Just social media posts, with claims they received the info from CISA https://infosec.exchange/@metacurity/114347467581760027
Supposedly, MITRE will make a statement today. Time will tell.
Edit - it is MITRE, not CISA, which the poster expects to make a statement.
This was 0 minutes ago. Glad to see how important CVE is to security personel.
?
Metacurity’s post was like 90 minutes ago.