this is insane if this cve 10 is real