OpenAI at their word about security.