Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability. Linux Kernel contains an improper check for unusual or exceptional conditions vulnerability in the TLS receive path which allows a zero-length record retrieved from the rx_list to bypass the intended recvmsg() record-type handling, potentially causing subsequent TLS records to be processed using incorrect zero-copy and queuing assumptions. The impacted product(s) could be end-of-life (EoL) and/or end-of-service (EoS). Users are advised to discontinue use and/or transition to a supported version. Apply vendor mitigations. Check the NVD record and the vendor advisory for affected versions and the patch.
oss-security (18 September 2026) summarises four long-lived Linux kernel local privilege-escalation bugs nicknamed DirtyAH6 (CVE-2026-80844, xfrm/AH6 routing-header segments_left validation), PPPoEject (CVE-2026-68121, pppoe_sendmsg header pointer after dev_hard_header), TUNderflow (CVE-2026-81000, TUN/TAP oversized headroom underflow; CVSS 3.1 7.8), and DiagSpill (CVE-2026-74469, SCTP transport_count overflow; CVSS 3.1 8.8). First three LPEs generally need unprivileged user namespaces or specific capabilities; DiagSpill does not. Corruption in DirtyAH6 and DiagSpill can be remotely reachable only under very specific circumstances (oss-security). CVE records list stable-tree fixes and unaffected lines such as 5.10.269+/5.15.220+ (DirtyAH6), 5.10.270+/5.15.221+ (TUNderflow), 5.10.265+/5.15.216+ (PPPoEject/DiagSpill) among others — apply your distro’s kernel security updates rather than cherry-picking. No CVSS published yet in the CVE JSON for DirtyAH6 (CVE-2026-80844) at fetch time — do not invent. Primary: oss-security roundup; also MITRE CVE records / kernel stable commits.
Product
Linux kernel (xfrm/AH6, PPPoE, TUN/TAP, SCTP)
Versions
Long-standing; fixed in multiple stable trees (examples from CVE: DirtyAH6 unaffected 5.10.269 / 5.15.220+; TUNderflow 5.10.270 / 5.15.221+; PPPoEject & DiagSpill 5.10.265 / 5.15.216+ — confirm against your distro advisory)
Install distribution kernel security updates that include the stable commits for CVE-2026-80844, CVE-2026-81000, CVE-2026-68121, and CVE-2026-74469; reboot into the new kernel.
Linux Kernel Out-of-Bounds Write Vulnerability. Linux Kernel contains an out-of-bounds write vulnerability in the ebtables SNAT target which allows an ARP sender hardware address rewrite to write directly into a nonlinear socket-buffer fragment backed by a splice-imported file page. The impacted product(s) could be end-of-life (EoL) and/or end-of-service (EoS). Users are advised to discontinue use and/or transition to a supported version. Apply vendor mitigations. Check the NVD record and the vendor advisory for affected versions and the patch.
Linux Kernel Race Condition Vulnerability. Linux Kernel contains a race condition vulnerability which allows concurrent writes to the same AF_ALG socket causing data to be unpredictably interleaved and creating inconsistencies in the socket's internal state. Apply vendor mitigations. Check the NVD record and the vendor advisory for affected versions and the patch.
WordPress 7.1.1 maintenance and security release (17 September 2026) fixes a core flaw pwn.ai calls Click2Shell: a specially crafted theme-preview / theme-install URL, when opened by a logged-in administrator, can automatically install an attacker-selected theme from the official WordPress.org catalog without the admin clicking Install (release wording: “Specially crafted URLs can automatically install and preview an inactive theme from WordPress.org.”). Root cause is divergent interpretation of the theme value — WordPress.org Themes API canonicalises it to a real slug, while wp-admin JavaScript reuses the original punctuation inside a jQuery selector and triggers Install. On its own the core bug only installs a real catalog theme (site appearance unchanged while inactive). pwn.ai demonstrated chaining with a separate unprotected AJAX installer in the then-current Mobile Repair Zone 2.5.4 catalog theme (and noted similar patterns in 40+ third-party themes): Customizer preview loads inactive-theme PHP, then an unauthenticated AJAX handler fetches and runs attacker-supplied package code. Researcher severity: CVSS 3.1 7.1 (forced-install alone, High) and CVSS 3.1 9.3 (full chain with UI:R). No CVE assigned at disclosure (WordPress indicated one forthcoming); no in-the-wild exploitation claimed. Fix: WordPress 7.1.1 (security fixes also backported through supported older branches to 4.7). Primary: WordPress 7.1.1 release; research: pwn.ai; wire: The Hacker News 18 Sep 2026.
Product
WordPress core (theme install / preview); chain demo used Mobile Repair Zone theme 2.5.4
Versions
WordPress before 7.1.1 (core issue; security release backports through 4.7 branch where applicable)
Microsoft Security Update Guide lists CVE-2026-85885 (NVD published 17 September 2026): command injection (CWE-77) in M365 Copilot allowing an authorized (low-privilege) attacker to elevate privileges over the network. Microsoft CVSS 3.1 base 9.9 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H). NVD cveTags: exclusively-hosted-service — same September 2026 MSRC cloud-transparency release train as desk cards cve-2026-85887 (Copilot info disclosure 7.7) and cve-2026-85889 (Azure AI Foundry). Expect Microsoft’s hosted-service pattern: CVE published for transparency with mitigation already applied in the service (confirm on MSRC for customer action). Distinct CVE from 85887. Primary: MSRC; secondary: NVD.
Product
Microsoft 365 Copilot (exclusively hosted cloud service)
Versions
Hosted M365 Copilot service (exclusively-hosted-service tag); confirm MSRC for any customer action
CVSS
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
AVAttack Vector
Network
ACAttack Complexity
Low
PRPrivileges Required
Low
UIUser Interaction
None
SScope
Changed
CConfidentiality
High
IIntegrity
High
AAvailability
High
(CVSS 3.1, Microsoft)
Exploited in Australia?
unknown
Patch to
Confirm MSRC — exclusively hosted; typically no customer patch if Microsoft states fully mitigated in service
Red Hat Product Security (public_date 17 September 2026) documents CVE-2026-92925 in Redis community: the cluster bus packet parser for PING/PONG/MEET fails to validate null-termination on string-carrying extensions (CWE-125), enabling a remote attacker on an adjacent network to craft a malicious packet and trigger an out-of-bounds read — sensitive-info disclosure or remote DoS. Red Hat CVSS 3.1 base 7.1 (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H); threat severity Important; CISA SSVC notes exploitation none. Upstream fix referenced via redis/redis PR #15263 / commit 37894fae and release tag 8.10.0. Red Hat CVE page lists mixed product package states (Affected / Will not fix / Not affected) — check RH advisory for your workload. No in-the-wild claim in RH/NVD snippets this pass. Primary: Red Hat CVE; secondary: upstream 8.10.0 release / NVD.
Product
Redis (community) — cluster bus / cluster mode
Versions
Redis community cluster-bus path prior to upstream 8.10.0 fix; Red Hat redis-consuming products: see RH CVE package_state (mixed)
CVSS
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
AVAttack Vector
Adjacent
ACAttack Complexity
Low
PRPrivileges Required
None
UIUser Interaction
None
SScope
Unchanged
CConfidentiality
Low
IIntegrity
None
AAvailability
High
(CVSS 3.1, Red Hat Important)
Exploited in Australia?
unknown
Patch to
Upgrade Redis to upstream 8.10.0 or later (or apply vendor backport); review Red Hat errata for RH-packaged redis consumers
Microsoft Security Update Guide (September 2026 release; MSRC releaseDate 17 September 2026 PDT) published two exclusively-hosted Azure AI Foundry elevation-of-privilege CVEs for transparency. CVE-2026-85889 (Critical, Microsoft CVSS 3.1 base 10.0, CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H; CWE-306): missing authentication for a critical function allows an unauthenticated network attacker to elevate privileges. CVE-2026-85917 (Critical impact class / High base 7.5, CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N; CWE-918): SSRF allowing unauthenticated privilege elevation. Microsoft states both are already fully mitigated in the hosted service — no customer patch action; CVEs are for cloud transparency (aka.ms/MSRC-Cloud-CVEs). MSRC: publicly disclosed No; exploited No. NVD received records 17 September 2026. Primary: MSRC CVE-2026-85889; companion: MSRC CVE-2026-85917; NVD indexes both.
Product
Microsoft Azure AI Foundry (exclusively hosted cloud service)
Versions
Hosted service (exclusively-hosted-service tag); not an on-prem build train — Microsoft states already fully mitigated
Microsoft Security Update Guide (September 2026; MSRC releaseDate 17 September 2026 PDT) lists CVE-2026-85887, an M365 Copilot information-disclosure vulnerability: incorrect permission assignment for a critical resource (CWE-732) lets an authorized (low-privilege) attacker disclose information over the network. Microsoft CVSS 3.1 base 7.7 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N); MSRC severity Critical / impact Information Disclosure. Exclusively hosted service: Microsoft states the issue is already fully mitigated — no customer patch steps; CVE published for cloud transparency. MSRC: publicly disclosed No; exploited No. NVD received 18 September 2026 00:17 UTC. Distinct from Azure AI Foundry CVE-2026-85889/85917. Primary: MSRC; secondary: NVD.
Product
Microsoft 365 Copilot (exclusively hosted cloud service)
Versions
Hosted M365 Copilot service; Microsoft states already fully mitigated (no on-prem build to patch)
CVSS
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
AVAttack Vector
Network
ACAttack Complexity
Low
PRPrivileges Required
Low
UIUser Interaction
None
SScope
Changed
CConfidentiality
High
IIntegrity
None
AAvailability
None
(CVSS 3.1, Microsoft High/Critical class)
Exploited in Australia?
unknown
Patch to
No customer action — Microsoft states fully mitigated in the hosted M365 Copilot service (transparency CVE)
CVE-2026-92838 (published ~17 September 2026 per Tenable) is a DLL hijacking issue in the GeoVision GV-Remote E-Map desktop application: one or more DLLs are loaded from an unsafe search path. A local attacker with write access to a directory searched before the legitimate library location can plant a malicious DLL and achieve code execution as the GV-Remote E-Map process. Tenable CVSS 3.1 base 7.8 (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Vendor cyber-security portal (geovision.com.tw/cyber_security.php) hosts GeoVision advisories; this CVE id was not visible as a labelled row on that index during the 18 September 2026 07:00 Perth desk pass — treat Tenable/CVE record as primary until a matching PDF advisory is linked. No public in-the-wild exploitation claim on the Tenable snippet reviewed. Relevance: physical-security / VMS operators running GeoVision Windows clients.
Product
GeoVision GV-Remote E-Map (Windows desktop)
Versions
Affected builds not enumerated on the Tenable snippet reviewed; check GeoVision cyber_security.php / product release notes for the fixed package
CVSS
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AVAttack Vector
Local
ACAttack Complexity
Low
PRPrivileges Required
Low
UIUser Interaction
None
SScope
Unchanged
CConfidentiality
High
IIntegrity
High
AAvailability
High
Exploited in Australia?
unknown
Patch to
Apply the vendor-fixed GV-Remote E-Map build when published; restrict write access to application and working directories; do not run the client from world-writable paths.
CVE-2026-81546 (published ~17 September 2026 per Tenable/NVD indexing) covers a stack-based buffer overflow in the Affinity by Canva application before the 3.3.0 September 2026 release: inadequate bounds checking when parsing Affinity document files. A crafted Affinity document opened by a user can lead to arbitrary code execution. Tenable lists CVSS 3.1 base score 7.7 (High). Australia relevance: Affinity is Canva’s creative suite (Canva is Australian-headquartered). Patch: upgrade Affinity by Canva to 3.3.0 or later. No public exploitation claim on the Tenable/NVD snippets reviewed this pass. Primary: CVE/NVD/Tenable record; treat vendor release notes as authoritative for build numbers when published.
Product
Affinity by Canva (desktop creative suite)
Versions
Affected: before 3.3.0 (September 2026 release); fixed: 3.3.0+
CVSS
7.7
Exploited in Australia?
unknown
Patch to
Upgrade Affinity by Canva to 3.3.0 or later; treat untrusted .af* / Affinity documents as untrusted code until patched.
Doyensec research post (17 September 2026) shows Open vSwitch’s kernel datapath can strip SKBFL_SHARED_FRAG from a still-forwarded packet, re-opening the Fragnesia Dirty COW-class primitive: an unprivileged user can cause in-place ESP decrypt over page-cache pages they may only read, writing attacker-chosen bytes into root-owned file page cache. Tracked as CVE-2026-90049, CVE-2026-89487 and CVE-2026-80977; reported to the Linux kernel security team and coordinated with OVS maintainers. Builds on prior Dirty Frag / Fragnesia work (including CVE-2026-43284 and CVE-2026-43500). Impact surface: virtualisation/container stacks using OVS (OpenStack Neutron, oVirt, Antrea/OVN-Kubernetes, libvirt bridges, etc.). Primary: Doyensec blog; await distro/kernel OVS package advisories for fixed revisions.
Product
Open vSwitch kernel datapath (openvswitch.ko) / Linux networking
Versions
Affected OVS/kernel builds prior to coordinated fixes for CVE-2026-90049 / CVE-2026-89487 / CVE-2026-80977 (exact package versions per distro advisory)
Exploited in Australia?
unknown
Patch to
Apply vendor/distro kernel and openvswitch updates once published for CVE-2026-90049/89487/80977; until then restrict untrusted local users on OVS hosts and monitor kernel security ML
Check Point advisory sk1000155 (disclosed 16 September 2026; NVD published same day) documents CVE-2026-91843, a stack overflow (CWE-121) in the unauthenticated login process on Security Management and Log Servers. Check Point CVSS 3.1 base 9.8 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). An attacker without credentials can run arbitrary code as root over the network; Check Point states the vulnerable path runs through the Trusted Clients setting (hosts allowed to connect via SmartConsole). Vendor and CISA SSVC: no indication of in-the-wild exploitation; not in KEV as of mid-September catalog checks. Affected branches by Jumbo Hotfix Take (or older): R82.20 (apply Take 29+), R82.10 Take 44 or below, R82 Take 126 or below, R81.20 Take 166 or below; R81.10/R81/R80.x End of Support (ticket Check Point for fix or upgrade). Standalone, Log Server, and Multi-Domain deployments also vulnerable per vendor confirmation (THN update 18 Sep). Smart-1 Cloud hosted management is not affected (fix already deployed). Remediation: LivePatch per sk1000155; customers with automatic updates (sk175504) already protected. Distinct from desk card checkpoint-vpn-cert-20260910 (VPN CVE-2026-85102/85103). Primary: Check Point sk1000155; secondary: NVD / Censys advisory.
R82.20 before LivePatch Take 29; R82.10 Jumbo Take ≤44; R82 Take ≤126; R81.20 Take ≤166; R81.10/R81/R80.x EOS — see sk1000155. Smart-1 Cloud not affected.
CVSS
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AVAttack Vector
Network
ACAttack Complexity
Low
PRPrivileges Required
None
UIUser Interaction
None
SScope
Unchanged
CConfidentiality
High
IIntegrity
High
AAvailability
High
(CVSS 3.1, Check Point Critical)
Exploited in Australia?
unknown
Patch to
Apply LivePatch from sk1000155 (Takes: R82.20 T29+, R82.10 T28+, R82 T28+, R81.20 T28+); enable automatic updates (sk175504); restrict Trusted Clients; EOS branches: upgrade or open Check Point support ticket
CVE-2026-65388 (GHSA-mx96-5vvg-x2mg; Apple/containerization Swift package) covers RegistryClient following the WWW-Authenticate realm without validating host or scheme. A remote attacker who controls a container registry can redirect the client’s token request to an attacker-chosen host and disclose the victim’s registry credentials. GitHub advisory severity Moderate; published on the advisory 30 August 2026; Tenable/NVD indexing lists CVE published ~16 September 2026 with CVSS 3.1 base 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N). GHSA lists affected versions ≤ 0.41.0 and patched versions > 0.41.0; Tenable text says the issue is addressed in containerization 0.41.0 — confirm the exact fixed build against GHSA before closing. No public exploitation claim on the Tenable/GHSA material reviewed this pass. Australia relevance: Apple container tooling / Mac container workflows pulling from untrusted registries.
Product
Apple containerization (Swift package apple/containerization) RegistryClient
Versions
Affected: ≤ 0.41.0 per GHSA; patched: > 0.41.0 per GHSA (confirm build; Tenable cites 0.41.0)
CVSS
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
AVAttack Vector
Network
ACAttack Complexity
Low
PRPrivileges Required
None
UIUser Interaction
None
SScope
Unchanged
CConfidentiality
High
IIntegrity
None
AAvailability
None
Exploited in Australia?
unknown
Patch to
Upgrade apple/containerization to a GHSA-listed patched build (> 0.41.0); avoid pulling images/auth from untrusted registries until patched.
NLnet Labs advisory dated 16 September 2026 (covered by The Hacker News 17 Sep) assigns CVE-2026-81642 to a Critical heap overflow in Unbound’s DNSSEC validator when digesting a DNSKEY whose owner name is a compression pointer into its own RDATA. An attacker who controls a malicious zone and queries a vulnerable resolver can cause denial of service and possible remote code execution through attacker-controlled data. NLnet Labs rates Critical with maintainer CVSS 9.1 (CVSS:4.0 network/no privileges/no UI; NVD still awaiting analysis per THN). Affected: Unbound up to and including 1.26.0 (includes 1.25.2 and 1.26.0). Fixed: Unbound 1.26.1 (source + Windows binaries) or apply NLnet Labs patches (minimal or complete for CVE-2026-81642; combined patch covers nine CVEs in the release, including high CVE-2026-82717 CNAME-synthesis heap corruption). NLnet Labs reports no known exploitation; CISA exploitation “none” on disclosure day per THN. Primary: NLnet Labs CVE-2026-81642.txt / security advisories; wire: THN 17 Sep 2026.
Product
NLnet Labs Unbound DNS resolver (DNSSEC validator)
Versions
Affected: up to and including 1.26.0; fixed: 1.26.1 (or vendor-packaged rebuilds with NLnet Labs patches)
CVSS
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H
AVAttack Vector
Network
ACAttack Complexity
Low
ATAttack Requirements
None
PRPrivileges Required
None
UIUser Interaction
None
VCVulnerable System Confidentiality
High
VIVulnerable System Integrity
High
VAVulnerable System Availability
High
Exploited in Australia?
unknown
Patch to
Upgrade Unbound to 1.26.1 or later; if blocked, apply NLnet Labs patch_CVE-2026-81642_with.diff (or combined 1.26.1 patch) and rebuild; prioritise public recursive resolvers with DNSSEC validation
ISC published BIND 9 security advisories dated 16 September 2026 covering 14 denial-of-service vulnerabilities (SecurityWeek: seven high-severity). High CVEs include CVE-2026-80274, CVE-2026-76163, CVE-2026-19666 (use-after-free in query_addnoqnameproof() via DNS64 filter64; ISC CVSS 7.5, CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H), CVE-2026-81563, CVE-2026-77692 (unauthenticated remote named crash via a single crafted DoH SIG(0) request then premature connection close; ISC CVSS 7.5), CVE-2026-19667, and CVE-2026-81736. Triggers include mismatched NOQNAME proof, QTYPE TKEY queries, malformed authoritative answers, SVCB/HTTPS AliasMode records, crafted DoH, and oversized negative answers. ISC states it is not aware of exploitation of the resolved bugs. Fixed builds: BIND 9.21.26 and 9.20.29 (per SecurityWeek quoting ISC). Primary: ISC KB advisories; wire: SecurityWeek 17 Sep 2026.
Product
ISC BIND 9 (named DNS server)
Versions
Affected lines prior to fixed releases; fixed: BIND 9.21.26 and 9.20.29 (SecurityWeek / ISC)
CVSS
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
AVAttack Vector
Network
ACAttack Complexity
Low
PRPrivileges Required
None
UIUser Interaction
None
SScope
Unchanged
CConfidentiality
None
IIntegrity
None
AAvailability
High
Exploited in Australia?
unknown
Patch to
Upgrade BIND to 9.21.26 or 9.20.29 (or later supported fixed builds); prioritise DoH-exposed resolvers for CVE-2026-77692
Micah Lee (16 September 2026; dataset from DDoSecrets / stegan0gram field extraction, also covered by 404 Media and Wired) analyses firmware from an in-use Flock Safety automatic licence-plate reader (ALPR) camera. The unit ran a modified Android 8.1 build dated 5 June 2025 on Linux 3.18.71 — far past vendor/Google support — and ships multiple Flock apps. Lee documents a hard-coded x-api-key in an app used to request device credentials from hpnotiq.flocksafety.com (MAC-address keyed), with returned credentials stored in plaintext and usable to mint bearer tokens via device-login.flocksafety.com. Lee lists older public Android/kernel CVEs the patch level likely predates but does not claim live exploitation tests on this hardware. Flock gave a statement to 404 Media/Wired (per Lee). No CVE assigned in the write-up. Primary: Micah Lee analysis; context: DDoSecrets dataset.
Analysed image: Android 8.1 build 2025-06-05; Linux 3.18.71 (one field unit)
Exploited in Australia?
unknown
Patch to
Operators of Flock (or similar) ALPR estates: demand current supported OS/firmware, rotate any exposed device API keys/credentials, restrict camera management planes; do not reuse leaked keys from public research
Cisco PSIRT advisory cisco-sa-ISE-ABP-VNSW7Tn5 (first published 16 September 2026 16:00 GMT) covers CVE-2026-76460, a maximum-severity authentication bypass in an API of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC), regardless of configuration. Insufficient authentication control on an API endpoint lets an unauthenticated remote attacker send a crafted request and bypass the web-based management interface to gain unauthorised device access; Cisco notes successful exploitation may yield root command execution and that on-box evidence can be removed afterward. Cisco CVSS 3.1 base 10.0 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H); CWE-648; Bug CSCww39530. No workarounds; temporary mitigation: infrastructure ACLs restricting management/control-plane traffic to the device. Fixed software: ISE/ISE-PIC 3.5 Patch 4, 3.4 Patch 7, 3.3 Patch 12, 3.2 Patch 11, 3.1 Patch 12. Cisco PSIRT is aware of active exploitation; CISA added CVE-2026-76460 to KEV on 16 September 2026 (same alert also added Acronis CVE-2026-87886). Same-day Cisco ISE/ISE-PIC criticals including CVE-2026-76423 are noted as related context, not separate desk cards — only 76460 has claimed in-the-wild use in the PSIRT advisory. Hunt ise-kong/access.log for suspicious usernames and correlate off-box network/firewall logs. Primary: Cisco PSIRT; wires: BleepingComputer / SecurityWeek 17 Sep 2026.
Forever Security (16 September 2026; also The Hacker News) documents BragJack: a research technique where a malicious Chromium extension with common page-modify and declarativeNetRequest permissions injects into the trusted origin the browser AI "body" listens to, then commands the built-in assistant. Affected demos: Gemini Live in Chrome (CVE-2026-0628, CVSS 8.8 per CISA score cited by researchers; fixed in Chrome 143.0.7499.192, Jan 2026), Microsoft Edge (CVE-2026-55945, CVSS 4.2; fixed in Edge 150.0.4078.48, 2 Jul 2026), Perplexity Comet, Opera Neon, and Claude in Chrome (latter three without CVE; vendor bounty acknowledgements claimed). Impacts vary by product (agent hijack, local file read, camera/mic on Chrome). Researcher demos only — not reported in the wild; requires the attacker's extension already installed. Primary: Forever Security; wire: The Hacker News.
Product
Built-in browser AI assistants (Chrome Gemini Live; Edge; Perplexity Comet; Opera Neon; Claude in Chrome)
Versions
Chrome fixed CVE-2026-0628 in 143.0.7499.192; Edge fixed CVE-2026-55945 in 150.0.4078.48; Comet/Opera Neon/Claude in Chrome: see vendor guidance / Forever Security write-up
CVSS
8.8 (CVE-2026-0628, CISA-scored per Forever Security); 4.2 (CVE-2026-55945)
Exploited in Australia?
unknown
Patch to
Update Chrome/Edge to fixed builds; restrict extension install (allow lists); treat browser AI agent surfaces as high-privilege; review Forever Security mitigations
Wordfence/Defiant (wired by SecurityWeek 16 September 2026) documents two critical unauthenticated remote-code-execution chains in StellarWP The Events Calendar plugin (~600k+ installs; ~240k on vulnerable branches per SW). CVE-2026-78159 (CVSS 9.8): unauthenticated code injection via insufficient validation when processing single-event HTML/comment area — patched in 6.17.3.1 (25 August 2026). CVE-2026-78006 (CVSS 9.8): unauthenticated PHP object injection when event comments are enabled/visible — payload reaches the vulnerable path before moderation; patched in 6.17.4.1 (10 September 2026). Both can fully compromise the WordPress site. Update to 6.17.4.1 or later. Primary research: Wordfence Argus blog (URL may be bot-gated); wire: SecurityWeek.
Product
The Events Calendar (WordPress plugin; StellarWP)
Versions
Prior to 6.17.3.1 (CVE-2026-78159); prior to 6.17.4.1 (CVE-2026-78006)
WSO2 security advisory WSO2-2026-5328 / CVE-2026-5430 (published 3 May 2026; Critical): JWT authentication can be bypassed when a token is signed with an unsupported algorithm, allowing unauthorized access and potential administrative account takeover. Vendor CVSS 10.0 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H); single-tenant deployments adjusted to 9.8 (S:U). Affected: WSO2 API Manager 4.1.0–4.6.0; API Control Plane 4.5.0/4.6.0; Traffic Manager 4.5.0/4.6.0; Universal Gateway 4.5.0/4.6.0. The Hacker News (16 September 2026) cites watchTowr honeypot telemetry capturing forged admin JWTs on 13 September 2026 — active in-the-wild exploitation attempts. Support subscription holders: apply stated update levels (e.g. API Manager 4.6.0 UL 21, 4.5.0 UL 57, 4.4.0 UL 72, 4.3.0 UL 108, 4.2.0 UL 197, 4.1.0 UL 257; Control Plane/Traffic Manager/Universal Gateway levels on the advisory). Community: GitHub fixes carbon-apimgt PR 13752 and product-apim PR 14167, or migrate to an unaffected release. Credits: Hacktron Team. Primary: WSO2 WSO2-2026-5328; wire: The Hacker News / watchTowr.
Product
WSO2 API Manager / API Control Plane / Traffic Manager / Universal Gateway
Versions
API Manager 4.1.0–4.6.0; API Control Plane 4.5.0–4.6.0; Traffic Manager 4.5.0–4.6.0; Universal Gateway 4.5.0–4.6.0
CVSS
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
AVAttack Vector
Network
ACAttack Complexity
Low
PRPrivileges Required
None
UIUser Interaction
None
SScope
Changed
CConfidentiality
High
IIntegrity
High
AAvailability
High
(CVSS 3.1, WSO2 multi-tenant); 9.8 single-tenant
Exploited in Australia?
unknown
Patch to
Apply WSO2 Updates to advisory update levels (or higher); community: carbon-apimgt PR 13752 / product-apim PR 14167; or migrate to latest unaffected version; rotate exposed API credentials if compromise suspected
Docker security announcements (Sandboxes 0.42.0; NVD received CVE-2026-77179 on 15 September 2026) document two sandbox-escape flaws. CVE-2026-77179 (Critical, Docker CVSS 4.0 base 9.4): on macOS the virtio-fs host server followed symlinks when reopening an unlinked file from a stored path, so malicious guest code (e.g. a compromised AI coding agent inside sbx) could escape the shared project workspace and read/modify arbitrary host files as the VMM user — potentially host code execution. Affects Sandboxes 0.28.0 up to but not including 0.42.0 on macOS. Companion CVE-2026-79994 (High, CVSS 4.0 8.7): guest-to-host Unix-domain socket relay TOCTOU symlink race; affects 0.37.0 through 0.41.9. Both fixed in 0.42.0 (release notes / sbx-releases tag). Docker reports no exploitation; CISA SSVC exploitation none; not in KEV at wire check. Workaround if unable to upgrade: use clone mode and avoid additional host mounts. Category vulnerabilities with AI-agent sandbox tag. Primary: Docker security announcements; secondary: NVD / GitHub sbx-releases v0.42.0.
VulnCheck advisory (15 September 2026) covers CVE-2026-89026 in Issabel Framework (web UI for Issabel PBX / Asterisk). Before commit b97dbaf0b71c1c36f841e672b664afbeb02773bd the pbxapi index.php embeds a hard-coded HS256 JWT signing key identical on every install (CWE-321). Unauthenticated attackers forge bearer tokens and call /pbxapi/manager/originate with the System application parameter so Asterisk runs arbitrary OS commands as the Asterisk user. VulnCheck rates CVSS 4.0 9.3 (CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N); The Hacker News cites CVSS 3.1 9.8. Patch (1 August 2026) replaces the hard-coded key with a key from /etc/issabel.conf. Shadowserver first observed exploitation on 9 September 2026; scale/actors not detailed. Apply the patched framework commit or later; rotate any JWT material that relied on the shared key. Primary: VulnCheck advisory; wire: The Hacker News 16 Sep 2026.
Product
Issabel Framework (Issabel PBX / Asterisk pbxapi)
Versions
Framework before commit b97dbaf0b71c1c36f841e672b664afbeb02773bd (hard-coded JWT in pbxapi index.php)
JFrog (15 September 2026) documents ParaShells: an unprivileged local user on macOS can get root via Parallels Desktop's prl_disp_service (world-writable Unix socket, weak local-client auth, appliance-extract argument injection into tar --use-compress-program). Lab-proven on Desktop 26.4.0 build 57513 (Apple silicon); treat installs that still expose the same InstallAppliance extract template and dispatcher socket as in scope. CVE-2026-90894. Fixed in Parallels Desktop 27.0.0 (JFrog: fix shipped 1 Sep; CVE/blog 14–15 Sep). THN notes Intel Macs cannot install Desktop 27 — those hosts need interim local-account lockdown / vendor guidance. No in-the-wild exploitation reported by JFrog. Primary: JFrog research blog.
Product
Parallels Desktop for Mac
Versions
Verified vulnerable 26.4.0 (build 57513); treat same-class IPC as in scope until 27.0.0
Exploited in Australia?
unknown
Patch to
Parallels Desktop 27.0.0+ (Intel Macs: cannot install 27 — apply interim local lockdown per JFrog/vendor)
Google’s September 2026 Pixel update (patch level 2026-09-05) addresses CVE-2026-58704 in the Cellular Modem: improper authorization / logic error enabling remote (proximal/adjacent) privilege escalation with low privileges, no user interaction. NVD (published 15 September 2026; Google as source) scores CVSS 3.1 8.0 (AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). BleepingComputer (16 September 2026) cites Google’s Pixel bulletin warning of indications the flaw “may be under limited, targeted exploitation.” Same bulletin set covers 110 Pixel issues including additional critical/high RCE and privilege-escalation fixes. Distinct from desk card android-september-2026-bulletin (AOSP OEM bulletin). Apply Pixel Security update to 2026-09-05+. Primary: NVD CVE-2026-58704; wire: BleepingComputer; vendor bulletin URL (may require Google developer sign-in).
Product
Google Pixel (Cellular Modem / Android kernel per NVD affected data)
Versions
Affected Pixel builds before security patch level 2026-09-05; all supported Google Pixel devices receive the update per vendor/wire
CVSS
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AVAttack Vector
Adjacent
ACAttack Complexity
Low
PRPrivileges Required
Low
UIUser Interaction
None
SScope
Unchanged
CConfidentiality
High
IIntegrity
High
AAvailability
High
(CVSS 3.1, NVD secondary)
Exploited in Australia?
unknown
Patch to
Install Pixel Security update to patch level 2026-09-05 or newer (Settings > Security & privacy > System & updates > Security update)
Google Stable Channel Update for Desktop (15 September 2026) promotes Chrome to 153.0.8010.47/.48 (Windows/Mac) and 153.0.8010.47 (Linux) with 42 security fixes. Critical entries include CVE-2026-91726 (OOB read in WebGL), CVE-2026-91721 (UAF in Internals), and CVE-2026-91749 (UAF in Workers), plus numerous High UAFs, race conditions, and related issues. Distinct from desk card cve-2026-87491 (Chrome 153.0.8010.36/.37 V8 OOB-write 0-day on 8 Sep). Mozilla MFSA 2026-90 (announced 15 September 2026) ships Firefox 156 with individual CVEs for high-impact bugs (privilege escalation / UAF / WebGL boundary issues among others; Thunderbird 156 / ESR trains also updated per SecurityWeek). Neither vendor claims exploitation in the wild for this batch. SecurityWeek (16 Sep) summarised ~115 combined defects. Primary: Chrome Releases + Mozilla MFSA 2026-90.
Product
Google Chrome; Mozilla Firefox (and related Thunderbird/ESR builds per MFSA family)
Versions
Chrome prior to 153.0.8010.47/.48 (Win/Mac) / 153.0.8010.47 (Linux); Firefox prior to 156
Exploited in Australia?
unknown
Patch to
Update Chrome to 153.0.8010.47/.48 (or newer); update Firefox to 156 (and Thunderbird/ESR builds listed in related MFSAs)
Oracle Critical Security Patch Update advisory — September 2026 (Rev 1, 15 September 2026) contains 673 new security patches across product families. SecurityWeek (16 September 2026) notes the matrices cover on the order of 800+ CVE IDs including third-party component fixes, with more than 100 critical-severity issues and over 240 remotely exploitable without authentication. Largest batches include Oracle E-Business Suite, Fusion Middleware, and Hyperion. Notable CVSS 10.0 entries include Oracle Access Manager Authentication Engine CVE-2026-71133 (HTTP, unauthenticated network, versions 12.2.1.4.0 and 14.1.2.1.0) and Oracle Internet Directory OID LDAP Server CVE-2026-83059 (LDAP, unauthenticated network, 12.2.1.4.0 and 14.1.2.1.0). Oracle again warns of exploitation attempts against already-patched issues where customers delayed applying updates; no claim in the advisory that these September flaws are exploited in the wild. Apply the September 2026 CSPU for each product family you run. Distinct from desk card oracle-cspu-20260818. Primary: Oracle CSPU September 2026; wire: SecurityWeek 16 Sep.
Product
Oracle product families in the September 2026 CSPU (incl. E-Business Suite, Fusion Middleware, Hyperion, Access Manager, OID, Database Server, Java SE, others)
Versions
See September 2026 CSPU risk matrices; e.g. Access Manager 12.2.1.4.0 / 14.1.2.1.0; OID 12.2.1.4.0 / 14.1.2.1.0 among others
CVSS
Up to
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
AVAttack Vector
Network
ACAttack Complexity
Low
PRPrivileges Required
None
UIUser Interaction
None
SScope
Changed
CConfidentiality
High
IIntegrity
High
AAvailability
High
(CVE-2026-71133 Access Manager; CVE-2026-83059 OID LDAP, Oracle)
Exploited in Australia?
unknown
Patch to
September 2026 Critical Security Patch Update for each affected product family; prioritise unauthenticated network 9.8–10.0 matrix rows
Acronis security advisory SEC-10986 / update UPD-2609-3d72-20a7 (wired by BleepingComputer 15 September 2026) covers CVE-2026-87886, a high-severity Linux local privilege escalation in Acronis Backup plugin for cPanel & WHM and the Acronis Backup extension for Plesk. Acronis assigns severity 7.8. A low-privileged attacker can raise privileges on a vulnerable Linux host without user interaction; further exploit detail withheld while patches propagate. Acronis says exploitation has been detected in the wild in limited, targeted attacks against cPanel & WHM plugin deployments (assessment based on a single report from a potentially affected customer; no public IoCs released). Affected: cPanel & WHM plugin builds earlier than 1.9.3.1021 (fixed 1.9.3 HF3); Plesk extension builds earlier than 1.8.11.638 (fixed 1.8.11). Apply those updates immediately. Primary: Acronis SEC-10986; wire: BleepingComputer 15 Sep. UPDATE 16 September 2026: CISA added CVE-2026-87886 to KEV (same alert as Cisco ISE CVE-2026-76460). Distinct from desk card cve-2026-60004 (Gitea / Red Heron).
Product
Acronis Backup plugin for cPanel & WHM; Acronis Backup extension for Plesk
BleepingComputer (15 September 2026) relays Wordfence/Defiant telemetry that attackers are actively exploiting CVE-2026-27540 in the premium WooCommerce Wholesale Lead Capture WordPress plugin. Unauthenticated AJAX action wwlc_file_upload_handler accepts a user-controlled file_settings allowlist, letting attackers permit .php uploads and drop webshells (researcher: Teemu Saarentaus). Affected: versions 2.0.3.1 and older; fixed in 2.0.3.2 (released 20 February). Wordfence reports 100,000+ blocked attacks with spikes around 4–17 June, 1 July, and 30 August 2026; The Hacker News (16 September) cites CVSS 9.8 and lists recent attacker IPs (including 92.241.13.213, 31.59.129.150, 92.241.13.140, 23.137.105.214, 23.180.120.140, 104.194.9.138, 187.75.114.36, 114.10.43.203, 37.114.144.209 and IPv6 2a0f:85c1:840:5389::1). Hunt admin-ajax.php calls to wwlc_file_upload_handler, unexpected PHP under uploads (e.g. shell.php), and unknown admin accounts; upgrade to 2.0.3.2+. Primary wire: BleepingComputer; UPDATE 17 Sep: CVSS + IoCs from THN/Wordfence.
Product
WooCommerce Wholesale Lead Capture (WordPress premium plugin)
Versions
≤ 2.0.3.1 affected; fixed 2.0.3.2 (20 Feb release per wire)
CVSS
9.8
Exploited in Australia?
unknown
Patch to
Upgrade WooCommerce Wholesale Lead Capture to 2.0.3.2 or later; block Wordfence-listed attacker IPs; audit uploads and admin-ajax wwlc_file_upload_handler hits
WA Cyber Security Unit advisory 20260915001 (15 September 2026, TLP:CLEAR) highlights CVE-2026-69829, a Critical remote code execution flaw in Microsoft Windows Shell with CVSS 9.8. WASOC states successful exploitation could allow an unauthenticated attacker to execute arbitrary code and potentially fully compromise affected systems. Affected products/versions are as listed by Microsoft on the MSRC update-guide entry for CVE-2026-69829 (JS-rendered; versions not mirrored here beyond vendor listing). WASOC reports no exploitation observed on Western Australian Government networks at time of writing and recommends applying Microsoft’s fixes per normal patch timeframes. Primary: Microsoft MSRC CVE-2026-69829; AU wire: WASOC 20260915001.
Product
Microsoft Windows Shell
Versions
Vendor-listed products and versions on MSRC CVE-2026-69829 (WASOC points administrators there)
CVSS
9.8
Exploited in Australia?
no
Patch to
Apply Microsoft security updates for CVE-2026-69829 per MSRC; prioritise internet-facing and high-value Windows endpoints/servers
WA Cyber Security Unit advisory 20260915003 (15 September 2026, TLP:CLEAR) relays Canonical LXD updates for eight Critical issues (CVE-2026-66897, CVE-2026-66898, CVE-2026-63300, CVE-2026-63299, CVE-2026-63297, CVE-2026-63296, CVE-2026-63294, CVE-2026-62420), each listed at CVSS 9.9. Successful exploitation can let a remote attacker achieve root command execution on the LXD host. Affected lines per WASOC: LXD 6.x prior to 6.10; 5.21.x prior to 5.21.7; 5.0.x prior to 5.0.9; all versions prior to 4.0.13. Canonical GitHub advisory GHSA-q39m-8fx9-42fv (CVE-2026-66897 example) documents instance template path traversal to arbitrary host file write as root, with patched versions including 4.0.13, 5.0.9, 5.21.7, 6.9-ab8fad2, and 6.10; related LXD GHSAs cover further path-traversal / privilege issues in the same wave. WASOC reports no exploitation observed on Western Australian Government networks at time of writing. Patch to vendor-fixed LXD builds; review Canonical LXD security advisories for the full set. Primary: Canonical LXD GHSA index; AU wire: WASOC 20260915003.
Product
Canonical LXD
Versions
6.x prior to 6.10; 5.21.x prior to 5.21.7; 5.0.x prior to 5.0.9; all versions prior to 4.0.13 (WASOC). Example GHSA-q39m patched: 4.0.13, 5.0.9, 5.21.7, 6.9-ab8fad2, 6.10
CVSS
9.9
Exploited in Australia?
no
Patch to
Upgrade LXD to 6.10 / 5.21.7 / 5.0.9 / 4.0.13 (or newer vendor-fixed builds); apply all related Canonical LXD GHSAs in this wave
cPanel Security advisory (14 September 2026) warns of a critical privilege-escalation flaw in LiteSpeed Web Server Enterprise: on shared-hosting servers a malicious low-privilege website user could gain root-level access, bypassing account isolation including CageFS, and access or alter other sites and the server. Affected: LiteSpeed Web Server Enterprise prior to v6.3.7. Fix: upgrade to 6.3.7 or later. cPanel/LiteSpeed publish the forced update command /usr/local/lsws/admin/misc/lsup.sh -f -v 6.3.7 (auto-update may lag; as of THN 15 Sep, download page still listed 6.3.6 as stable). LiteSpeed store announcement for 6.3.7 (11 September 2026) lists three security changes (lscgid auth, internal redirect URL validation, block internal-use env vars from .htaccess) without naming a CVE or privilege-escalation root cause; neither cPanel nor LiteSpeed assigned a public CVE or CVSS for this Enterprise web-server issue as of 15 September 2026 desk check. Advisory does not state in-the-wild exploitation for this Enterprise flaw (distinct from earlier actively exploited LiteSpeed cPanel-plugin issues CVE-2026-48172 and CVE-2026-54420 already on this desk). OpenLiteSpeed not named in the cPanel advisory. Primary: cPanel; vendor release: LiteSpeed 6.3.7 announcement; wire: The Hacker News (15 Sep 2026).
Product
LiteSpeed Web Server Enterprise (shared hosting / cPanel stacks; CageFS isolation)
Versions
Enterprise prior to 6.3.7; fixed in 6.3.7+
Exploited in Australia?
unknown
Patch to
Force-upgrade LiteSpeed Enterprise to 6.3.7+ via /usr/local/lsws/admin/misc/lsup.sh -f -v 6.3.7; resume follow_stable afterward per LiteSpeed docs; no vendor workaround published
Antonio De Turris (deturris.io, 14 September 2026) details two authorization bypasses in n8n’s AI Agents feature. CVE-2026-65015: a read-only Project Viewer can instruct an agent’s run_node_tool to execute arbitrary n8n nodes (including HTTP Request) with the project’s credentials; if Execute Command is enabled on self-hosted, that path can reach host command execution. Affected: all versions before 2.29.8, plus 2.30.0; fixed in 2.29.8 and 2.30.1. GitHub GHSA-x5vx-c2c8-m3w9 rates High (CVSS 4.0 overall 7.2). CVE-2026-59207: the agent MCP client sends credential headers without enforcing “Allowed HTTP Request Domains”, so a use-only credential holder can point MCP at an attacker host and exfiltrate the secret. Affected: all before 2.27.4, plus 2.28.0; fixed in 2.27.4 and 2.28.1. GHSA-h44j-f5r5-ph73 High (CVSS 4.0 overall 7.1). Reported June 2026; vendor advisories published with the fixes. Primary: researcher writeup; vendor: n8n GitHub security advisories.
Product
n8n (self-hosted / Enterprise project AI Agents; MCP connector)
Versions
CVE-2026-65015: <2.29.8 and 2.30.0 (fix 2.29.8 / 2.30.1). CVE-2026-59207: <2.27.4 and 2.28.0 (fix 2.27.4 / 2.28.1)
Silent Signal (14 September 2026) documents a pre-authentication vulnerability chain in the IBM Db2 Mirror for i web interface (Db2MirrorServlet on the IBM i administrative Liberty instance; lab IBM i V7R5, GUI WAR build timestamp late 2025). The write-up describes how authentication/validation filters can be confused, enabling unauthenticated reach into powerful admin features (arbitrary file read via log/trace viewers, attacker-influenced writes into an expanded WAR path that becomes JSP execution in Liberty, then a native helper crossing to QSECOFR on the local IBM i system). No CVE identifier is assigned in the post; the author withholds exploit/JSP payload bodies and frames the piece as vulnerability mechanics plus hardening guidance. Confirm IBM PSIRT/bulletin status for your Db2 Mirror for i / IBM i web stack build before declaring patched. Primary: Silent Signal; no separate vendor bulletin URL confirmed at desk time.
Product
IBM Db2 Mirror for i (web GUI / Liberty on IBM i)
Versions
Tested on IBM i V7R5 with a late-2025 Db2 Mirror GUI WAR; exact fixed PTF/build not stated in the write-up — verify against IBM security notices for your release
Exploited in Australia?
unknown
Patch to
IBM i admins: restrict Db2 Mirror / admin Liberty exposure; apply current IBM security PTFs for Db2 Mirror for i and related web stack; review auth filters and expanded-WAR write paths per Silent Signal guidance
Cisco PSIRT advisory cisco-sa-esa-inj-2bLVGmhX (14 September 2026) covers CVE-2026-76461, a Critical SQL injection in email parsing of Cisco AsyncOS Software for Cisco Secure Email Gateway (physical and virtual, any configuration). Unauthenticated remote attackers can send a crafted email with malicious SQL statements and gain command execution as root on the underlying OS. Cisco CVSS 3.1 base 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H); CWE-89; Bug CSCwu56234. Not affected: Secure Email and Web Manager, Secure Web Appliance. Cisco PSIRT became aware of active exploitation in September 2026; Cloud customers with detected malicious activity were contacted directly; Cloud fleet already upgraded to 16.5.0-780. IoC guidance: grep mail_logs for suspicious SQL (example COPY.*TO PROGRAM); also review external network/firewall logs because root access can erase on-box evidence. No workarounds. Fixed AsyncOS: 15.5 and earlier → 15.5.5-014; 16.0 → 16.0.4-302; 16.5 → 16.5.0-780 (Cisco strongly recommends 16.5.0-780). CISA added CVE-2026-76461 to KEV with FCEB remediation due 17 September 2026 (wire: BleepingComputer / THN 15 Sep). Same-day Cisco also shipped other critical SEG/SEWM fixes (CVE-2026-76440/76441/20353/76443) without claimed in-the-wild use — covered here only as context, not separate desk cards. Primary: Cisco PSIRT; wires: BleepingComputer, The Hacker News, SecurityWeek (15 Sep 2026).
Product
Cisco Secure Email Gateway (AsyncOS; physical and virtual appliances)
Versions
AsyncOS 15.5 and earlier (fix 15.5.5-014); 16.0 (fix 16.0.4-302); 16.5 (fix 16.5.0-780). Secure Email Cloud already on 16.5.0-780 per Cisco
CVSS
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AVAttack Vector
Network
ACAttack Complexity
Low
PRPrivileges Required
None
UIUser Interaction
None
SScope
Unchanged
CConfidentiality
High
IIntegrity
High
AAvailability
High
Exploited in Australia?
unknown
Patch to
Upgrade AsyncOS to 15.5.5-014 / 16.0.4-302 / 16.5.0-780 (prefer 16.5.0-780); hunt mail_logs SQL IoCs and off-box network anomalies; if compromised, rebuild virtual appliances / engage TAC for physical
Apple published security-content pages dated 14 September 2026 for major releases including iOS 27 and iPadOS 27 (support.apple.com/en-us/149034; 100+ CVE entries on that page alone), macOS Tahoe 26.7 (149042), macOS Sequoia 15.8 (149043), Safari 27 (149039), plus tvOS/watchOS/visionOS 27 and macOS Golden Gate 27. Highlighted iOS 27 entries (Apple does not publish CVSS): sandbox breakout CVE-2026-65354; sandboxed app to kernel privileges CVE-2026-84607; WebKit universal cross-site scripting via crafted webarchive CVE-2026-86898; ImageIO/remote code-execution class issues including CVE-2026-65414; privileged-network IPSec authentication bypass CVE-2026-65329 (also listed on earlier 26.6.x content). No “actively exploited” callouts observed on the fetched iOS 27 page. UPDATE 16 September 2026 desk: macOS Golden Gate 27 security content (support.apple.com/en-us/149035) re-fetched — 200+ CVE entries on that page alone; SecurityWeek wire summarised ~200 fixes across the iOS 27 / Golden Gate 27 family. Primary remains Apple iOS/iPadOS 27; Golden Gate URL retained as secondary. Separate from prior desk card apple-ios-2661-20260817.
Product
Apple iOS, iPadOS, macOS Tahoe/Sequoia, Safari (also tvOS/watchOS/visionOS 27)
Versions
iPhone 11 and later; listed iPad models; macOS Tahoe 26.7 / Sequoia 15.8; Safari 27 on Sequoia/Tahoe
Exploited in Australia?
unknown
Patch to
iOS/iPadOS 27 (or current security update for your train); macOS Tahoe 26.7 / Sequoia 15.8; Safari 27
F5 Labs Sensor Intel (11 September 2026; BleepingComputer 14 September) reports a sustained August 2026 mass-scanning campaign against internet-exposed Vite development servers harvesting cloud credentials and IaC state. Activity is anchored on CVE-2026-39364, an unauthenticated server.fs.deny / file-read bypass via query parameters such as ?raw, ?import&raw, or ?import&url&inline on /@fs/ requests (GitHub advisory GHSA-v2wj-q39q-566r, published 6–7 April 2026). GitHub rates CVSS 4.0 8.2 (CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N); F5 also cites CVSS 7.5 High for the same CVE. Affected: Vite 7.1.0–7.3.1 and 8.0.0–8.0.4 (also vite-plus ≤0.1.15). Patched: 7.3.2, 8.0.5, and current patched lines on older branches per vendor. F5 honeypots saw ~807 session-grouped attacks and ~32,000 raw events in August, wordlisting .env files, AWS/Azure credential paths, Terraform/serverless state, and /proc environ; scanners also reused older Vite bypasses CVE-2025-30208, CVE-2025-31125 (CISA KEV), and CVE-2024-45811. Exposure usually comes from --host / server.host or Docker port maps (often 5173). Mitigations: upgrade; do not expose dev ports; block /@fs/; rotate secrets if an unpatched Vite was reachable. Primary: F5 Labs; vendor: GitHub advisory; secondary: BleepingComputer.
Product
Vite (npm frontend tooling / development server)
Versions
Affected 7.1.0–7.3.1 and 8.0.0–8.0.4 (vite-plus ≤0.1.15); requires network-exposed dev server (--host/server.host)
Upgrade to Vite 7.3.2 / 8.0.5 (or latest patched on your branch); remove public exposure of port 5173 /@fs/; rotate AWS/Azure/.env/Terraform secrets if exposed
Wordfence CNA (CVE published 12 September 2026; disclosed 11 Sep; vendor notified 23 Aug) documents CVE-2026-78175 in Themeum Tutor LMS (WordPress e-learning plugin): authenticated subscriber+ PHP object injection via the withdraw_method_field parameter of the tutor_save_withdraw_account AJAX handler (CWE-502). The handler relies on a nonce only (no capability/role check) and passes attacker-controlled values through esc_sql() before update_user_meta(); on retrieve, unserialize() over-reads into attacker-controlled bytes, enabling arbitrary object injection. Wordfence describes a GuzzleHttp\Cookie\FileCookieJar POP chain via the plugin's bundled PayPal Composer autoloader (TUTOR\RestAPI spl_autoload_register), writing attacker-controlled content to an attacker-chosen filename — remote code execution on the web server. CVSS 3.1 8.8 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Affected: all versions ≤ 4.0.7; unauthenticated pathway when user registration is enabled (common for student/teacher sign-up) and monetization is enabled. CISA ADP SSVC (15 Sep): Exploitation none / Automatable no / Technical Impact total. No in-the-wild exploitation claimed in the CNA. Patch: Tutor LMS 4.0.8 (wire reporting: Themeum release ~10 Sep 2026). Credits: Chloe Chamberland / Wordfence Argus. Primary: Wordfence threat-intel / CVE record; wire: Cyber Security News 18 Sep.
Upgrade Tutor LMS to 4.0.8 or later; disable open student registration / monetization withdrawal features until patched; review subscriber accounts and web-accessible uploads
ExPatch (Denis and Aleksander Rostilov; writeup 12 September 2026; The Hacker News 14 September) detail a stored XSS in Telegram Desktop’s HTML chat export: inline-keyboard button text was written into export HTML without escaping (message body and names were escaped). A bot could hide a script in button text; forwarded link-button messages keep the payload; opening an old export in a browser runs the script and can exfiltrate that file’s messages/metadata or rewrite the page (fake verification form demo). No in-the-wild use claimed. Reported to Telegram 3 June 2026. Affected stable: 4.15.1 (March 2024) through 6.9.3. Fixed: 6.9.4 beta (3 July 2026), 7.0.1 stable (14 July 2026) and later. App update does not scrub previously exported HTML. No CVE assigned as of THN’s 14 September check. Primary: ExPatch; vendor: tdesktop 7.0.1; secondary: THN.
Product
Telegram Desktop (Windows, macOS, Linux HTML export)
Versions
Affected 4.15.1 through 6.9.3; fixed 6.9.4 beta / 7.0.1+
Exploited in Australia?
unknown
Patch to
Upgrade Telegram Desktop to 7.0.1 or later (or 6.9.4+ beta); treat pre-fix HTML exports as untrusted; re-export after upgrade if archives are retained
GitHub advisory GHSA-3c86-2m5g-59q7 (published 28 August 2026; CVE-2026-90553) covers vLLM before 0.28.0. The LlavaOnevision2 processor loader calls transformers.dynamic_module_utils.get_class_from_dynamic_module with trust_remote_code=..., but that helper has no such parameter — the flag is swallowed into **kwargs and ignored — so attacker-supplied processing_llava_onevision2.py / video_processing_llava_onevision2.py top-level code runs even when the operator set trust_remote_code=False. Because LlavaOnevision2ForConditionalGeneration is a built-in vLLM architecture, model config load does not refuse the path. NVD: CVSS 3.1 7.8 (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) and CVSS 4.0 8.5 High. Patch to vLLM 0.28.0 or later. Category tech (LLM inference stack, not a model-vendor guidance item). No Australian exploitation reports on this pass. Primary: GitHub advisory; also NVD.
Product
vLLM (LLM inference engine)
Versions
Affected: versions before 0.28.0; patched: >= 0.28.0
CVSS
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AVAttack Vector
Local
ACAttack Complexity
Low
PRPrivileges Required
None
UIUser Interaction
Required
SScope
Unchanged
CConfidentiality
High
IIntegrity
High
AAvailability
High
(CVSS 3.1); 8.5 (CVSS 4.0 High, NVD)
Exploited in Australia?
unknown
Patch to
Upgrade to vLLM 0.28.0 or later; do not load untrusted LlavaOnevision2 models even with trust_remote_code=False on older builds
WebPros Plesk security articles (updated 10 September 2026) cover two Critical Backup Manager flaws on Plesk for Linux. CVE-2026-68487 is path traversal via an unsigned backup header that lets an authenticated customer write arbitrary root-owned files on the host (full server compromise). CVE-2026-68488 is a TOCTOU symlink race during subscription-content restore that can change ownership of directories outside the attacker’s subscription, likewise enabling root. Both carry CVSS 3.0 9.9 (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) per the HackerOne CNA records. Affected: Plesk for Linux 18.0.80.6 and earlier, and 18.0.79.10 and earlier; Plesk for Windows not affected. Fixed: 18.0.80.7 and 18.0.79.11 or later. No interim mitigation listed — update is the remediation. Multi-tenant / shared-hosting boxes with customer Panel+FTP are the highest priority. Wire: Cyber Security News (13 Sep) on 68488. Primary: Plesk KB for CVE-2026-68487; companion KB for CVE-2026-68488.
Product
WebPros Plesk Obsidian Backup Manager (Linux)
Versions
Affected: Plesk for Linux ≤18.0.80.6 and ≤18.0.79.10; fixed 18.0.80.7 / 18.0.79.11+; Windows not affected
CVSS
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
AVAttack Vector
Network
ACAttack Complexity
Low
PRPrivileges Required
Low
UIUser Interaction
None
SScope
Changed
CConfidentiality
High
IIntegrity
High
AAvailability
High
(CVE-2026-68487 and CVE-2026-68488, CVSS 3.0)
Exploited in Australia?
unknown
Patch to
Update Plesk Obsidian to 18.0.79.11 or 18.0.80.7 or later; hunt unexpected ownership changes outside subscription web roots and Backup Manager restore activity
GitLab Critical Patch Release (10 September 2026) ships CE/EE 19.3.2, 19.2.6 and 19.1.8. CVE-2026-85706 is a Critical path traversal in the repository commits API (improper path confinement plus missing authentication enforcement) that can let an unauthenticated requester read arbitrary files from the GitLab server under certain conditions. GitLab CVSS 10.0 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N). Impacted: CE/EE from 18.7 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2. Reported via HackerOne by s3ntago. Same release also fixes CVE-2026-87719 (EE GraphQL subscription serializer insecure deserialization; authenticated Duo Chat user; CVSS 9.9) plus further High issues. GitLab.com is patched; Dedicated customers need no action; self-managed must upgrade immediately. NEW 11 September 2026: watchTowr reports in-the-wild probes for CVE-2026-85706 within a day of disclosure (POST /api/v4/projects/{id}/repository/commits/ with file.path). Hunt those log lines. Primary: GitLab docs patch release; secondary: watchTowr / SecurityWeek / BleepingComputer. UPDATE 11 September 2026: CISA added CVE-2026-85706 to KEV (dateAdded 2026-09-11; catalogVersion 2026.09.11). Self-managed instances that have not taken 19.3.2 / 19.2.6 / 19.1.8 should treat this as actively exploited and patch immediately.
Product
GitLab Community Edition and Enterprise Edition (repository commits API; EE GraphQL Duo Chat path for CVE-2026-87719)
Versions
CVE-2026-85706: CE/EE 18.7 before 19.1.8, 19.2 before 19.2.6, 19.3 before 19.3.2. CVE-2026-87719: EE 18.3 before 19.1.8 / 19.2 before 19.2.6 / 19.3 before 19.3.2
Gen Digital Threat Labs (Alexandru-Cristian Bardaș, published 10 September 2026) details CVE-2026-51990 in Sogou Input Method for Windows: a one-click remote code execution chain combining unvalidated command-line argument injection in the sgbiz: custom protocol handler, unrestricted URL navigation in a CEF webview, and an outdated unsandboxed Chromium/CEF build (libcef.dll reported as CEF 80.1.16 / Chromium 80.0.3987.163). Gen observed UNC3569 exploiting the flaw in the wild via a crafted link to deploy the GRAYRABBIT backdoor. The issue was reported to Tencent on 9 April 2026 and fixed in Sogou Input Method version 16.3.0.3498 (released 21 April 2026): the patch validates URL arguments accepted through the protocol handler, permits only HTTPS, and restricts navigation to approved Sogou/Tencent domains — Gen and BleepingComputer (13 Sep 2026) still note the embedded Chromium remains outdated and unsandboxed. Primary: Gen Digital research; wires: The Hacker News (11 Sep 2026) and BleepingComputer (13 Sep 2026).
Wiz Research (10 September 2026) documents in-the-wild chaining of CVE-2026-42018 and CVE-2026-42016 against self-hosted JFrog Artifactory between 15 August and 8 September 2026, often dropping a custom Rust C2 backdoor. CVE-2026-42018 is an authentication flaw that can return an internal anonymous-user token to an unauthenticated requester even when anonymous access is disabled. Alone it is not admin; chained with CVE-2026-42016 (token scope / privilege escalation) Wiz saw unauthenticated requests become admin-scoped tokens, with follow-on admin account creation, malicious Groovy plugins, and Rust backdoors. Remediated builds per Wiz table include 7.111.20+, 7.117.28, 7.125.20, 7.133.29, 7.146.9+ (and Wiz’s broader “upgrade to 7.111.21 / 7.117.28 / 7.125.20 / 7.133.29 / 7.146.38 / 7.161.20 or later” guidance for the chain). Distinct from desk card cve-2026-82329 (also abused). Primary: Wiz; also JFrog advisories. UPDATE 11 September 2026: CISA added CVE-2026-42018 to the Known Exploited Vulnerabilities catalog (dateAdded 2026-09-11; catalogVersion 2026.09.11). Prioritise patching self-hosted Artifactory under BOD 26-04-style exploited-first triage; hunt anonymous/admin tokens, Groovy plugins, and Rust C2 per Wiz.
Wiz Research (10 September 2026) says CVE-2026-42016 is a privilege-escalation flaw from insufficient token scope enforcement: Artifactory validates signature/issuer but not intended scope, so a low-privileged token (including the anonymous token from CVE-2026-42018) can be escalated. Wiz observed the 42018→42016 chain in the wild 15 August–8 September 2026 alongside separate abuse of CVE-2026-82329; post-exploitation included persistent admin users, malicious Groovy plugins, and Rust C2 backdoors. Wiz lists CVE-2026-42016 impacted prior to 7.133.11 with remediated 7.133.11; for the overall campaign they urge upgrading to 7.111.21 / 7.117.28 / 7.125.20 / 7.133.29 / 7.146.38 / 7.161.20 or later and reviewing auth/admin activity. Primary: Wiz; vendor: JFrog advisories. UPDATE 11 September 2026: CISA added CVE-2026-42016 to the Known Exploited Vulnerabilities catalog (dateAdded 2026-09-11; catalogVersion 2026.09.11). Prioritise patching self-hosted Artifactory under BOD 26-04-style exploited-first triage; hunt anonymous/admin tokens, Groovy plugins, and Rust C2 per Wiz.
Product
JFrog Artifactory (self-hosted)
Versions
Impacted per Wiz: prior to 7.133.11; remediated 7.133.11 (also apply latest train patches covering the wider chain)
Exploited in Australia?
unknown
Patch to
Upgrade to fixed Artifactory builds; revoke suspicious tokens; hunt Groovy plugin and Rust backdoor IoCs per Wiz
WatchGuard PSIRT CVE-2025-14733 is an out-of-bounds write in the Fireware OS iked process that can let a remote unauthenticated attacker execute code. It affects mobile-user VPN with IKEv2 and branch-office VPN using IKEv2 with a dynamic gateway peer; boxes that previously had those configs may still be vulnerable if a branch-office VPN to a static gateway peer remains. WatchGuard rates it CVSS 4.0 9.3 (AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N) and has observed in-the-wild exploitation, including config exfiltration variants. Fixed builds include Fireware OS 2025.1.4, 12.11.6, 12.5.15 and 12.3.1-b728352 (plus rotate locally stored secrets after confirmed compromise). CISA had already flagged active exploitation; BleepingComputer (10 September 2026) reports CISA now also confirms ransomware gangs are exploiting the same CVE. Shadowserver previously saw >115k exposed Fireboxes in December and nearly 9k still unpatched months later. Distinct from desk card watchguard-fireware-iked-20260827 (August 2026 five-critical advisory set). Primary: WatchGuard PSIRT; wire: BleepingComputer; KEV: CISA catalog for CVE-2025-14733.
Product
WatchGuard Fireware OS (Firebox iked / IKEv2 VPN)
Versions
Affected trains include Fireware OS >=2025.1 & <2025.1.4; 12.x before 12.11.6 / 12.5.15 / 12.3.1-b728352 (and earlier 11.x/12.x ranges cited in vendor/wire); fixed: 2025.1.4, 12.11.6, 12.5.15, 12.3.1-b728352
Ubuntu Security Notice USN-8717-1 (noticed on HN 10 September 2026): Apache Tika's ISA-Tab parser incorrectly handled file path resolution. An attacker who can place files in a directory that Tika subsequently parses can read arbitrary files accessible to the Tika process, with contents emitted into extracted text. Fixes via Ubuntu Pro ESM Apps: jammy libtika-java 1.22-2+deb11u1ubuntu0.1~esm2; focal libtika-java 1.22-1ubuntu0.1~esm3. Primary: Ubuntu USN-8717-1.
Product
Apache Tika (libtika-java)
Versions
Ubuntu 22.04/20.04 ESM packages listed in USN-8717-1
Exploited in Australia?
unknown
Patch to
Update libtika-java per USN-8717-1 (Ubuntu Pro ESM Apps)
FortiGuard Threat Signal / Outbreak Alert (released 9 September 2026; SecurityWeek coverage 18 September) tracks active exploitation of CVE-2026-58138 in Orkes Conductor / conductor-oss: unauthenticated remote code execution via GraalVM script evaluators. Attackers POST a workflow definition with hostile INLINE (also LAMBDA, DO_WHILE, SWITCH) JavaScript or Python expressions to the workflow API; evaluators configured with HostAccess.ALL / unrestricted host access escape the sandbox and run OS commands as the Conductor process (often root). Open-source Conductor leaves the workflow API unauthenticated by default. NVD/VulnCheck describe affected range Conductor 3.21.21 before 3.30.2; complete fix in 3.30.2 (partial denyAccess blocklist on 3.30.0/3.30.1 is incomplete). Public PoC exists (incl. Exploit-DB / lab repos targeting ~3.23.0). FortiGuard telemetry: ~1,290 IPS blocks in 24h (rising) and ~6,696 over seven days; top observed sources Germany, Hong Kong, Indonesia, UAE, India. Empirical Security cited in-the-wild from ~21 August after August PoC. CVSS 9.8 reported (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Not claiming Australia KEV. Primary: FortiGuard threat signal; secondary: SecurityWeek 18 Sep / NVD.
Conductor 3.21.21 through before 3.30.2 (complete fix 3.30.2+); 3.30.0/3.30.1 partial blocklist incomplete
CVSS
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AVAttack Vector
Network
ACAttack Complexity
Low
PRPrivileges Required
None
UIUser Interaction
None
SScope
Unchanged
CConfidentiality
High
IIntegrity
High
AAvailability
High
(CVSS 3.1 Critical; SecurityWeek / public advisory materials)
Exploited in Australia?
unknown
Patch to
Upgrade to Conductor 3.30.2 or later; do not expose workflow API to the internet; firewall/segment Conductor; monitor suspicious workflow submissions and unexpected child processes from Conductor
Palo Alto Networks PSIRT CVE-2026-0307 (published 9 September 2026, updated 16 September 2026): multiple local privilege-escalation vulnerabilities in the GlobalProtect app (CWE-426 untrusted search path) let a local low-privileged user reach NT AUTHORITY\SYSTEM on Windows and root on macOS and Linux, then run arbitrary commands with administrative privileges. iOS, Android and ChromeOS are not impacted. No special configuration required. Vendor CVSS-BT 5.9 MEDIUM (CVSS 4.0); CVSS-B 8.5; exploit maturity UNREPORTED; urgency MODERATE. Palo Alto Networks says it is not aware of malicious exploitation. Fixes: GlobalProtect 6.3.3-h15+ (Windows/macOS/Linux; Linux ETA ~17 Sep, Windows/macOS ETA ~28 Sep on the advisory), 6.2.8-h14+ (Windows/macOS), 6.0.15+ (Linux/macOS; Windows ETA ~29 Oct). NGFW customers must also upgrade PAN-OS and Prisma Access tenants to builds listed in the Solution table (e.g. PAN-OS 12.2.3, 12.1.10 / 12.1.7-h5 / 12.1.4-h10, and listed 11.2/11.1/10.2 hotfixes). Prisma Access scheduled maintenance upgrades; on-demand via Support. Distinct from desk cards cve-2026-0299 and cve-2026-0251. Primary: Palo Alto Networks PSIRT.
Product
Palo Alto Networks GlobalProtect app (Windows/macOS/Linux); related PAN-OS / Prisma Access upgrades required for NGFW/PA tenants
Versions
Affected: GP 6.3 < 6.3.3-h15; 6.2 < 6.2.8-h14 (Win/macOS); 6.0 < 6.0.15 (Linux/macOS/Windows). Not iOS/Android/ChromeOS. See advisory for PAN-OS fixed builds.
Upgrade GlobalProtect to 6.3.3-h15+, 6.2.8-h14+, or 6.0.15+ per OS; upgrade PAN-OS/Prisma Access to Solution-table builds; Prisma Access via scheduled or on-demand upgrade
Check Point support articles sk1000117 and sk1000118 (disclosed 9 September 2026) cover two critical VPN-certificate handling flaws the vendor found internally. CVE-2026-85102 (sk1000117) is authentication bypass and remote code execution in Remote Access and Site-to-Site VPN on Quantum Security Gateway when certificate trust is not validated correctly during VPN negotiation. CVE-2026-85103 (sk1000118) is a heap-based buffer overflow while decoding the ASN.1 structure of a VPN certificate that can yield unauthenticated RCE on Quantum Security Gateway and Quantum Security Management. Both carry CVSS 3.1 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) per the CVE records. Vendor reporting at disclosure said no evidence of in-the-wild use. UPDATE 12 September 2026: the Dutch NCSC (alert) assesses likelihood of exploitation and potential impact as high and expects exploitation attempts soon; no public PoC reported at that writing. NCSC urges immediate updates and, for Site-to-Site VPN, limiting peers to trusted IPs. LivePatch Take 24 / matching Jumbo builds as in the SK articles; R82.20 unaffected. Affected Jumbo trains cited in public writeups include R82.10 Take 43 or below, R82 Take 125 or below, and R81.20 Take 165 or below (plus older EOS trains in third-party summaries); R82.20 called unaffected. Apply the matching Jumbo Hotfix / LivePatch from the SK articles. Primary: Check Point sk1000117; also sk1000118; wire: The Hacker News (10 Sep 2026).
Public writeups: R82.10 Jumbo Take ≤43; R82 Jumbo Take ≤125; R81.20 Jumbo Take ≤165 (and older EOS trains); R82.20 unaffected — confirm on sk1000117/sk1000118
CVSS
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AVAttack Vector
Network
ACAttack Complexity
Low
PRPrivileges Required
None
UIUser Interaction
None
SScope
Unchanged
CConfidentiality
High
IIntegrity
High
AAvailability
High
(CVE-2026-85102 and CVE-2026-85103, CVSS 3.1)
Exploited in Australia?
unknown
Patch to
Apply Check Point Jumbo Hotfix / LivePatch per sk1000117 and sk1000118 for your train
CERT/CC and BleepingComputer (9 September 2026) warn that Skullcandy Dime 3 earbuds (model S2DCW) on firmware 1.0.0.28 accept Bluetooth pairing from nearby unpaired devices without user interaction, PIN, or case access. Issue tracked as CVE-2025-20701 in the Airoha Bluetooth Audio SDK. Skullcandy says fixed in firmware 1.0.0.30, but end users have no supported update path via the Skullcandy app. Nearby attacker can hijack the audio link. Broader Airoha-based headset class affected per ERNW/TROOPERS research. Primary wire: BleepingComputer citing CERT/CC.
Product
Skullcandy Dime 3 (S2DCW) / Airoha Bluetooth Audio SDK
Versions
Affected firmware 1.0.0.28; vendor says fixed in 1.0.0.30 (no user update path reported)
Exploited in Australia?
unknown
Patch to
No consumer OTA path reported; treat as unpatchable in field — physical proximity risk; prefer devices with updateable firmware
Wiz Research (Amitai Cohen & Yaara Shriki, 9 September 2026; also THN same day) scanned ~3,074 internet-facing LiteLLM AI gateways: 294 (9.6%) accepted the docs/Docker default master key sk-1234 or required no authentication (191 of those had no key at all). Default/missing master key grants admin and exposes every configured LLM provider API key (LLMjacking), and can chain to post-auth custom-code-guardrail RCE CVE-2026-59821 (fixed v1.82.0) for root-in-container when still on vulnerable builds. Same research covers MCP auth bypass CVE-2026-59822 (already on this desk; CISA KEV; Wiz honeypot exploitation). LiteLLM still ships sk-1234 as the example/default in common install paths. Mitigate: set a unique strong master key immediately; upgrade past 1.82.0/1.84.0; review custom guardrails and pass-through endpoints. Category tech (AI gateway stack). Primary: Wiz; wire: THN. Distinct card from cve-2026-59822.
Product
BerriAI LiteLLM (open-source LLM gateway)
Versions
Default sk-1234 / missing master key on exposed instances; CVE-2026-59821 before 1.82.0; CVE-2026-59822 before 1.84.0
Exploited in Australia?
unknown
Patch to
Replace sk-1234 with a unique master key; upgrade LiteLLM >=1.84.0; audit guardrails and pass-through URLs
SecurityWeek (9 September 2026) covers Tuesday advisories from AMD, Arm, and Nvidia. AMD-SB-6034: CVE-2026-43603 NULL pointer dereference in the Linux GPU kernel driver (clear operation under compute conditions) leading to kernel crash/DoS; CVSS 4.0 6.9 (AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/...); CWE-476; credited SecMate. Mitigations: Radeon Software for Linux 26.13 for several EPYC 4004/4005 lines (20 Jul 2026); embedded EPYC/Ryzen lines targeted October 2026 per AMD bulletin. Arm advisory covers nine Mali GPU issues (Valhall / Arm 5th Gen / Bifrost kernel and userspace) enabling use-after-free, kernel info leak, or DoS. Nvidia Triton Inference Server for Linux: two high-severity defects (DoS; info disclosure/tamper/DoS). Primary: AMD bulletin; Arm/Nvidia linked from SecurityWeek (Arm/Nvidia pages 403 from this pass).
Product
AMD Linux GPU driver (EPYC/Ryzen/Radeon/Instinct); Arm Mali GPU drivers; Nvidia Triton Inference Server (Linux)
Versions
See AMD-SB-6034 tables; Arm Valhall/5th Gen/Bifrost per Arm advisory; Nvidia Triton per customer bulletin a_id/5875
The Hacker News (9 September 2026) reports Alby warned of a critical flaw in self-hosted Alby Hub (Lightning bitcoin wallet) that could let an attacker take over a wallet and send funds — only where the Hub management interface was reachable from the internet. Affected: v1.7.0 through v1.18.5 (pre-August 2025 builds); fixed from v1.19.0 (first fixed release 29 August 2025); current recommended v1.24.0. Alby says one user affected so far; technical details withheld pending responsible disclosure. Guidance: remove external reachability first (e.g. bind 127.0.0.1), then upgrade; if exposed on an affected build, change unlock password after update and contact security@getalby.com. Primary wire: THN citing Alby; releases: GitHub getAlby/hub.
Product
Alby Hub (self-hosted Lightning wallet)
Versions
Affected v1.7.0–v1.18.5 when internet-exposed; fixed v1.19.0+; recommend v1.24.0
Exploited in Australia?
unknown
Patch to
Stop publishing the Hub management port to the internet, upgrade to v1.19.0+ (prefer v1.24.0), rotate unlock password if previously exposed
BleepingComputer (9 September 2026) reports anonymous researcher Nightmare Eclipse released a ShieldCrash proof-of-concept against Microsoft Defender immediately after September 2026 Patch Tuesday. The researcher claims ShieldCrash bypasses the ShieldBreak elevation issue patched as CVE-2026-69414 and demonstrates arbitrary file read as SYSTEM on fully patched Windows 10, Windows 11, and Windows Server, without write access to the compromised system. ShieldBreak itself followed RoguePlanet (disclosed June, patched July). Microsoft had not commented to BleepingComputer at publish. Treat as a local privilege-escalation research drop / incomplete patch claim — not a remote wormable CVE. No Australian exploitation signal on this pass. Primary: BleepingComputer.
Product
Microsoft Defender / Windows 10, Windows 11, Windows Server
Versions
Claimed still reachable after September 2026 patches that addressed ShieldBreak CVE-2026-69414 — confirm against MSRC when Microsoft publishes
Exploited in Australia?
unknown
Patch to
Monitor MSRC for a follow-up Defender/Windows fix; limit local admin and EDR tamper; treat PoC as LPE research
SecurityWeek (9 September 2026) summarises Fortinet's Tuesday patch set of ten vulnerabilities. Critical CVE-2026-84390 (CVSS 9.6) is inclusion of sensitive information in source code on the FortiMonitorOnSight web portal — a remote unauthenticated attacker can bypass authentication via a forged or reused JWT. Critical CVE-2026-84388 (CVSS 9.1) is improper authentication in the Fortinet Privileged Access Agent Chrome extension — a remote unauthenticated attacker can proxy a victim's browser traffic if the user visits a malicious site. Fortinet says full remediation needs FortiPAM 1.9.1 or 1.8.4 plus Chrome extension 8.0.1.123 or newer. Same batch includes high issues in FortiSandbox (CVE-2026-26084) and FortiOS/FortiProxy. Primary wire: SecurityWeek; confirm builds on FortiGuard PSIRT.
Cisco PSIRT advisory cisco-sa-onprem-fmc-authbypass-5JPp45V2 covers CVE-2026-20079, a maximum-severity (CVSS 10.0) authentication-bypass in Cisco Secure Firewall Management Center (FMC) and related management paths. Improper process creation at boot lets an unauthenticated remote attacker send crafted HTTP requests to the web interface and execute scripts/commands as root. Cisco updated the advisory on 9 September 2026 to state PSIRT became aware of active exploitation in August 2026 (no public attribution or start date). Cloud-hosted Security Cloud Control is already patched per Cisco; on-prem FMC has no workaround — upgrade to a fixed release. BleepingComputer (9 Sep) notes CISA added CVE-2026-20079 to the KEV catalog with FCEB remediation due 12 September 2026. Hunt guidance from related July FMC coverage includes /var/log/messages activity around /var/tmp/license.tmp. Distinct from desk cards cisco-esa-iosxr-20260902 and cisco-sd-wan-2026. Primary: Cisco PSIRT; wire: BleepingComputer. NEW 10 September 2026 (Cisco Talos “Active exploitation of Cisco Secure Firewall Management Center vulnerabilities”; BleepingComputer same day): Talos tracks three post-compromise clusters on FMC — UAT-11988 (high confidence Qilin ransomware affiliates), UAT-11823 (high confidence APT tooling overlap with Sandworm / Cyclops Blink deployment), and UAT-12197 (state-sponsored/crimeware mix). Actors abused CVE-2026-20079 and companion CVE-2026-20316 (static low-privileged credentials; CVSS 5.3 per wire, Cisco High because it chains with other FMC bugs) to plant web shells, steal AD/MySQL credentials, stand up SOCKS5/SSH tunnels, and in one cluster deploy Qilin ransomware. Install Cisco hotfixes for both CVEs immediately; comprehensive hardening package noted as forthcoming. Distinct companion CVE covered here rather than a sibling card.
Product
Cisco Secure Firewall Management Center (FMC) / Security Cloud Control Firewall Management
Versions
See Cisco advisory for fixed FMC releases; cloud Security Cloud Control already patched per Cisco
CVSS
10.0
Exploited in Australia?
unknown
Patch to
Upgrade FMC to a fixed release per Cisco PSIRT; no workaround; hunt /var/tmp/license.tmp-related messages
Palo Alto Networks security advisory CVE-2026-0310 (published 9 September 2026): buffer overflow in PAN-OS XML processing lets an unauthenticated network attacker with access to the management web or dataplane interface cause DoS on VM-Series firewalls or execute arbitrary code as root on PA-Series. Vendor severity 7.2 HIGH; urgency HIGHEST; exploit maturity UNREPORTED. Panorama is impacted. Risk is reduced when management is restricted to trusted internal IPs per Palo Alto best practice. Fixed builds include PAN-OS 12.2.3; 12.1.4-h10 / 12.1.7-h5 / 12.1.10; 11.2.4-h21 / 11.2.7-h20 / 11.2.10-h14 / 11.2.13-h2; 11.1.4-h36 / 11.1.6-h38 / 11.1.7-h10 / 11.1.10-h33 / 11.1.13-h12 / 11.1.16-h2; 10.2.7-h37 / 10.2.10-h40 / 10.2.13-h24 / 10.2.16-h10 / 10.2.18-h10 (confirm against the live advisory for your branch). Prisma Access / Cloud NGFW called medium severity on the same advisory and are scheduled for maintenance upgrades. Primary: Palo Alto Networks advisory.
See vendor table: fixed at 12.2.3; 12.1.4-h10/12.1.7-h5/12.1.10; 11.2.4-h21/11.2.7-h20/11.2.10-h14/11.2.13-h2; 11.1.4-h36/11.1.6-h38/11.1.7-h10/11.1.10-h33/11.1.13-h12/11.1.16-h2; 10.2.7-h37/10.2.10-h40/10.2.13-h24/10.2.16-h10/10.2.18-h10
CVSS
7.2 (vendor HIGH)
Exploited in Australia?
unknown
Patch to
Upgrade PAN-OS/Panorama to a fixed build on the advisory table; restrict management to trusted IPs; Prisma Access/Cloud NGFW via scheduled or on-demand upgrade
SecurityWeek (9 September 2026) reports Schneider Electric, Siemens, AVEVA, and Rockwell September ICS Patch Tuesday advisories. Schneider published four new advisories and updated four older ones: most severe new issue is critical authentication vulnerability CVE-2026-3869 (CVSS 9.2) in Modicon M580 and Modicon M580 Safety controllers; also high-severity fixes in PowerLogic T300 / Easergy T300 RTU and EcoStruxure IT Data Center Expert, and a medium issue in SCADAPack x70; MC80 patches added to older advisories. Siemens issued nine new advisories (seven on 8 Sep) including critical issues in Reyrolle 7SR5, Open Interface Services, Industrial Edge Management, and SIMOVE Fleetmanager/SIPLANT, plus Copy Fail Linux kernel CVE-2026-31431 (CVSS 7.8) updates. AVEVA PIMBoards/Enterprise SCADA and Rockwell RSLinx/FactoryTalk/CompactLogix advisories also in the same window. Schneider Electric's notifications index returned HTTP 403 from this desk pass — wire URL is primary until the SEVD pages are reachable. OT/ICS operators should pull vendor bulletins and patch by asset criticality.
Product
Schneider Modicon M580/M580 Safety, PowerLogic T300, EcoStruxure IT DCE, SCADAPack x70; Siemens Reyrolle 7SR5, OIS, IEM, SIMOVE/SIPLANT; AVEVA PIMBoards; Rockwell RSLinx/FactoryTalk family
Versions
See vendor September 2026 ICS advisories; Schneider CVE-2026-3869 on Modicon M580 / M580 Safety
OX Research (8 September 2026) and VulnCheck advisory: CVE-2026-82533 (CWE-807) in DeepSeek Harness (dsh) before 0.1.2-alpha.1. The local agent-control HTTP API trusted only the client-supplied Host header, not the TCP peer. The OS sandbox confined file writes but left loopback networking open, so a sandboxed agent could curl the API, set danger-full-access / approval never, and run unconfined — on shipped defaults, with no credentials. If the port was reachable via tunnel/proxy/SSH forward, an unauthenticated remote attacker could control the agent and export stored conversations. CVSS 4.0 9.4 (AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H). Disclosed to VulnCheck CNA 24 Aug; fixed in 0.1.2-alpha.1 (27 Aug); CVE published 8 Sep. npm package @deepseek-ai/dsh — install 0.1.2-alpha.2+ / current rc. Primary: OX Research; also VulnCheck / THN.
Product
DeepSeek Harness (dsh) / @deepseek-ai/dsh
Versions
Affected: 0.1.1-rc.2 and earlier; fixed: 0.1.2-alpha.1 and later (npm current 0.1.2-rc.1 per THN 9 Sep)
Upgrade DeepSeek Harness to 0.1.2-alpha.1 or later; check third-party desktop wrappers for shipped harness version; avoid exposing the local control port
Ivanti's 8–9 September 2026 security update discloses flaws in Neurons for ITSM, Sentry, and Endpoint Manager Mobile (EPMM). SecurityWeek citing Ivanti: Neurons for ITSM has eight bugs including six critical — missing-authorization CVE-2026-12647/12645/12646 (CVSS 9.9) and deserialization CVE-2026-12650 (9.9), CVE-2026-12744/12745 (9.8); only CVE-2026-12744 and CVE-2026-12745 are unauthenticated per that coverage. Fixed in Neurons for ITSM 2025.2/2025.3/2025.4/2026.1 September builds (2026.2 due 21 Sep). Sentry R10.8.2 / R10.7.3 / R10.6.4 patch high auth bypass CVE-2026-83527 (unauth admin). EPMM 12.10.0.0 / 12.9.0.2 / 12.8.0.4 patch high auth bypass CVE-2026-18851 (authenticated). Ivanti blog: no evidence of exploitation in the wild; other Ivanti products not affected. Primary vendor posts: Ivanti September 2026 Security Update blog and Neurons for ITSM hub advisory.
Product
Ivanti Neurons for ITSM; Ivanti Sentry; Ivanti EPMM
Google's Stable Channel Update for Desktop (8 September 2026) promotes Chrome 153 to 153.0.8010.36 (Linux) and 153.0.8010.36/.37 (Windows/Mac). Google lists Medium CVE-2026-87491 as an out-of-bounds write in V8 (reported 6 August 2026 by Jihyeon Jeong, Compsec Lab, Seoul National University) and states an exploit exists in the wild — the seventh Chrome zero-day Google has fixed in 2026 per same-day wire coverage. BleepingComputer (9 September) describes remote code execution inside the sandbox via crafted HTML and heap corruption risk; Google has not published attack details while uptake is incomplete. Distinct from desk card cve-2026-85046 (4 Sep V8 type-confusion 0-day at 152.0.7977.82/.83) and chrome-firefox-20260902. Update Chrome promptly; other Chromium browsers should follow vendor builds. NEW 11 September 2026 (WA SOC advisory 20260911001, TLP:CLEAR): Chromium V8 Known Exploited Vulnerability covers the same CVE-2026-87491 for Google Chrome versions prior to 153.0.8010.36; WASOC table lists CVSS 8.8 High (out-of-bounds write enabling code execution inside the sandbox via crafted HTML). Notes Google is aware of in-the-wild exploit use and CISA KEV listing; WASOC had not received reports of exploitation on Western Australian Government networks at time of writing. Patch Chrome/Chromium browsers to 153.0.8010.36+ per vendor.
Product
Google Chrome (V8)
Versions
Prior to 153.0.8010.36 (Linux) / 153.0.8010.36/.37 (Windows/Mac)
cPanel's 8 September 2026 advisory is titled SQL injection in EmailTrack. The body says an authenticated account with mail-related privileges can create arbitrary files through EmailTrack, and that success is code execution as root. All supported versions. Patched builds: 11.110.0.143, 11.134.0.55, 11.136.0.39, 11.138.0.4, and WP Squared 11.138.1.9. Credit to Ali Mustafa (rz1027) and abed1526. No CVSS and no exploitation claim on the vendor page. Separate from the August domain-parking flaw and from the April login bypass. THN (9 Sep) confirms no public exploit and absence from CISA KEV catalog version released 8 Sep; notes related July DB and August parking flaws have purported exploit repos online.
Product
cPanel/WHM EmailTrack, WP Squared
Versions
All supported versions before the 8 September patched builds
Exploited in Australia?
unknown
Patch to
11.110.0.143, 11.134.0.55, 11.136.0.39, 11.138.0.4, or WP2 11.138.1.9 or later
The Hacker News (8 September 2026) reports security firm Calif built a worm that takes over a WeChat account via an incoming call and demonstrated spread across three test phones. The callee does not need to answer or touch the phone, but the caller must already be a WeChat contact. Calif reported the flaw to Tencent in July and says the company has since shipped a fix (wire does not name a CVE in the RSS abstract). Treat as a messenger client/patch urgency item for WeChat on iPhone and Android; confirm your app store build is current. Wire-only until a Tencent/CVE primary is linked. Primary wire: The Hacker News.
Product
Tencent WeChat (iOS / Android clients in Calif demo)
Versions
Vulnerable builds prior to Tencent’s post-July 2026 fix (exact build numbers not in wire abstract)
Exploited in Australia?
unknown
Patch to
Update WeChat from official stores; restrict contact requests; watch for unexpected account activity after missed calls from contacts
SAP’s September 2026 security patch day (covered 8 September 2026 by BleepingComputer and SecurityWeek) includes CVE-2026-44756, a maximum-severity memory-corruption bug in Extended Passport (EPP) processing in the SAP kernel, dubbed OVERPASS by Onapsis. Missing boundary checks on externally supplied length fields during EPP deserialization can let unauthenticated attackers run OS commands as the SAP installation owner, recover DB credentials/password hashes, read live user sessions, and modify data/binaries. Onapsis says EPP is hit as a session opens (before authz controls), via web/ICM, SAP GUI, and RFC; products relying on the vulnerable kernel include S/4HANA, ERP/ECC, NetWeaver, Web Dispatcher, BW/4HANA, Enterprise Portal, PI/PO, Solution Manager and others. Onapsis estimates >10,000 internet-facing SAP web interfaces; no in-the-wild exploitation indicators reported for OVERPASS at publish. Same cycle: CVE-2026-58240 (S4GET) missing authentication on NetWeaver Message Server enabling unauth cluster RCE as <sid>adm; also critical CVE-2026-76969 (CAP credential disclosure) and CVE-2026-66768 (NetWeaver access control). Apply SAP Security Notes for September 2026 immediately; do not invent CVSS for sister CVEs beyond vendor/Onapsis statements. Primary research: Onapsis; wires: BleepingComputer / SecurityWeek.
Product
SAP kernel / Extended Passport (EPP); NetWeaver Message Server (S4GET)
Versions
Multiple SAP applications on vulnerable kernel builds (S/4HANA, ECC, NetWeaver, Web Dispatcher, etc.); S4GET: S/4HANA 2025 and earlier per Onapsis — apply September 2026 Security Notes
CVSS
10.0 (CVE-2026-44756, per SecurityWeek/Onapsis)
Exploited in Australia?
unknown
Patch to
Apply SAP September 2026 Security Notes for CVE-2026-44756 (OVERPASS) and CVE-2026-58240 (S4GET) and related critical notes; reduce internet exposure of ICM/Message Server where possible
Microsoft’s 8 September 2026 Patch Tuesday is its largest security release on record. BleepingComputer counts 966 flaws shipped on Patch Tuesday itself (105 Critical, including 81 RCE), excluding 204 flaws fixed earlier in the month in cloud products; SecurityWeek and Krebs count about 974 CVEs across the broader September bundle. Two actively exploited elevation-of-privilege zero-days are fixed: CVE-2026-81963 (Windows Update Stack link-following to SYSTEM; credited to Romain Deperne and MSTIC) and CVE-2026-85880 (Windows ALPC heap buffer overflow to SYSTEM / AppContainer sandbox escape; Volexity and Proofpoint researchers). Coverage notes ~20 potentially wormable unauthenticated RCEs in the set and calls out Exchange (CVE-2026-55007), SharePoint (CVE-2026-69465), RDS (CVE-2026-69525), SQL (CVE-2026-65669), and Authenticator (CVE-2026-80097) among high-priority items. Microsoft attributes the volume increase partly to AI-assisted vulnerability discovery. NEW 8 Sep KEV: CISA added both exploited zero-days to the Known Exploited Vulnerabilities catalog on 2026-09-08 (catalog 2026.09.08) — CVE-2026-81963 and CVE-2026-85880 (FCEB dueDate 2026-09-22). WA SOC advisory 20260909001 (9 September 2026, TLP:CLEAR) summarises the September Monthly Updates as addressing 973 vulnerabilities, highlights critical CVE-2026-69730 and CVE-2026-69525 (CVSS 9.8) plus the two known-exploited EoPs (CVSS 7.8), notes Microsoft detected exploitation of one or more of the mentioned vulnerabilities, and says WASOC has not received WA Government exploitation reports at the time of writing. Prioritise the two exploited EoPs, internet-facing roles, and Extended Security Updates where applicable.
Product
Microsoft Windows / Office / Exchange / SharePoint / SQL / Azure (September 2026 cumulative)
Versions
See Microsoft Update Guide for CVE-specific affected builds; Windows 10 ESU KB5122878 and Windows 11 KB5124008/KB5122880 noted in same-day coverage
Exploited in Australia?
unknown
Patch to
Install September 2026 security updates promptly; prioritise CVE-2026-81963 and CVE-2026-85880 (exploited EoP) and internet-facing Exchange/SharePoint/RDS roles
The Hacker News (8 September 2026) summarises Red Hat guidance that a FreeIPA flaw lets a client that has never logged in create a Kerberos identity of its choosing in the directory and end up in the administrators group. FreeIPA stores identities in 389 Directory Server over LDAP; the attack also needs a second flaw in that database software. Wire abstract does not list CVE IDs or fixed package versions — operators should pull current RHEL/FreeIPA errata from Red Hat rather than inventing patch levels. Primary wire: The Hacker News pending RHSA deep-link. Watchlist relevance: Red Hat / identity plane.
Product
FreeIPA / 389 Directory Server (Red Hat identity domain)
Versions
See Red Hat errata for FreeIPA and 389-ds; wire does not publish a single fixed NVR
Exploited in Australia?
unknown
Patch to
Apply Red Hat FreeIPA and 389 Directory Server security updates; audit unexpected Kerberos principals and administrators-group membership; restrict anonymous LDAP binds
Progress Telerik critical security bulletin (updated 22 July 2026) covers a chain in UI for ASP.NET AJAX RadAsyncUpload / RadPersistenceManager / RadDockLayout (CVE-2026-13181 through CVE-2026-13186 and CVE-2026-13190). Unauthenticated remote code execution is possible when preconditions are met (reachable RadAsyncUpload with FileUploaded handler reading UploadResult; explicit non-default Telerik.AsyncUpload.ConfigurationEncryptionKey). CVE-2026-13181 is CVSS 3.1 8.1 High (AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H). Fixed in 2026.2.708 (2026 Q2 SP1); affected RadAsyncUpload builds from 2010.1.309 through 2026.2.519. NEW material this window: TantoSec (7 September 2026) published a full write-up and public exploit tooling (telerik-rau-exploit) turning the AES-CBC padding oracle into webshell/in-memory payloads. Progress/Telerik state no confirmed in-the-wild exploitation in the bulletin era; treat the newly public exploit tooling as elevating patch priority. Primary: Telerik KB bulletin; research: TantoSec.
Product
Progress Telerik UI for ASP.NET AJAX
Versions
RadAsyncUpload 2010.1.309–2026.2.519 (and related Persistence/DockLayout ranges per bulletin); fixed in 2026.2.708 (2026 Q2 SP1)+
CVSS
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
AVAttack Vector
Network
ACAttack Complexity
High
PRPrivileges Required
None
UIUser Interaction
None
SScope
Unchanged
CConfidentiality
High
IIntegrity
High
AAvailability
High
(CVE-2026-13181, CVSS 3.1)
Exploited in Australia?
unknown
Patch to
Upgrade to Telerik UI for ASP.NET AJAX 2026.2.708 (2026 Q2 SP1) or later; if delayed, apply vendor mitigation checklist (customErrors, encryption-key review, cookie persistence settings)
N-able N-central 2026.3 Hotfix 4 (build 2026.3.1.14, status post 6 September 2026, notes last updated 5 September) fixes CVE-2026-86218, a critical pre-authenticated remote code execution flaw (static code injection) on the N-central server. WA SOC advisory 20260907002 (7 September 2026, TLP:CLEAR) rates it CVSS 10 Critical for N-central prior to 2026.3.1.14 and points to N-able security advisory aArVy0000002Ld3KAE. Hosted NCOD instances are already patched; on-premises customers must upgrade to HF4 immediately (HF3 / 2026.3.1.13 remains vulnerable to this CVE). The preceding Hotfix 3 (5 September) fixed high-severity authentication-bypass CVE-2026-86206 and CVE-2026-86207. NEW 8–9 Sep: CISA added CVE-2026-86218 to the KEV catalog on 2026-09-08 (catalog 2026.09.08) as static code injection / pre-auth RCE; FCEB dueDate 2026-09-11; forensicTriage Yes; KEV notes link the N-able status post and advisory aArVy0000002Ld3KAE. The Hacker News (9 Sep 2026) reports Huntress investigating compromise of a customer's fully patched N-central on 2026-09-04 (unclear whether CVE-2026-86218 or the HF3 pair CVE-2026-86206/86207); a separate N-able urgent customer notice says CVE-2026-86218 has been observed exploited in the wild. Shadowserver has tracked roughly 1,500 internet-exposed N-central servers. Distinct from desk card n-able-n-central-2026 (August CVE-2026-18556 / CVE-2026-18577 and ACSC AU exploitation). Primary: N-able status HF4; WA SOC 20260907002; CISA KEV / THN for exploitation update.
Product
N-able N-central (on-premises)
Versions
Prior to 2026.3.1.14 (HF4); HF3 2026.3.1.13 still vulnerable to CVE-2026-86218. Hosted NCOD already patched.
CVSS
10.0 (WASOC; vendor Critical)
Exploited in Australia?
unknown
Patch to
N-central 2026.3 Hotfix 4 (2026.3.1.14) immediately for on-prem; hosted NCOD no action
Sansec discovery/attack-from-4-Sep chain (template/GraphQL/failed-payment email → Linux backdoor). NEW material: Sansec updated 7 Sep 2026 20:45 UTC — StyleSmuggler is CVE-2026-75650 (CVSS 10.0). Adobe published emergency hotfix APSB26-146 on 7 Sep 2026 ~20:20 UTC (priority 1) as composer patch VULN-39341 from repo.magento.com; Adobe tested against 2026-aug releases of Adobe Commerce 2.4.4–2.4.9, Magento Open Source 2.4.4–2.4.9, and Adobe Commerce B2B 1.3.3–1.5.3. Exploitation continued after July/August 2026 patch levels; Sansec still advises scan/IoC hunt (kworker/fc-cache/chronyd-style implants, rotate encryption key + credentials). Primary Sansec; vendor APSB26-146. NEW 8 Sep wire: BleepingComputer confirms Adobe’s emergency VULN-39341/APSB26-146 hotfix for CVE-2026-75650 and Sansec’s note that a second, unrelated attacker is also exploiting StyleSmuggler to drop a 485-byte PHP web shell exfiltrating via oast.site/Interactsh-style callbacks — rotate secrets and hunt both Linux-backdoor and PHP-webshell IoCs after patching. NEW 8 Sep KEV: CISA added CVE-2026-75650 to the Known Exploited Vulnerabilities catalog on 2026-09-08 (catalog 2026.09.08); product Adobe Commerce and Magento; FCEB dueDate 2026-09-11; forensicTriage Yes. NEW 10 Sep AU: iTnews reports ASD/ACSC critical alert — ACSC is aware of a substantial number of potentially vulnerable Adobe Commerce/Magento instances in Australia; exploitation needs /graphql exposed; StyleSmuggler injects via GraphQL styles properties into files such as payment-failure reports; patch ASAP and chase MSPs.
Product
Magento Open Source / Adobe Commerce
Versions
Affects current 2.4.x lines per Sansec (reproduced 2.4.7–2.4.9; victim 2.4.6-p15 fully patched). Hotfix VULN-39341 tested on Adobe Commerce / Magento OS 2.4.4–2.4.9 and Commerce B2B 1.3.3–1.5.3 (2026-aug builds).
CVSS
10.0
Exploited in Australia?
unknown
Patch to
Apply Adobe VULN-39341 / APSB26-146 composer hotfix; confirm with magento-patches status; rotate Magento encryption key and dependent credentials; scan for StyleSmuggler IoCs before assuming clean
MikroTik published an important RouterOS security update on 3–4 September 2026 (supportsec bulletin and forum notice) with details withheld, fixing builds 7.25 beta 3, 7.24.2, 7.23.4 and 6.49.21. On 5 September 2026 CERT Polska disclosed six coordinated CVEs and confirmed active exploitation. Highest-impact pair (CERT.PL CVSS 9.2 each): CVE-2026-67276 SSH authentication bypass (RouterOS did not fully compare RSA public keys, so an attacker who knew a username and the public modulus could craft another key and log in without the private key) and CVE-2026-86060 SSH session privilege manipulation via a crafted username that yields a full-admin session. CVE-2026-67277 (CVSS 8.8) is unauthenticated bandwidth-test memory disclosure/crash. CVE-2026-67281 (CVSS 4.0 8.7 per CVE record) is unauthenticated WebFig /jsproxy file read that can disclose root-owned config stores. CERT.PL also lists CVE-2026-67278 and CVE-2026-67279 on the CVE details page. CERT.PL says the MikroTrick combination of two SSH flaws is being used for full takeover of devices with SSH on public networks; successful attacks creating a privileged user named ops have been seen from 82.192.72.4 since at least 2 September 2026, with 103.102.31.18 used in exploit attempts. Log IoCs include login failure for user -2 via ssh and user <name> added by ssh:-2@<ip>. Fixed releases set a Flagged marker when known compromise traces are found (absence of Flagged is not clean). The Hacker News (6 September 2026) notes CERT.PL guidance to prefer 7.23.5 on the long-term 7.23 channel (after 7.23.4). Latvia's national CERT also reported increased MikroTik targeting and urged the same patched builds. Until patched: restrict SSH, WWW/WWW-SSL and bandwidth-test to trusted management nets; do not initiate TLS or built-in SSH clients from an unpatched box toward untrusted hosts. If Flagged or otherwise suspect: isolate, preserve logs/config, factory-reset and rebuild from a verified config, rotate secrets. Primary: CERT Polska active-exploitation advisory. UPDATE 10 September 2026: CISA added CVE-2026-86060 and CVE-2026-67277 to KEV (dateAdded 2026-09-10). Internet-exposed SSH / bandwidth-test paths remain the priority; patch and hunt Flagged / ops / ssh:-2 IoCs.
Product
MikroTik RouterOS
Versions
Vulnerable: 7.24 before 7.24.2; 7.0.0 before 7.23.4; 6.0.0 before 6.49.21. Fixed: 7.25 beta 3, 7.24.2, 7.23.4, 6.49.21 and newer
Google's Stable Channel Update for Desktop (4 September 2026) promotes Chrome to 152.0.7977.82/.83 on Windows and macOS and 152.0.7977.82 on Linux with 12 security fixes. High-severity CVE-2026-85046 is a type confusion in V8 that Google says allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page; Google states an exploit exists in the wild. NVD Secondary CVSS 3.1 is 8.8 (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). Salvatore Gulizia (Serotav) reported it on 4 August 2026. CISA added CVE-2026-85046 to KEV (catalog entry dated 4 September 2026). WA SOC advisory 20260907001 (7 September 2026, TLP:CLEAR) covers the same Chromium V8 type confusion for Chrome, Edge, Brave and Vivaldi prior to those builds, notes CISA KEV, and says it has not received reports of exploitation on Western Australian Government networks at the time of writing. Distinct from desk card chrome-firefox-20260902 (2 Sep Critical UAF batch at 152.0.7977.75/.76) and cve-2026-79290 (25 Aug Aura/ANGLE). UPDATE 9 Sep: Proofpoint BlueMoon exploit kit (desk card bluemoon-exploit-kit-20260909) chains this CVE with an un-CVE'd V8 sandbox escape and Windows CVE-2026-85880; APT31 first seen 28 Aug, then other espionage clusters. Update Chrome promptly; Chromium browsers (Edge, Brave, Opera, Vivaldi) should follow vendor builds.
Product
Google Chrome (V8)
Versions
Prior to 152.0.7977.82 (Linux) / 152.0.7977.82/.83 (Windows/macOS)
CVSS
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AVAttack Vector
Network
ACAttack Complexity
Low
PRPrivileges Required
None
UIUser Interaction
Required
SScope
Unchanged
CConfidentiality
High
IIntegrity
High
AAvailability
High
(CVSS 3.1 NVD Secondary)
Exploited in Australia?
unknown
Patch to
Chrome 152.0.7977.82/.83 (Win/Mac) or 152.0.7977.82 (Linux) or later
Wordfence (via The Hacker News, 4 September 2026) reports active exploitation of CVE-2026-14894 in the WordPress plugin Super Forms – Drag & Drop Form Builder. NVD/Wordfence describe missing file-type validation on the unauthenticated submit_form AJAX handler (session nonce obtainable via a separate nopriv endpoint), allowing unauthenticated arbitrary file upload and remote code execution. Wordfence CVSS 3.1 is 9.8 Critical. Affected: all versions through 6.3.313; fixed in 6.3.314. Wordfence says it blocked over 250,000 exploit attempts against this CVE (plus ~190,000 against Elementor Pro CVE-2026-32475 in the same reporting wave; Elementor stays on its own desk card). Observed Super Forms attacks POST to /wp-admin/admin-ajax.php with action=super_submit_form and a Base64 PHP web shell disguised as a data:image/gif payload (e.g. Mushr00w_upl.php); activity began 14 July 2026 and peaked above 40,000 requests on 18 August 2026. Upgrade Super Forms to 6.3.314+; hunt unexpected .php under uploads; keep WAF rules current. Distinct from cve-2026-32475 (Elementor Pro).
Product
Super Forms – Drag & Drop Form Builder (WordPress)
Versions
Affected ≤6.3.313; fixed in 6.3.314
CVSS
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AVAttack Vector
Network
ACAttack Complexity
Low
PRPrivileges Required
None
UIUser Interaction
None
SScope
Unchanged
CConfidentiality
High
IIntegrity
High
AAvailability
High
(CVSS 3.1 Wordfence/NVD)
Exploited in Australia?
unknown
Patch to
Super Forms 6.3.314 or later; audit uploads for unexpected PHP; review admin-ajax.php logs for super_submit_form
ConnectWise ScreenConnect™ 26.6.5 Security Patch bulletin (8 September 2026, Priority 1 High) assigns CVE-2026-84869 for a client-side condition that may allow files to be transferred and executed through an active remote Support/Access session without authorisation or Host confirmation. ScreenConnect servers are not impacted. CWE-862 Missing Authorization / CWE-269 Improper Privilege Management; CVSS 3.1 9.9 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H). Affected: ScreenConnect versions prior to 26.6.5. Remediation: upgrade to 26.6.5 or later, then reinstall Host clients and update Access agents (Cloud servers already remediated per vendor). Interim mitigation until clients are refreshed: remove TransferFiles (and TransferFilesInSession on legacy) from applicable roles/session groups — not a substitute for the patch. Earlier 3 September Guest File Transfer Advisory and Huntress late-August worm-like rogue ScreenConnect client chain (Quick Assist → wscript → VBScripts / User Run Key) remain relevant context; Shadowserver has tracked thousands of internet-exposed instances. CISA KEV listed CVE-2026-84869 on 11 September 2026 (dateAdded 2026-09-11; catalogVersion 2026.09.11); this card remains the single ScreenConnect file-transfer topic. Distinct from faronics-deploy-screenconnect-20260831. Primary: ConnectWise 2026-09-08 bulletin.
Product
ConnectWise ScreenConnect (client / session file-transfer and execution; servers not impacted)
Versions
Prior to 26.6.5 (Cloud and On-Premise clients); remediate 26.6.5+
CVSS
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
AVAttack Vector
Network
ACAttack Complexity
Low
PRPrivileges Required
Low
UIUser Interaction
None
SScope
Changed
CConfidentiality
High
IIntegrity
High
AAvailability
High
Exploited in Australia?
unknown
Patch to
Upgrade ScreenConnect to 26.6.5+; reinstall Host clients / update Access agents; until then remove TransferFiles permissions
Broadcom VMSA-2026-0007 (3 September 2026, Critical) patches two privately reported host-escape-class bugs in VMware Workstation and VMware Fusion 25H2 and 26H1. CVE-2026-59346 is a VMXNET3 integer overflow (CVSSv3 up to 9.3) where a malicious actor with local administrative privileges inside a guest that uses the VMXNET3 virtual NIC may execute code on the host. CVE-2026-59347 is an HGFS stack-based buffer overflow (CVSSv3 up to 8.1) that can let a guest admin run code as the VMX process on the host. Fixed in Workstation and Fusion 26H1u1. No workarounds. Broadcom does not report in-the-wild exploitation. Update lab and desktop hypervisors promptly; these are not ESXi/vSphere guest escape advisories.
Exploit-DB entry 52680 (dated 3 September 2026) and Metabase advisory GHSA-w95f-x9v9-wv36 cover CVE-2026-59827: Metabase instances with an H2 database connection (including the default sample database) deserialize arbitrary Java objects from native H2 query result columns of type OTHER without validation. An authenticated user who can run native queries against an accessible H2 connection can execute OS commands on the Metabase host. Affected ranges in the exploit write-up include ≥0.58.0 <0.58.15, ≥0.59.0 <0.59.12, ≥0.60.0 <0.60.6.3, and ≥0.61.0 <0.61.1.4. Patch Metabase; remove or lock down sample/H2 connections; restrict who can run native SQL.
Exploit-DB entry 52681 (dated 3 September 2026) documents a public remote-code-execution exploit for CVE-2025-57819 in FreePBX Endpoint Manager. The flaw is an unauthenticated SQL injection in the brand parameter of /admin/ajax.php that can insert a malicious cron_jobs row and yield a reverse shell as the web user. Affected branches per the exploit write-up: FreePBX 15.x before 15.0.66, 16.x before 16.0.89, and 17.x before 17.0.3 (title tested against 17.0.2). The write-up cites CVSS 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), CWE-89 and CWE-288, NVD, and GitHub advisory GHSA-m42g-xg4c-5f3h. Upgrade Endpoint Manager / FreePBX to the fixed releases; restrict admin/ajax exposure; hunt for unexpected cron_jobs entries.
The Hacker News (3 September 2026) reports researcher Chaotic Eclipse published FalconFlank, a public local privilege-escalation exploit demo that abuses CrowdStrike Falcon Sensor’s Office malicious-macros remediation path on fully updated Windows 11 25H2 and Windows Server 2025. The researcher said Falcon may already detect the demo code and that lab checks may need exclusions or obfuscation. A CrowdStrike spokesperson told THN the company is investigating, advised customers to disable the Microsoft Office File Suspicious Macro Removal Windows policy setting, said customers remain protected through Cloud Anti-malware for Microsoft Office Files, and pointed operators to the FalconFlank Tech Alert in the CrowdStrike support portal. Review the portal alert, apply CrowdStrike guidance, and treat the public exploit code as high-signal for endpoint labs.
Product
CrowdStrike Falcon Sensor (Windows)
Versions
Public demo claimed on fully updated Windows 11 25H2 and Windows Server 2025 with Falcon; exact Falcon build list is in CrowdStrike’s portal Tech Alert
Exploited in Australia?
unknown
Patch to
Follow CrowdStrike FalconFlank Tech Alert; disable Microsoft Office File Suspicious Macro Removal Windows policy per vendor statement; keep Cloud Anti-malware for Office Files enabled
BleepingComputer (3 September 2026) reports Hewlett Packard Enterprise patched a critical buffer-overflow remote code execution issue in ArubaOS-CX, tracked as CVE-2026-73749: an unauthenticated remote attacker can send crafted packets to an affected daemon and execute code with elevated privileges. HPE security bulletin hpesbnw05134en_us lists fixed builds by branch: 10.18.0001 → 10.18.1002+; 10.17.1021 and earlier → 10.17.1030+; 10.16.1051 and earlier → 10.16.1060+; 10.13.1180 and earlier → 10.13.1190+; 10.10.1180 and earlier → 10.10.1181+ (10.10.1181 is End of Maintenance and receives only critical internal fixes). The same bulletin covers about 23 further issues; Bleeping citing HPE places several authenticated management flaws (including CVE-2026-73750/73751/73752 and related) in the high range around 8.1–8.8. WA SOC advisory 20260909002 (9 September 2026, TLP:CLEAR) covers the same CVE-2026-73749 RCE (CVSS 9.8 Critical), lists the same fixed branches, and states it has not received reports of exploitation on Western Australian Government networks at the time of writing. Upgrade AOS-CX switches to the fixed release for your branch; restrict management-plane exposure until patched.
Product
HPE Aruba Networking ArubaOS-CX
Versions
See HPE bulletin: fixed in 10.18.1002+, 10.17.1030+, 10.16.1060+, 10.13.1190+, 10.10.1181+
CVSS
CVE-2026-73749 9.8 Critical (WA SOC / HPE); additional management CVEs high ~8.1–8.8 per Bleeping citing HPE
Exploited in Australia?
unknown
Patch to
Upgrade to fixed AOS-CX build for your branch per hpesbnw05134en_us; limit daemon/management exposure
BleepingComputer (3 September 2026) and Wordfence (via The Hacker News, 4 September 2026) report active exploitation of CVE-2026-32475 in Elementor Pro for WordPress. Faulty validation of file-upload arrays in Elementor Pro forms (versions 4.2.1 and earlier) lets an attacker submit an empty first array element and a malicious PHP file as the second, so later files skip validation. The payload lands under /wp-content/uploads/elementor/forms/ and can be fetched to run commands. Elementor shipped 4.2.2 on 19 August 2026. Wordfence says it blocked about 190,000 exploit attempts against this CVE (and over 250,000 against Super Forms CVE-2026-14894 in the same wave — that CVE has its own desk card). Exploitation needs a published Elementor Pro Form widget with at least one File Upload field. Patchstack disclosed the issue earlier. Upgrade Elementor Pro to 4.2.2 or later; review uploads under elementor/forms for unexpected PHP; keep WAF rules current.
Product
Elementor Pro (WordPress)
Versions
Affected ≤4.2.1; fixed in 4.2.2 (19 Aug 2026)
CVSS
9.0 / 9.8 (Wordfence/THN reporting of CVE-2026-32475; confirm vector on Wordfence/NVD)
Exploited in Australia?
unknown
Patch to
Elementor Pro 4.2.2+; audit /wp-content/uploads/elementor/forms/; ensure Form File Upload fields are intentional
Marimo GHSA-2679-6mx9-h9xc / NVD: CVE-2026-39987 is a pre-authentication RCE in the reactive Python notebook server. The /terminal/ws WebSocket lacks auth, giving an unauthenticated attacker a full PTY shell. NVD: versions prior to 0.23.0 affected; CVSS 3.1 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H); CVSS 4.0 9.3 also published. Exploit-DB 52673 (2 Sep 2026) shipped a public PoC (cited ≤0.20.4). UPDATE 15 September 2026 (Sysdig Threat Research; THN wire): Sysdig observed a skilled human operator exploit this CVE within hours of disclosure, pivoting from Marimo to AWS Secrets Manager then an SSH bastion in eight seconds with a hand-rolled Python toolkit (850+ interactive commands over ~9 hours; source IP 172.236.12.17 on first WS connect). Upgrade to 0.23.0+; never expose Marimo terminal WebSockets to the internet. Primary: Marimo GHSA / NVD; research: Sysdig; wire: THN.
Product
Marimo reactive Python notebook server
Versions
Prior to 0.23.0 (NVD); EDB 52673 demonstrated ≤0.20.4. Fixed: 0.23.0+
CVSS
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AVAttack Vector
Network
ACAttack Complexity
Low
PRPrivileges Required
None
UIUser Interaction
None
SScope
Unchanged
CConfidentiality
High
IIntegrity
High
AAvailability
High
Exploited in Australia?
unknown
Patch to
Upgrade Marimo to 0.23.0 or later; bind to localhost/VPN only; do not expose /terminal/ws publicly
Exploit-DB entry 52676 (dated 2 September 2026) packages a Metasploit module for CVE-2026-29053: crafted Ghost CMS themes can execute arbitrary code on the host. The module lists affected releases from 0.7.2 through 6.19.0 and notes that for versions 5.105.0–5.130.5 and 6.0.0–6.10.3 it can also leverage a related 2FA bypass (CVE-2026-22594). Endor Labs write-up GHSA-cgc2-rcrh-qr5x is cited as the research reference. Upgrade Ghost past the fixed releases; restrict who can upload themes; review installed themes for unexpected Handlebars templates.
Product
Ghost CMS
Versions
≥0.7.2 ≤6.19.0 per Metasploit module; 2FA-bypass assist on 5.105.0–5.130.5 and 6.0.0–6.10.3
SecurityWeek (3 September 2026) summarises Cisco’s 2 September advisory drop. Two medium-severity, publicly disclosed but unpatched issues in Secure Email S/MIME decryption — CVE-2026-20354 and CVE-2026-20355 — can let a MitM attacker obtain plaintext from encrypted gateway traffic; Cisco says all Secure Email devices on AsyncOS 16.5.0 or earlier with S/MIME enabled are affected and it is not aware of in-the-wild exploitation. The same day Cisco also shipped critical fixes for IOS XR (including CVE-2026-20274 and CVE-2026-20279 at CVSS 9.8 for memory-corruption / improper access-control classes) and Nexus 9000 series switches (CVE-2026-20212, CVSS 9.8: remote code execution with root via by-default accessible TCP ports), plus high-severity SIP phone DoS CVE-2026-20281 on Desk Phone 9800 / IP Phone 7800/8800 / Video Phone 8875. Primary vendor notice: cisco-sa-esa-smime-disc-dzw4rEdY and the 2 Sep publication notice. Apply available IOS XR / Nexus / phone patches; for Secure Email, follow Cisco’s advisory for workarounds until a fixed AsyncOS build ships.
Secure Email AsyncOS 16.5.0 or earlier with S/MIME enabled (unpatched); IOS XR / Nexus 9000 / phones — see Cisco notice for fixed releases
CVSS
CVE-2026-20274/20279/20212 vendor CVSS 9.8; Secure Email pair medium (CVE-2026-20354/20355); phone DoS CVE-2026-20281 high — per SecurityWeek citing Cisco
Exploited in Australia?
no
Patch to
Apply Cisco IOS XR / Nexus 9000 / phone fixed releases from 2 Sep notice; Secure Email — workaround per cisco-sa-esa-smime until AsyncOS fix
On 2 September 2026 CISA published a Rockwell Automation ICS advisory batch (ICSA-26-244-01 through ICSA-26-244-06) alongside Rockwell Trust Center advisories. ICSA-26-244-01 covers RSLinx Classic denial-of-service issues CVE-2026-9621, CVE-2026-9622, CVE-2026-9624 and CVE-2026-9625 (critical/high per SecurityWeek's read of the vendor set; exploitation can crash the RSLinx Classic service until restart). ICSA-26-244-03 covers Logix Platform CVE-2026-9637 (improper restriction of operations within memory buffer) with vendor CVSS 3.x 7.5 on ControlLogix 5580 and CompactLogix 5380 version ranges listed in the CISA advisory; CISA states it is not aware of public exploitation. SecurityWeek also notes FactoryTalk Historian RCE, FactoryTalk Activation Manager privilege issues, ArmorStart XSS/DoS, and ControlFLASH arbitrary code execution among the same Tuesday drop. Apply Rockwell patches or workarounds from the Trust Center; segment OT management hosts.
Google's Stable Channel Update for Desktop (2 September 2026) promotes Chrome to 152.0.7977.75/.76 on Windows and Mac and 152.0.7977.75 on Linux with 26 security fixes. Critical: CVE-2026-84353 use-after-free in Shared Tab Groups and CVE-2026-84352 use-after-free in WebGL (both Google-reported). Nine High issues include FileSystem incorrect authorization (CVE-2026-84354), Skia information leak (CVE-2026-84359), Omnibox input validation (CVE-2026-84357), and several use-after-free / buffer issues in Proxy, Browser, Dawn, GPU and V8. Distinct from desk card cve-2026-79290 (earlier Chrome 152.0.7977.64/.65 Critical Aura/ANGLE set, 25 Aug). SecurityWeek says Mozilla shipped Firefox 155 the same day with patches for 29 defects including 13 high-severity use-after-free, sandbox escape, and memory-corruption issues. Update Chrome and Firefox promptly; this desk does not invent CVSS for Google's Critical labels.
Product
Google Chrome; Mozilla Firefox
Versions
Chrome fixed in 152.0.7977.75/.76 (Win/Mac) and 152.0.7977.75 (Linux); Firefox 155 per SecurityWeek
Exploited in Australia?
unknown
Patch to
Chrome 152.0.7977.75/.76 (or later); Firefox 155 or later
BerriAI LiteLLM GHSA-7488-6r32-c95q (CVE-2026-59822) is High: the MCP Streamable HTTP auth path could let an unauthenticated attacker establish an MCP session with an arbitrary Bearer token when OAuth2 passthrough fallback replaced failed key validation with an empty UserAPIKeyAuth object, exposing configured MCP tools and connected services. Affected versions before 1.84.0; fixed in 1.84.0. GHSA publishes CVSS 4.0 vector AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N; CISA KEV (2 Sep 2026) and The Hacker News cite 8.8. CISA added the CVE to KEV on evidence of active exploitation. Upgrade to 1.84.0+ or disable/block /mcp/ until patched.
Kestra GHSA-5vc5-wxxq-3fjx (CVE-2026-49869) is Critical: AuthenticationFilter whitelists any path whose last segment is configs via endsWith("/configs"), so unauthenticated callers can hit flow/execution APIs and, with default script plugins, achieve remote code execution as root in the worker container. GHSA CVSS 3.1 vector AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H (10.0). Affected through 1.3.20; patched in 1.0.45 and 1.3.21. CISA added it to KEV on 2 September 2026. Upgrade Kestra OSS immediately; do not expose the webserver to untrusted networks until patched.
Product
Kestra OSS
Versions
Affected through 1.3.20; fixed in 1.0.45 and 1.3.21
Kludex Starlette GHSA-86qp-5c8j-p5mr (CVE-2026-48710) is an HTTP request/response path confusion: affected builds rebuild request.url from an unvalidated Host header, so a malformed Host can make request.url.path differ from the path the router actually dispatched. Middleware that authorises on request.url.path can be bypassed. GHSA rates Moderate; CVSS 3.1 vector AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N (6.5). Affected through 1.0.0; patched in 1.0.1. CISA added it to the KEV catalog on 2 September 2026 based on evidence of active exploitation. Upgrade Starlette (and FastAPI stacks that pin it) to 1.0.1 or later; ensure front-end proxies reject malformed Host headers.
SonicWall's 2 September 2026 advisory SNWLID-2026-0016 (covered by SecurityWeek the same day) warns SMA1000 series secure remote access / SSL-VPN customers of two zero-days discovered and observed exploited internally. CVE-2026-83548 is a pre-authentication SSRF in the Appliance Work Place interface, rated CVSS 10. CVE-2026-83549 is an OS command injection in the Appliance Management Console (AMC), rated CVSS 7.8, that an authenticated attacker can use for arbitrary OS commands and potential RCE. SonicWall says both have been exploited and the pair can be chained for unauthenticated remote code execution. Affected models: SMA1000 6210, 7210 and 8200v. Hotfixes 12.4.3-03526, 12.5.0-02952 and higher patch both issues. SSL-VPN on SonicWall firewalls and SMA100 series products are not affected. CISA added both CVEs to the KEV catalog on 2 September 2026.
Product
SonicWall SMA1000 (6210, 7210, 8200v)
Versions
SMA1000 series before hotfixes 12.4.3-03526 / 12.5.0-02952; firewall SSL-VPN and SMA100 not affected
CVSS
10.0 (CVE-2026-83548); 7.8 (CVE-2026-83549) — per SecurityWeek citing SonicWall
SecurityWeek (2 September 2026) reports CVE-2026-84115 in Cleo Harmony file-transfer: improper privilege management in the JWT refresh token handler on /api/connections, where manipulating the Bearer argument can let a remote attacker elevate privileges. VulDB (listed as CNA-style record in public mirrors) says builds through 5.8.1.10 are affected, a public exploit exists, and upgrading to 5.8.1.11 fixes it. Cleo's Harmony 5.8.1 release notes list 5.8.1.11 as a 15 May 2026 limited/restricted build and do not expand on this CVE in the public notes SecurityWeek also noted thin vendor detail. WatchTowr (quoted by SecurityWeek) has reproduced the issue and flags Harmony as a frequent ransomware target historically. This desk does not invent a CVSS beyond what secondary reporting attributes; Cyber Security News cites 8.3 High for the same CVE. Patch to 5.8.1.11 or later; hunt anomalous /api/connections auth traffic.
Product
Cleo Harmony
Versions
Affected through 5.8.1.10; fixed in 5.8.1.11 (per VulDB / SecurityWeek)
CVSS
8.3 (High) — as reported by Cyber Security News for CVE-2026-84115; confirm against your advisory feed
Exploited in Australia?
unknown
Patch to
5.8.1.11 or later; monitor /api/connections and JWT refresh anomalies
Plex posted an official security notice on its forum on 1 September 2026 recommending that all Plex Media Server owners and Plex Desktop users update as soon as possible. Plex Media Server 1.43.3 and Plex Desktop 1.115.0 address a number of security issues. Plex says CVEs have been requested and that it will add details to the thread once they are published; this desk does not invent CVE identifiers or a CVSS. NAS package managers may lag; Plex says the updated package can be installed manually from its Downloads page. BleepingComputer (3 September 2026) reports Plex also emailed owners of affected versions urging immediate upgrade — unusual for the vendor — while still withholding vulnerability details. NEW 9 Sep: BleepingComputer citing Shadowserver says daily scans since 4 September 2026 still find over 36,000 internet-exposed Plex Media Server instances on vulnerable 1.43.2-and-earlier builds, with missing CVEs limiting automated detection. Automatic-update users should confirm they are on 1.43.3 or newer.
Product
Plex Media Server; Plex Desktop
Versions
Plex Media Server 1.43.2 and earlier
Exploited in Australia?
unknown
Patch to
Plex Media Server 1.43.3 or later; Plex Desktop 1.115.0
Manifold Security published GitSpawn research on 1 September 2026: several AI coding agents run git (status, diff and similar) to gather repo context at startup, in some products before a workspace-trust prompt or authentication. Those calls did not strip the repository's own git configuration. Git settings that name a helper program (including core.fsmonitor) then run as the developer, outside the agent sandbox, with no approval prompt. Manifold says clone, fetch or pull of a hostile URL does not carry this; the repository has to arrive as files with its .git directory already inside (zip, shared drive, USB). Named products and status at publication: Claude Code core.fsmonitor patched by 2.1.196 (confirmed on 2.1.193; reported 26 June, closed as duplicate); Claude Code ultrareview still unpatched on 2.1.252; Goose patched in 1.44.0 (CVE-2026-72718, maintainers 7.0); Hermes unpatched on 0.21.0 (CVE-2026-71963, VulnCheck CNA); Qwen Code unpatched on 0.22.3; Grok Build unpatched on 1.0.13; OpenAI Codex and Cursor patched (reports closed as duplicates). Manifold 1 September update says Codex and Cursor were also affected, reported, and have since been patched. Inspect .git/config before opening a received folder in an agent. This desk does not invent CVSS for the unpatched products.
GeoNetwork (OSGeo geospatial metadata catalog used behind many government and agency geoportals, including European INSPIRE backends) published advisories on 31 August 2026 for two flaws that chain to unauthenticated remote code execution. CVE-2026-63219 (CVSS 8.6 per The Hacker News citing the project) is a missing authorisation check on the formatter upload endpoint that lets an anonymous attacker write arbitrary .xsl or .zip formatter files. CVE-2026-58400 (CVSS 9.1 per the same reporting) is an unsafe Saxon XSLT configuration in the formatter engine that can call Runtime.exec / ProcessBuilder as the GeoNetwork process user once a malicious stylesheet is loaded. Fixes shipped earlier in 4.4.12 and 4.2.17 (8 July 2026); all 4.4.x through 4.4.11 and 4.2.x through 4.2.16 are affected. Vendor/project mitigations until patch: block write methods to /geonetwork/srv/api/formatters at the reverse proxy. Ethiack (Rafael Castilho) reported the chain and said it fingerprinted 121 internet-exposed affected instances across 39 countries, about 89% government/military/agency-related (exposure estimate, not confirmed compromises). The Hacker News (2 September) found no CISA KEV entry and no public in-wild exploitation reporting at disclosure. Primary advisories: GitHub GHSA-mh22-prqr-vf42 and GHSA-x898-729x-cc3r.
Product
GeoNetwork
Versions
Affected: 4.4.x ≤ 4.4.11 and 4.2.x ≤ 4.2.16; fixed in 4.4.12 and 4.2.17
CVSS
8.6 (CVE-2026-63219); 9.1 (CVE-2026-58400) — as reported by THN from project advisories
Exploited in Australia?
unknown
Patch to
Upgrade to 4.4.12 or 4.2.17; until then block POST/PUT/PATCH to formatter upload endpoint
Cyber Security News (31 August 2026) reports CVE-2026-73296 in Microsoft's open-source UFO automation framework: Mobile Model Context Protocol servers (data collection on TCP 8020, action on TCP 8021) accepted MCP requests without authentication when bound for remote access (0.0.0.0). Default bind is localhost. An exposed action server can tap, swipe, type, launch apps and drive a connected Android device or emulator over ADB; the data server can return screenshots and UI hierarchy. CSN cites GitHub advisory GHSA-24fq-m9rr-g3mm (CWE-306 / CWE-862) and a CVSS of 9.4; that GitHub advisory URL returned 404 this pass, so the score is not confirmed from GitHub and is not copied into the CVSS field. Microsoft's fix is UFO 3.0.8, which adds mandatory bearer-token auth via UFO_MCP_API_KEY and is described as refusing startup if the key is missing. Until patched, keep Mobile MCP on localhost and block 8020/8021. Wire source until the GHSA page is readable.
JFrog's 28 August 2026 advisory rates CVE-2026-82329 Critical (CVSS 3.1 9.8): under default configuration, an unauthenticated attacker with network access may obtain administrative privileges on self-managed Artifactory. watchTowr told SecurityWeek (1 Sep) and BleepingComputer / The Hacker News (2 Sep) it has seen exploitation — attackers minting admin tokens, enumerating users/groups/federated topologies, and in limited cases creating backdoor users — from a small set of IPs without evidence of mass scanning yet. watchTowr describes a 'phantom' join key on instances without an additional join key configured, abused via JFrog Access to forge administrator credentials. Self-hosted patches: 7.111.21, 7.117.28, 7.125.20, 7.133.29, 7.146.38, 7.161.20; JFrog says cloud was already fortified. Access tokens are independent credentials — upgrading the binary does not by itself revoke minted tokens, so rotate/revoke tokens and hunt anomalous admin activity after patching. CISA added CVE-2026-82329 to the KEV catalog on 2 September 2026. UPDATE 10–11 September 2026 (Wiz / THN): Wiz also saw CVE-2026-82329 abused in the wild alongside a separate 42018→42016 chain (15 Aug–8 Sep) that yields admin and drops Rust C2 / Groovy plugins — see desk cards cve-2026-42018 and cve-2026-42016. Distinct from cve-2026-66384.
Patchstack (28 August 2026) and CVE-2026-82222 describe an unauthenticated PHP object injection chain in GiveWP through 4.16.7.1 that reaches remote code execution. On 4.16.5.1 and below a default install with one published donation form and an active gateway is enough. On 4.16.6–4.16.7.1 reachability narrows but a legacy give_forms post without formBuilderSettings (including draft/trashed) re-arms the chain. The plugin's give_action=user_register path ignores WordPress users_can_register, so an attacker can obtain an account even when registration is disabled. Patchstack rates CVSS 10.0. Vendor fixed in GiveWP 4.16.7.2 (27 August 2026), which breaks the chain at several layers and migrates serialized object payloads already in the database. Patch to 4.16.7.2 or later.
cPanel's 27 August 2026 advisory: an authenticated account that can add parked or addon domains can create arbitrary files on the server. Successful exploitation is code execution as root, which is the whole host, not one site. All supported cPanel/WHM versions are affected. Patched builds: 11.110.0.141, 11.134.0.53, 11.136.0.37, 11.138.0.2, and WP Squared 11.138.1.7. The vendor page does not publish a CVSS score and does not say it is exploited. This is not the April login bypass (CVE-2026-41940), which is already on the desk.
Product
cPanel/WHM, WP Squared
Versions
All supported versions before the 27 August patched builds
Exploited in Australia?
unknown
Patch to
11.110.0.141, 11.134.0.53, 11.136.0.37, 11.138.0.2, or WP2 11.138.1.7 or later
WatchGuard PSIRT published a cluster of advisories on 27 August 2026 covering Fireware OS (iked / epm) and WatchGuard Dimension. Five issues are rated 9.3 on the vendor page: iked heap overflow CVE-2026-19313, iked stack overflow CVE-2026-19318 and iked type confusion CVE-2026-19315 (unauthenticated remote code execution via crafted traffic); epm stack overflow CVE-2026-13086 in the deprecated Mobile Security feature; and Dimension CVE-2026-78174, session-ID and CSRF token exposure that can let a low-privileged administrator take over a super-admin session. SecurityWeek (Ionut Arghire, 1 September) matches those five at CVSS 9.3. Patch to Fireware OS 2026.2.2, 12.12.2 or 12.5.20 and Dimension 2.3.1. WatchGuard also shipped additional high- and medium-severity fixes in the same wave (iked denial-of-service and Dimension SQL injection, CSRF, SSRF and related issues among them); this card does not list every CVE. The vendor is not aware of exploitation of these defects.
Product
WatchGuard Fireware OS (iked / epm) and WatchGuard Dimension
Versions
Fireware OS before 2026.2.2 / 12.12.2 / 12.5.20; Dimension before 2.3.1
Palo Alto Networks advisory CVE-2026-0251 (published 13 May 2026, updated 27 August 2026 after a public PoC): multiple local privilege-escalation bugs in the GlobalProtect app (CWE-426 untrusted search path) let a local user reach NT AUTHORITY\SYSTEM on Windows and root on macOS and Linux, then run commands with administrative privileges. iOS, Android, Chrome OS and the GlobalProtect UWP app are not affected. No special configuration is required. Vendor CVSS-BT is 7.1 (CVSS 4.0); the same advisory lists CVSS-B 8.5. Exploit maturity is POC. Palo Alto Networks says it is not aware of malicious exploitation. Distinct from CVE-2026-0299 already on this desk.
Product
Palo Alto Networks GlobalProtect app
Versions
6.3, 6.2 and 6.0 on Windows, macOS and Linux as listed in the advisory (not iOS/Android/Chrome OS/UWP)
ServiceNow's 27 August 2026 CVE record (CNA title: Sandbox Escape in Now Platform) says it remediated a sandbox-escape issue that could allow an unauthenticated user to execute arbitrary code within the Now Platform and gain more access than intended. ServiceNow scored it 8.7 (CVSS 4.0; vector uses PR:L). Hosted instances received a vendor-deployed security update; partners and self-hosted customers were given the update. ServiceNow says it is not currently aware of malicious exploitation against ServiceNow instances. Self-hosted operators should apply the August 2026 CVE advisory updates (KB3152242). CNA-listed affected rows span Xanadu, Yokohama, Zurich and Australia patch families (including builds before Xanadu Patch 11 Hot Fix 7a, Yokohama Patch 12 Hot Fix 3b / Patch 13 Hot Fix 4, Zurich Patch 7b–12 hotfixes as listed, and Australia Patch 2–5 hotfixes as listed). Same-day desk cards cover the three CVSS 4.0 10.0 AI Platform issues (CVE-2026-18885, CVE-2026-18886, CVE-2026-74820).
Product
ServiceNow Now Platform
Versions
CNA-listed Xanadu, Yokohama, Zurich and Australia patch-family builds before the hotfixes named on the CVE record (see KB3152242)
ServiceNow's 27 August 2026 CVE record (CNA title: Unauthenticated Privilege Escalation via System Configuration Image Upload Processor) says it remediated an improper access control flaw in the ServiceNow AI Platform that could, in certain circumstances, let an unauthenticated user create or modify instance data beyond what was intended, resulting in privilege escalation. ServiceNow scored it 10.0 (CVSS 4.0). Hosted instances received a vendor-deployed security update; partners and self-hosted customers were given the update. ServiceNow says it is not currently aware of exploitation against ServiceNow instances. Self-hosted operators should apply the August 2026 CVE advisory updates (KB3152242). Affected CNA rows include Xanadu, Yokohama, Zurich and Australia patch families listed on the CVE record. Distinct from CVE-2026-74820 (SQL injection) and CVE-2026-18885 (code injection) on this desk.
Product
ServiceNow AI Platform
Versions
CNA-listed Xanadu, Yokohama, Zurich and Australia patch-family builds (see KB3152242)
ServiceNow's 27 August 2026 CVE record (CNA title: Unauthenticated Remote Code Execution in GraphQL Composite Data API) says it remediated a code-injection flaw in the ServiceNow AI Platform that could, in certain circumstances, let an unauthenticated user run arbitrary code and gain access to or change instance data beyond what was intended. ServiceNow scored it 10.0 (CVSS 4.0). Hosted instances received a vendor-deployed security update; partners and self-hosted customers were given the update. ServiceNow says it is not currently aware of malicious exploitation. Self-hosted operators should apply the August 2026 CVE advisory updates (KB3152242). Affected CNA rows include Xanadu, Yokohama, Zurich and Australia patch families listed on the CVE record. Distinct from CVE-2026-74820 (SQL injection) and CVE-2026-18886 (privilege escalation) on this desk.
Product
ServiceNow AI Platform
Versions
CNA-listed Xanadu, Yokohama, Zurich and Australia patch-family builds (see KB3152242)
PaperCut Software's 27 August 2026 (AEST) security bulletin, last updated 10 September 2026, published Security Maintenance Releases on 10 Sep 2:00pm AEST: NG/MF 26.0.5, 25.0.13 and 24.1.10 are Regular Maintenance Releases that completed full QA, include all fixes from Emergency Patch Releases 1–3 plus extra hardening, and replace the emergency patches as the recommended builds. Earlier context: says its response team is investigating active exploitation of PaperCut NG and PaperCut MF, with confirmed customer incidents. The advisory applies to all versions of both products. Immediate action: if the Application Server is reachable from the public internet, restrict web access to trusted addresses now. Emergency Patch Release 2 went out for NG/MF v24, v25 and v26 (Windows, Linux and macOS) with extra hardening after work with Huntress and watchTowr. Versions before v24 should upgrade to the latest. The bulletin lists CVE-2026-82078 (unsafe dynamic class loading in the database connector, CVSS 4.0 9.4 Critical) and CVE-2026-81578 (authentication bypass that can let an unauthenticated remote attacker modify certain system configurations, CVSS 4.0 8.8 High). Site Servers and secondary/print servers should be updated, not only the primary Application Server. Print Deploy and Mobility Print are not affected. Vendor-listed possible indicators include suspicious post-exploitation from pc-app.exe; missing, truncated or deleted server.log files; and server.log lines "ERROR No suitable driver found for jdbc:no:x" or "ERROR DatabaseUtils - Database error looking up cardID: VALUES CAST". Absence of those lines is not proof the server is clean. On 29 August 4:35pm AEST PaperCut added that some sites report the external-database Card/ID number lookup feature and SAML are not working as expected after the patch. Card/ID lookup from an external database is off by default after Release 2; sites that still need it must set security.card-number-lookup.enabled=Y in server/security.properties and restart the Application Server. On 30 August 10:34am AEST the vendor said customers using SQL Server for external card lookups with the legacy SourceForge jTDS driver should move to the latest supported Microsoft SQL JDBC driver; engineering is still working toward an official release and support remains available. On 30 August 3:35pm AEST PaperCut added further indicators of compromise: server.log strings such as DB URL jdbc:derby:memory:pwn;create=true, Database error looking up cardID: VALUES CAST(X'cafebabe, Database error looking up cardID: VALUES CAST(', and DB URL jdbc:no:x with a 5-character random DB Driver name; files under install/server/lib/<5-char-name>.class and install/server/data/content/<5-char-name>.cmd or .out (attackers may remove those files). Observed post-compromise behaviour includes pc-app.exe or pc-app spawning cmd.exe for whoami and ver, then reconnaissance and downloads of remote-access tooling (including a Windows service named Remote Access Service running SimpleService.exe from a JWrapper-Remote Access path, and unexpected AnyDesk under C:/ProgramData). Absence of those indicators is not proof a server is clean. On 31 August 2026 4:21pm AEST PaperCut posted a status update with no new technical information. On 1 September 2026 11:18am AEST it added FAQ clarifications, and at 2:10pm AEST it added build numbers to download links. PaperCut published Emergency Patch (Release 3) on 1 September 2026 at 6:22pm AEST. It supersedes Release 2, is an accumulation of all emergency releases, addresses two known regressions (broken SAML login flows; restored support for legacy Microsoft SQL Server drivers for external card lookup), and adds additional hardening and mitigation against potential attack chains. Customers with internet-facing Application Servers should install Release 3 even if they already applied Release 2 or an earlier emergency release. Download tables now show R3 builds (MF v26 76531, v25 76532, v24 76534; NG v26 76530, v25 76533, v24 76535). BleepingComputer (1 September) reported that Defused observed CVE-2026-81578 / CVE-2026-82078 honeypot activity since late 29 August UTC; an actor abused the auth bypass to hijack PaperCut's external user-lookup and dump database tables via Derby (a data-theft path, distinct from the public RCE writeups). SecurityWeek (1 September) quoted WatchTowr's Jake Knott: activity has shifted from exploratory probes to hands-on-keyboard exploitation, with attackers keying in-memory payloads so only they can reuse the host; WatchTowr says that looks like initial-access-broker or other aggressive-outcome operators. CISA added CVE-2026-81578 and CVE-2026-82078 to the Known Exploited Vulnerabilities catalog on 31 August 2026. WA SOC advisory 20260901001 (1 September, TLP:CLEAR) points operators at the same vendor bulletin, lists the two CVEs (CVSS 9.4 and 8.8), and says it has not received reports of exploitation on Western Australian Government networks at the time of writing. On 2 September 2026 at 4:38pm AEST PaperCut added an 'Updates from the field' note to Current Status: it says a second wave of attacks is hitting servers that are not fully patched and remain publicly available, and that this wave appears to involve more sophisticated post-compromise behaviour than the first days of the incident. The vendor again stresses installing Emergency Patch Release 3 or keeping the Application Server off the public internet. Bulletin page header last-updated date moved to 5 September 2026; Current Status at 5 September 2026 10:30am AEST reported no new vendor technical information (work continues toward the official release); EPR3 remains the current emergency build (no EPR4 in this update). The Hacker News (5 September 2026) summarises Arctic Wolf Adversary Research Team observations: attackers exploiting CVE-2026-81578 and CVE-2026-82078 against education-sector PaperCut servers in the United States and Europe (K-12 through universities) for command execution, reconnaissance and privileged-account creation, with post-exploitation including Windows registry hive collection tools (including lsa_collect.exe used to reconstruct BootKey/SAM access paths), Metasploit/Meterpreter-related Java payloads, and host/user/process enumeration. Arctic Wolf published related pack alerts at github.com/rtkwlf/wolf-tools (202609-papercut-cve-exploitation). Still: keep Application Servers off the public internet or on EPR3; monitor pc-app.exe spawning cmd.exe/powershell and the vendor IoCs already on this card. NEW 10 September 2026 (BleepingComputer citing GreyNoise; The Hacker News also citing Blackpoint Cyber): a likely Russian-speaking actor used hundreds of AI agents (OpenAI Codex and DeepSeek plus commodity tools) to build and refine exploits for CVE-2026-81578 and CVE-2026-82078, generating target lists via Netlas. GreyNoise reports at least 440 PaperCut instances at 395 organisations across 48 countries compromised; credentials from 280 victims, OS/domain secrets from 147, and administrator privileges at 12 organisations; roughly half of victims in education; top countries US, UK, France, Spain, Canada. First RCE under four hours from an empty workspace; domain admin about two hours later. Still: EPR3 or take Application Servers off the public internet; monitor the vendor IoCs already on this card.
ServiceNow's 27 August 2026 CVE record says it remediated an unauthenticated SQL injection in the ServiceNow AI Platform that could, in certain circumstances, let an unauthenticated user run arbitrary SQL against the instance database and read or change data beyond what was intended. ServiceNow scored it 10.0 (CVSS 4.0). Hosted instances received a vendor-deployed security update; partners and self-hosted customers were given the update. ServiceNow says it is not currently aware of malicious exploitation. The same 27 August CNA batch includes CVE-2026-18885 (unauthenticated code injection in the GraphQL Composite Data API, CVSS 4.0 10.0; own card on this desk), CVE-2026-18886 (unauthenticated privilege escalation via image-upload processor, CVSS 4.0 10.0; own card on this desk) and CVE-2026-6876 (Now Platform sandbox escape, CVSS 4.0 8.7). Self-hosted operators should apply the August 2026 CVE advisory updates. Affected CNA rows include Xanadu, Yokohama, Zurich and Australia patch families listed on the CVE record.
Product
ServiceNow AI Platform
Versions
CNA-listed Xanadu, Yokohama, Zurich and Australia patch-family builds (see KB3152242)
Authenticated path-limitation flaw in JFrog Artifactory: under specific remote-repository conditions a user may write outside the intended Docker cache path. NVD affected builds end before 7.146.35, and 7.161.0 through builds before 7.161.16. CVSS 5.3. Patch to 7.146.35 or 7.161.16 (or later). Treat artifact caches as part of the software supply chain, not a side appliance.
Out-of-bounds write in the Linux IPv6 send path (__ip6_append_data) when the paged-allocation branch undersizes the linear skb by fraggap bytes. An unprivileged local user can trigger it with a UDPv6 socket using MSG_MORE and MSG_SPLICE_PAGES. kernel.org rates CVSS 7.8. Red Hat describes the same flaw as a privilege-escalation and container-escape path on affected kernels. Patch to 6.1.177, 6.6.144, 6.12.95, 6.18.38 or 7.1.3, or the distro kernel that carries those stable commits. Red Hat documents a temporary workaround of user.max_user_namespaces=0; that setting breaks some container workflows.
Product
Linux kernel (IPv6)
Versions
From 6.0 until 6.1.177 / 6.6.144 / 6.12.95 / 6.18.38 / 7.1.3
ownCloud core before 10.13.1 accepts pre-signed WebDAV URLs even when the file owner has no signing-key configured (the default). If the victim username is known, an unauthenticated attacker can access, modify, or delete any of that user's files. ownCloud rates CVSS 9.8. Fixed in 10.13.1 by denying pre-signed URLs when no signing-key is set. Patch, then review access logs for unexpected WebDAV activity.
CVE-2026-80428 is an unauthenticated PHP object injection in ILIAS LMS (before 9.22 / 10.10 / 11.3). NVD: attackers inject serialized objects through the LTI authentication endpoint into session storage, then trigger unrestricted deserialization via the auth-exempt Shibboleth back-channel logout endpoint (SoapServer LogoutNotification), chaining a GuzzleHttp FileCookieJar POP gadget to write attacker-controlled PHP to a web-accessible path and achieve RCE as the web server user. CVSS 3.1 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H); CVSS 4.0 9.3 Critical (VulnCheck). Fixed in ILIAS 9.22, 10.10 and 11.3 (vendor docu advisories linked from NVD). NEW 11 September 2026: Exploit-DB 52682 publishes a remote exploit (DigiProSec) for the chain; notes v9/v10 exploitable as packaged, v11.x packaged shib_logout.php may not reach the vulnerable path. Category tech (LMS stack). No Australian exploitation reports on this pass. Primary: NVD/CVE; vendor: ILIAS docu; wire: Exploit-DB.
CISA added CVE-2026-8452 to KEV on 26 August 2026 (federal due date 29 August 2026). NVD describes a memory-overflow issue in NetScaler ADC and NetScaler Gateway that can cause unpredictable behaviour and denial of service when the appliance is configured as a Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server. Apply the fixed builds in Citrix bulletin CTX696604. This desk does not invent build numbers the bulletin page would not yield over a plain fetch.
Product
Citrix NetScaler ADC and NetScaler Gateway
Versions
Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server configurations (see CTX696604)
CISA added CVE-2019-1068 to KEV on 26 August 2026 (federal due date 29 August 2026). NVD: a remote code execution issue when SQL Server incorrectly handles processing of internal functions. Apply the Microsoft security update from the MSRC advisory. Do not invent a cumulative update number here.
Wordfence (CNA) published CVE-2026-19949 for ServMask's All-in-One WP Migration and Backup WordPress plugin: unauthenticated second-order SQL injection in archive restore through 7.109. Jack Taylor reported it; Wordfence notified ServMask on 15 August 2026; fixed in 7.110 on 20 August 2026; CVE disclosed about 25 August. Incorrect parsing of escaped backslashes and quotes while rewriting database content lets an attacker plant SQL via trackbacks that runs when an admin restores a backup — core plugin use. Injected SQL can leak ai1wm_secret_key (e.g. via a public comment), then import a malicious .wpress archive for code execution and site takeover. Wordfence/BleepingComputer (2 September) cite about five million active installs and roughly 35% on the fixed build (~3.25 million still vulnerable). CVSS 3.1 8.8 High (Wordfence CNA). Patch to 7.110 or later; treat dormant installs that may be reactivated as in-scope.
Product
ServMask All-in-One WP Migration and Backup (WordPress)
Versions
Affected through 7.109; fixed in 7.110 (20 Aug 2026)
CVSS
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AVAttack Vector
Network
ACAttack Complexity
Low
PRPrivileges Required
Low
UIUser Interaction
None
SScope
Unchanged
CConfidentiality
High
IIntegrity
High
AAvailability
High
(High, CVSS 3.1, Wordfence CNA)
Exploited in Australia?
unknown
Patch to
7.110 or later; rotate ai1wm_secret_key / admin credentials if restore was done on a vulnerable build
Google's Stable Channel Update for Desktop (25 August 2026) promotes Chrome 152 and ships 152.0.7977.64 on Linux and 152.0.7977.64/.65 on Windows and Mac. Among Critical fixes, CVE-2026-79290 is a use-after-free in Aura that Google rates Critical and says can let a remote attacker run code outside the browser sandbox via a crafted HTML page (fixed prior to 152.0.7977.65). CVE-2026-79282 is a Critical use-after-free in ANGLE (reported by Goodluck). WA SOC shared advisory 20260831001 (31 August, TLP:CLEAR) points operators at this Chrome update for Windows, macOS and Linux prior to 152.0.7977.65, rates the Critical issues CVSS 9.6, and says it has not received reports of exploitation on Western Australian Government networks at the time of writing. WASOC's advisory table display text for the second CVE does not match its NVD href (CVE-2026-79282); this card follows the Google release notes and that href. Patch promptly to the fixed Chrome 152 builds.
Product
Google Chrome
Versions
Prior to 152.0.7977.65 (Win/Mac); Linux build 152.0.7977.64 in the same release
CVSS
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
AVAttack Vector
Network
ACAttack Complexity
Low
PRPrivileges Required
None
UIUser Interaction
Required
SScope
Changed
CConfidentiality
High
IIntegrity
High
AAvailability
High
(CVSS 3.1, WASOC)
Exploited in Australia?
no
Patch to
152.0.7977.65 (Windows/Mac) / 152.0.7977.64 (Linux) or later
Veeam KB4905 (published 25 August 2026) documents CVE-2026-65641: an unauthenticated network attacker can coerce SMB authentication from the Veeam ONE service account. Vendor severity Critical, CVSS 4.0 score 9.3 (vector AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:H/SI:L/SA:L), reported via HackerOne. Affected: Veeam ONE 13.1.0.7034 and all earlier version 13 builds. Veeam states older 12.x builds are not affected. Fixed in Veeam ONE 13.1 Patch 0 (build 13.1.0.7233) and Veeam ONE 13.0.2 Patch 1 (build 13.0.2.7159). WA SOC shared advisory 20260828001 pointed operators at this class of issue. Patch promptly; Veeam notes attackers often reverse-engineer disclosed patches.
Product
Veeam ONE
Versions
13.1.0.7034 and earlier v13 builds (12.x not affected per vendor)
Gitea GHSA-rcr6-4jqh-j84m / CVE-2026-60004 (28 July 2026 advisory; CISA KEV 25 August 2026): diffpatch API can let a user with repository write access (including self-registered users on open instances) run commands as the Gitea service account. Affected 1.17 through versions before 1.27.1; patch to 1.27.1+. UPDATE 14 September 2026: The Hacker News cites Acronis Threat Research Unit attributing a China-linked cluster (moderate confidence) tracked as Red Heron that weaponised CVE-2026-60004 from ~29 July 2026, scanning 1,386 Gitea instances across seven countries (plus a 477-instance Taiwan dataset) and confirming compromises at 13 organisations in Canada (2), Argentina (1), Taiwan (4), the US (4), Qatar (1), and Sri Lanka (1). Campaign progressed from repository theft to credentials, persistence, and lateral movement (including root on a three-node Proxmox cluster). Tooling includes C++ Linux implant JITTERLY (30+ commands; overlaps AdaptixC2) and LD_PRELOAD rootkit SIXZUT. Primary remains Gitea advisory; secondary: THN / Acronis TRU reporting. Distinct from generic KEV listing alone.
Unauthenticated remote code execution in JetBrains TeamCity On-Premises via the agent polling protocol. ASD's ACSC observed active exploitation against On-Premises servers in Australia. All On-Premises versions are affected. TeamCity Cloud is not. Patch to 2025.11.7 or 2026.1.3, or apply the vendor security patch plugin if you cannot upgrade.
Product
JetBrains TeamCity On-Premises
Versions
All On-Premises versions before the fixed releases
Zscaler's 24 August 2026 CVE record describes multiple Client Connector flaws that allow remote code execution, giving an unauthenticated, unprivileged user the ability to execute arbitrary code in the ZCC context. Zscaler scored it 9.1 (CVSS 3.1). The CNA points administrators to the 2026 Client Connector app release summary for fixed builds. Affected version strings in that record include Windows before 4.6.0.457 / 4.7.0.317 / 4.8.0.232 / 4.9.0.372, macOS before 4.5.2.312 / 4.7.0.292 / 4.8.0.191, Linux before 3.7.2.64 / 4.2.1.64, Android and ChromeOS before 4.2, and iOS before 4.5.1. Confirm the exact build from the vendor release summary before declaring a fleet patched. Zscaler's release summary also lists CVE-2026-59564 (auth bypass to the portal), CVE-2026-59567 (local privilege escalation) and CVE-2026-59565 (local/kernel denial of service). Not in CISA KEV at last check.
Product
Zscaler Client Connector
Versions
Builds before the fixed versions in the 2026 release summary (see CNA version list)
CVSS
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
AVAttack Vector
Network
ACAttack Complexity
Low
PRPrivileges Required
None
UIUser Interaction
None
SScope
Unchanged
CConfidentiality
High
IIntegrity
High
AAvailability
None
(CVSS 3.1, Zscaler CNA)
Exploited in Australia?
unknown
Patch to
Latest Client Connector build listed in the 2026 release summary for each OS
Oracle Critical Patch Update (January 2026) lists CVE-2026-21962 in Oracle HTTP Server and Oracle WebLogic Server Proxy Plug-in for Apache HTTP Server and IIS. Supported affected versions: 12.2.1.4.0, 14.1.1.0.0, and 14.1.2.0.0. NVD rates CVSS 10.0. Unauthenticated network access via HTTP. Apply the January 2026 CPU for the plug-in builds you run.
Product
Oracle HTTP Server / WebLogic Server Proxy Plug-in
Unauthenticated OS command injection in Zimbra Collaboration (ZCS) before 10.1.20 when the optional zimbra-snmp package is installed and SNMP notifications are enabled. NVD: crafted SMTP requests can run commands as the zimbra user. CERT Polska reported active exploitation. Patch to 10.1.20. If you cannot upgrade, remove zimbra-snmp / disable snmp_notify and hunt per CERT Polska.
Product
Zimbra Collaboration Suite (ZCS)
Versions
Before 10.1.20 with zimbra-snmp and snmp_notify enabled
Kaspersky ICS CERT (KLCERT-26-057): an unauthenticated attacker with network access to TrueConf Server on TCP 4307 can call an undocumented function and run an arbitrary script. Affects 5.3.x before 5.3.9, 5.4.x before 5.4.9, 5.5.x before 5.5.5, and earlier than 5.3. NVD CVSS 9.8. Related CVE-2026-72530 is a code-injection issue in the same product line. Patch to the fixed builds and do not expose 4307 to the internet.
Product
TrueConf Server
Versions
5.3.x < 5.3.9; 5.4.x < 5.4.9; 5.5.x < 5.5.5; and earlier than 5.3
Cloud Software Group bulletin CTX696939 (19 August 2026, Critical) covers an authentication bypass using an alternate path in customer-managed NetScaler ADC and NetScaler Gateway. CVSS v4.0 9.3. It applies when the appliance is a Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) or an AAA virtual server; on some later 14.1/13.1 builds only when a SAML action is also configured. Not Citrix-managed cloud. No workaround. Patch to 14.1-73.32, 13.1-63.21, 14.1-73.32 FIPS, or 13.1-37.277 FIPS/NDcPP, as applicable. Secure Private Access Hybrid using customer-managed NetScaler also needs those builds. BleepingComputer (4 September 2026) reports Previdian honeypot sensors saw requests matching a public PoC on 3 September from three source IPs geolocated to Australia, the United States and Germany — evidence of exploitation attempts, not confirmed successful compromise of production systems. The Centre for Cybersecurity Belgium also warned of exploitation attempts the same week. Citrix’s August bulletin had not yet flagged active exploitation. WA SOC advisory 20260907003 (7 September 2026, TLP:CLEAR) covers CVE-2026-19490 at CVSS 9.3 for the same build floors, and reports no exploitation on Western Australian Government networks at the time of writing. Distinct from CVE-2026-8452 on this desk. NEW 9–10 September 2026: CISA added CVE-2026-19490 to the Known Exploited Vulnerabilities catalog on 9 September 2026 (due 12 September 2026 for FCEB under BOD 26-04, including forensic triage requirements). SecurityWeek (10 September) summarises ongoing exploitation since at least 3 September after a public PoC, matching earlier Previdian sensor notes. Patch floors unchanged: 14.1-73.32 / 13.1-63.21 and FIPS mates.
Product
NetScaler ADC and NetScaler Gateway (customer-managed)
Versions
14.1 before 14.1-73.32; 13.1 before 13.1-63.21; ADC FIPS before 14.1-73.32 FIPS; ADC FIPS/NDcPP before 13.1-37.277
Same CTX696939 bulletin: memory overflow that can cause unpredictable behaviour or denial of service when SIP ALG is enabled on a Large Scale NAT (LSN) group. CVSS v4.0 8.8. Customer-managed NetScaler ADC and Gateway only. No workaround. Same patched builds as CVE-2026-19490: 14.1-73.32, 13.1-63.21, 14.1-73.32 FIPS, or 13.1-37.277 FIPS/NDcPP. Distinct from the earlier CVE-2026-8452 memory-overflow card.
Product
NetScaler ADC and NetScaler Gateway (customer-managed)
Versions
14.1 before 14.1-73.32; 13.1 before 13.1-63.21; ADC FIPS before 14.1-73.32 FIPS; ADC FIPS/NDcPP before 13.1-37.277. Precondition: SIP ALG on an LSN group
CVE-2026-18556 and CVE-2026-18577 are authentication-bypass issues in N-able N-central that may allow unauthorised access through an alternate path. ASD's ACSC has observed targeting of the product in Australia. Affects current versions including 2026.3. Vendor Hotfix 2 (build 2026.3.1.10, 6 August 2026) supersedes Hotfix 1. Review whether the console needs to face the internet.
CISA added CVE-2026-64849 to KEV on 19 August 2026. MLflow contains an SSRF issue that can let attackers reach internal or cloud metadata services. The CVE record states the issue is fixed in 3.15.0. Do not expose MLflow tracking servers to untrusted networks.
Oracle's 18 August 2026 Critical Security Patch Update (revision 3 on 27 August) contains 943 new security patches. Oracle says it continues to receive reports of attempts to exploit already-patched issues where customers had not applied available updates. Fusion Middleware includes unauthenticated WebLogic Server Core issues CVE-2026-60698 (IIOP, 9.8), CVE-2026-60672 and CVE-2026-60696 (T3/IIOP, 9.8) on 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0, plus CVE-2026-60977 (RMI, 9.8) on 12.2.1.4.0, 14.1.1.0.0 and 14.1.2.0.0, and Oracle Internet Directory LDAP Server CVE-2026-61241 at 10.0 on 12.2.1.4.0 and 14.1.2.1.0. Database Server includes adjacent-network Portable Clusterware issues CVE-2026-71063 and CVE-2026-71064 at 9.6. Apply the August 2026 CSPU for each product family you run. This is separate from CVE-2026-21962 (January 2026 CPU, later added to CISA KEV).
Product
Oracle Fusion Middleware, Database Server and other families in the August 2026 CSPU
Versions
See the August 2026 CSPU risk matrices; WebLogic 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, 15.1.1.0.0 among others
CVSS
Up to
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
AVAttack Vector
Network
ACAttack Complexity
Low
PRPrivileges Required
None
UIUser Interaction
None
SScope
Changed
CConfidentiality
High
IIntegrity
High
AAvailability
High
(CVE-2026-61241, CVSS 3.1, Oracle)
Exploited in Australia?
unknown
Patch to
August 2026 Critical Security Patch Update for each affected product
Broadcom VMSA-2026-0006 (29 July 2026; updated 19 August) covers CVE-2026-59310, a Critical directory-traversal flaw in the VMware vCenter Syslog server. A malicious actor with network access to vCenter can execute arbitrary code; Broadcom rates maximum CVSSv3 9.8; NVD CVSS 3.1 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). No workarounds — apply fixed builds per the VMSA response matrix / FAQ (brcm.tech/vmsa-2026-0006). CISA added the CVE to KEV on 18 August 2026 (FCEB due 21 August) after QUIRSO reported 361+ compromised IPs across 47 countries with reverse-SSH persistence. UPDATE 15 September 2026 (BleepingComputer; CISA KEV catalog field knownRansomwareCampaignUse=Known): CISA now flags the flaw as used in ransomware campaigns; Shadowserver still tracks 450+ internet-exposed vCenter instances. Treat unpatched vCenter as emergency. Primary: Broadcom VMSA-2026-0006; CISA KEV; wire: BleepingComputer 15 Sep.
Product
Broadcom VMware vCenter Server (Syslog server); also listed under VMSA-2026-0006 product family
Versions
Affected/fixed builds: see Broadcom VMSA-2026-0006.2 response matrix (Issue date 2026-07-29). Patch per vendor FAQ https://brcm.tech/vmsa-2026-0006
CVSS
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AVAttack Vector
Network
ACAttack Complexity
Low
PRPrivileges Required
None
UIUser Interaction
None
SScope
Unchanged
CConfidentiality
High
IIntegrity
High
AAvailability
High
Exploited in Australia?
unknown
Patch to
Install Broadcom-fixed vCenter builds from VMSA-2026-0006 response matrix immediately; no workaround; prioritise internet-facing vCenter
Weak authentication in on-premises Microsoft SharePoint (CVE-2026-55040) lets an unauthorised attacker bypass a security feature over the network. CISA added it to KEV on 18 August 2026 after evidence of active exploitation. NVD scores it 9.1 (CVSS 3.1). It is the auth-bypass half of an unauthenticated RCE chain with August's CVE-2026-63520 (Business Connectivity Services RCE). Apply the July/August SharePoint security updates for Subscription Edition, 2019 and 2016, and keep farms off the public internet unless required.
Product
Microsoft SharePoint Server
Versions
Supported on-prem SharePoint builds before the July 2026 security updates (see MSRC)
CVSS
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
AVAttack Vector
Network
ACAttack Complexity
Low
PRPrivileges Required
None
UIUser Interaction
None
SScope
Unchanged
CConfidentiality
High
IIntegrity
High
AAvailability
None
(CVSS 3.1, NVD Critical)
Exploited in Australia?
unknown
Patch to
July 2026 SharePoint security updates (MSRC CVE-2026-55040); also apply August CVE-2026-63520 updates
CISA added CVE-2026-33824 to the Known Exploited Vulnerabilities catalog on 18 August 2026: a double-free in Microsoft Internet Key Exchange (IKE) Service Extensions. Treat internet-reachable IKE as known-exploited and apply Microsoft's update.
Zabbix's 18 August 2026 advisory (ZBX-28071) says that in Zabbix 7.4 the cryptographic key used for signing frontend sessions was erroneously written to the database seed. The only known exploitation scenario is deployments that use both SAML authentication and guest users: the key can be used to forge valid session cookies and gain unauthorised frontend access. Other deployments have no known impact. Affected: 7.4.0 through 7.4.10. Fixed: 7.4.11. Vendor CVSS 4.0 is 7.7 (High). Workaround: clear settings.session_key in the Zabbix database so the frontend generates a new random key. Zabbix credited Daniel Shemesh and Or Ida via HackerOne. Not in CISA KEV at last check.
Red Hat's 17 August 2026 CVE record (threat severity Critical, CVSS 3.1 9.1) describes a reset-credentials flaw in keycloak-services for Red Hat Build of Keycloak. An unauthenticated remote attacker can force password reset for any user without the email verification step and set new credentials, taking over the account. Temporary mitigation if you cannot patch yet: turn Forgot password off for every realm (Realm settings → Login). Fixed packages include Keycloak 26.4 builds at or after rhbk/keycloak-operator-bundle 26.4.15-1 / keycloak-rhel9 26.4-23 (RHSA-2026:56519 / 56520) and 26.6 builds at or after 26.6.6-1 / 26.6-12 (RHSA-2026:56523 / 56524). Red Hat marks Red Hat Single Sign-On 7 and JBoss EAP Expansion Pack as not affected. No in-the-wild exploitation stated on the Red Hat CVE page at last check.
Product
Red Hat Build of Keycloak (keycloak-services)
Versions
26.4 before fixed 26.4.15-1 / 26.4-23 packages; 26.6 before fixed 26.6.6-1 / 26.6-12 packages (see RHSA)
CVSS
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
AVAttack Vector
Network
ACAttack Complexity
Low
PRPrivileges Required
None
UIUser Interaction
None
SScope
Unchanged
CConfidentiality
High
IIntegrity
High
AAvailability
None
(CVSS 3.1, Red Hat Critical)
Exploited in Australia?
unknown
Patch to
Apply RHSA-2026:56519/56520 (26.4) or RHSA-2026:56523/56524 (26.6); or disable Forgot password on all realms until patched
Ray is an AI compute engine. CISA added CVE-2025-62593 to KEV on 17 August 2026. The GitHub advisory and NVD describe a code-injection issue in versions before 2.52.0. Patch to 2.52.0. Do not expose developer Ray services to untrusted networks.
Apple released iOS 26.6.1 and iPadOS 26.6.1 and macOS Tahoe 26.6.2 on 17 August 2026 (security-content pages published 20 August). The iOS advisory includes ImageIO integer overflow CVE-2026-65346, where processing an image may lead to arbitrary code execution; Telephony CVE-2026-65329, where an attacker in a privileged network position may be able to bypass IPSec authentication and intercept network traffic (iPhone 11 and later); Kernel use-after-free CVE-2026-65343 (remote unexpected system termination); and multiple WebKit memory-safety issues. Apple does not publish CVSS scores on that page. Safari 26.6.1 followed on 18 August for macOS Sonoma and Sequoia. This is separate from CVE-2026-65400 (macOS Screen Sharing), which CISA added to KEV on 18 August.
Product
Apple iOS, iPadOS, macOS Tahoe, Safari
Versions
iPhone 11 and later; listed iPad models; macOS Tahoe; Safari on Sonoma/Sequoia
Microsoft Security Update Guide CVE-2026-69414 is an elevation of privilege in the Microsoft Malware Protection Engine (ShieldBreak): CVSS 3.1 base 7.8 (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H), Important. August reporting described a public local PoC to SYSTEM when Defender is enabled, including as a bypass of RoguePlanet (CVE-2026-50656). BleepingComputer (9 September 2026) says Microsoft shipped a ShieldBreak fix in the September 2026 Patch Tuesday set, and that researcher Nightmare Eclipse then released a "ShieldCrash" proof-of-concept claiming the patch is incomplete under specific conditions — arbitrary file read as SYSTEM on fully patched Windows 10/11/Server, without write access in the published skeleton PoC. Treat ShieldCrash as secondary researcher claim until MSRC documents a new CVE or revises 69414. Watch MSRC for engine build requirements; do not equate a public PoC with confirmed in-the-wild exploitation.
Product
Microsoft Malware Protection Engine (Microsoft Defender)
Versions
See MSRC / September 2026 Defender engine updates; ShieldCrash claims affect Sep-patched Windows 10/11/Server per researcher
CVSS
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AVAttack Vector
Local
ACAttack Complexity
Low
PRPrivileges Required
Low
UIUser Interaction
None
SScope
Unchanged
CConfidentiality
High
IIntegrity
High
AAvailability
High
Exploited in Australia?
unknown
Patch to
Apply September 2026 Defender/Malware Protection Engine updates; monitor MSRC for any ShieldCrash follow-up CVE
PostgreSQL's own security page for CVE-2026-6471 (fix published 13 August 2026) describes missing authorisation in logical decoding: a non-superuser with REPLICATION privilege can cause the server to dlopen any file visible to the OS account running PostgreSQL by choosing the logical decoding plugin path, which runs arbitrary code as that account. Affected before 18.6, 17.11, 16.15, 15.19, and 14.24; fixed in those builds. Vendor CVSS 3.0 is 7.2 (AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H). Cyera's PostGREShell research (covered by SecurityWeek on 4 September 2026) explains how replication-protocol plugin loading can be abused for RCE, privilege escalation and persistence when REPLICATION is granted to backup or monitoring accounts. Inventory roles with REPLICATION, patch to the fixed minor releases, and do not treat REPLICATION as a low-privilege convenience grant.
Product
PostgreSQL (core server, logical decoding)
Versions
Before 18.6 / 17.11 / 16.15 / 15.19 / 14.24; fixed in those releases
CVSS
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
AVAttack Vector
Network
ACAttack Complexity
Low
PRPrivileges Required
High
UIUser Interaction
None
SScope
Unchanged
CConfidentiality
High
IIntegrity
High
AAvailability
High
(CVSS 3.0, PostgreSQL)
Exploited in Australia?
unknown
Patch to
PostgreSQL 18.6, 17.11, 16.15, 15.19, or 14.24 (or later minor); review REPLICATION grants
WordPress 7.0.4 (12 August 2026) is a security release. An Author or anyone with upload_files can upload a malicious PostScript file and reach remote code execution, but only where Imagick and Ghostscript are both in use. WordPress credits pwn.ai. GitHub advisory GHSA-8vr3-7mxf-gx8w scores it 8.8 (CVSS 3.0). Fixed in 7.0.4, with backports through the 4.7 branch (6.9.7, 6.8.8, and the matching older branch builds). No exploitation claim on the WordPress or GitHub notices.
Product
WordPress core
Versions
7.0.0-7.0.3, and older branches back through 4.7 before the matching backport
CVSS
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AVAttack Vector
Network
ACAttack Complexity
Low
PRPrivileges Required
Low
UIUser Interaction
None
SScope
Unchanged
CConfidentiality
High
IIntegrity
High
AAvailability
High
(CVSS 3.0, GitHub advisory)
Exploited in Australia?
unknown
Patch to
7.0.4, or the backport for the branch you run (6.9.7, 6.8.8, through 4.7.35)
Palo Alto Networks 12 August 2026 advisory: local privilege-escalation bugs in the GlobalProtect app let a local user reach NT AUTHORITY\SYSTEM on Windows and root on macOS and Linux, then run commands with administrative privileges. iOS, Android and Chrome OS are not affected. Vendor CVSS-BT is 5.9 (CVSS 4.0); the same advisory lists CVSS-B 8.5 without the exploit-maturity modifier. Palo Alto Networks says it is not aware of malicious exploitation. Same-day GlobalProtect app advisories cover CVE-2026-0295 (macOS race-condition LPE, CVSS-BT 4.1), CVE-2026-0296 (certificate-validation bypass of app traffic, not the VPN tunnel, CVSS-BT 4.5), CVE-2026-0297 (UDP tunnel handshake buffer overflow, CVSS-BT 5.2) and CVE-2026-0298 (Windows PLAP MitM code execution, CVSS-BT 5.2 / CVSS-B 7.7). Those sibling advisories show Updated 2026-09-12 on the PSIRT hub; Palo Alto Networks still says it is not aware of malicious exploitation. PAN-OS URL Filtering information disclosure CVE-2026-0301 (CVSS 1.7) was also published 12 August. Prisma Access Agent LPE CVE-2026-0294 (CVSS-BT 6.0; patch 26.3+) remains a related same-day PSIRT item.
Product
Palo Alto Networks GlobalProtect app
Versions
6.3, 6.2 and 6.0 on Windows, macOS and Linux as listed in the advisory (not iOS/Android/Chrome OS)
6.3.3-h14 (Windows/macOS) or 6.3.3-h15 (Linux); 6.2.8-h13 (Windows/macOS); 6.0.15 (Linux/macOS/Windows; PSIRT hub ETA ~29 Oct 2026 as of Updated 2026-09-12)
Microsoft patched CVE-2026-62911 in the August 2026 Patch Tuesday cycle: authentication bypass by capture-replay in Exchange Server that lets an authorised attacker elevate privileges over the network and take over user mailboxes (send, read, download attachments). Affected products named in coverage include Exchange Server 2016, 2019 and Subscription Edition. On 1 September 2026 BleepingComputer reported Shadowserver observing 21,899 internet-exposed Exchange fingerprints still unpatched (largest counts in the United States and Germany), and relayed NCSC-NL guidance that exploit code is available and that Exchange 2016/2019 security updates require the Extended Security Updates programme. Germany's BSI separately warned that a large share of on-premises Exchange in Germany remained vulnerable. This desk has not seen a CISA KEV listing for CVE-2026-62911 at write-up. NEW 8 Sep AU: iTnews cites Shadowserver counts of 382 Australian and 56 New Zealand Exchange hosts still vulnerable as of 31 August 2026; NCSC-NL (28 Aug) said public PoC exists and warned unauthenticated attackers could potentially achieve arbitrary code execution; ASD urges patching or network segmentation for legacy Exchange; coverage rates CVSS 3.1 as 8.0. Patch promptly; do not leave legacy Exchange on the public internet.
Product
Microsoft Exchange Server
Versions
Exchange Server 2016, 2019, Subscription Edition (per public coverage); confirm against MSRC
CVSS
8.0 (CVSS 3.1 per iTnews/Microsoft coverage)
Exploited in Australia?
unknown
Patch to
August 2026 Exchange security update; restrict internet exposure; plan exit from ESU-era 2016/2019
Microsoft's 11 August 2026 Patch Tuesday fix (MSRC CVE-2026-63520) addresses improper input validation in on-premises SharePoint that lets an unauthorised attacker execute code over the network. NVD scores it 8.1 (CVSS 3.1, High, attack complexity High). Rapid7, which co-disclosed with Microsoft, says the bug is unsafe .NET type instantiation in Business Connectivity Services and that chaining it with the July auth bypass CVE-2026-55040 yields unauthenticated RCE. August security updates cover SharePoint Server Subscription Edition (KB5002893), SharePoint Server 2019 (KB5002894 / KB5002896), and SharePoint Enterprise Server 2016 (KB5002905 / KB5002906). Public PoC material for the RCE half appeared around 24 August; Defused later reported honeypot probes of the 55040+63520 chain (JWT bypass exercised, BCS probing, no code execution observed in that report). Microsoft had not labelled 63520 as exploited in the wild at last magazine check. Prefer the August updates; do not leave on-prem SharePoint internet-facing without need.
Product
Microsoft SharePoint Server (Subscription Edition, 2019, Enterprise Server 2016)
Versions
Supported on-prem SharePoint builds before the August 2026 security updates listed in MSRC / Rapid7 remediation table
CVSS
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
AVAttack Vector
Network
ACAttack Complexity
High
PRPrivileges Required
None
UIUser Interaction
None
SScope
Unchanged
CConfidentiality
High
IIntegrity
High
AAvailability
High
(CVSS 3.1, NVD High)
Exploited in Australia?
unknown
Patch to
KB5002893 (Subscription Edition); KB5002894/KB5002896 (2019); KB5002905/KB5002906 (2016). Also patch CVE-2026-55040 if not already
Microsoft's 11 August 2026 security update for CVE-2026-68820 fixes a use-after-free in the Windows Ancillary Function Driver for WinSock. A locally authenticated attacker who wins a race with a crafted application can elevate to SYSTEM. Microsoft rates it Important, CVSS 3.1 7.0 (AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H), and marks Exploitation Detected. CISA added it to the Known Exploited Vulnerabilities catalog on 11 August 2026 with the same-day Cisco ASA/FTD and Metabase KEV batch. Apply the August 2026 cumulative update for your Windows build and reboot so the kernel driver replacement takes effect. Distinct from SharePoint CVE-2026-55040 already on this desk.
Product
Windows Ancillary Function Driver for WinSock (Windows client and Server)
Versions
Supported Windows 10/11 and Windows Server builds before the August 2026 cumulative update (see MSRC)
CVSS
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
AVAttack Vector
Local
ACAttack Complexity
High
PRPrivileges Required
Low
UIUser Interaction
None
SScope
Unchanged
CConfidentiality
High
IIntegrity
High
AAvailability
High
(CVSS 3.1, Microsoft)
Exploited in Australia?
unknown
Patch to
August 2026 cumulative update for your build (MSRC CVE-2026-68820); reboot required
Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability. Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) contain a heap inspection vulnerability that could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition. Apply vendor mitigations. Check the NVD record and the vendor advisory for affected versions and the patch.
Progress LoadMaster Command Injection Vulnerability. Progress LoadMaster contains a command injection vulnerability that allows an un-authenticated attacker to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in multiple command endpoints. Apply vendor mitigations. Check the NVD record and the vendor advisory for affected versions and the patch.
Apple's 6 August 2026 security content for macOS Tahoe 26.6.1 (and matching Sequoia/Sonoma notes) says an authentication issue in Screen Sharing was addressed with improved state management. Impact: an attacker on the network may be able to authenticate to Screen Sharing without valid credentials. Fixed in macOS Tahoe 26.6.1, macOS Sequoia 15.7.9 and macOS Sonoma 14.8.9. CISA added the CVE to KEV on 18 August 2026 (due 21 August for federal agencies under BOD 26-04) and CISA-ADP rates CVSS 3.1 9.8. Apply the Apple builds above; if Screen Sharing is not required, disable it and keep TCP 5900 off the public internet. Distinct from the 17 August iOS/macOS content card already on this desk.
Product
Apple macOS Screen Sharing (screensharingd)
Versions
macOS Tahoe before 26.6.1; Sequoia before 15.7.9; Sonoma before 14.8.9
Metabase GHSA-vwf4-m7j8-wcjf (published 6 August 2026; CVE-2026-72898) is an unauthenticated SQL injection on /api/session/reset_password that lets a remote attacker inject SQL into the Metabase application database and obtain administrator access, then steal connected-database credentials and export data. CVSS 3.1 10.0 (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H). Metabase confirmed active exploitation. Affected OSS lines include ≥0.58.0 before the patched builds; fixed releases are 0.58.24, 0.59.21, 0.60.17, 0.61.11, 0.62.9 and 0.63.5 (Enterprise 1.x counterparts on the same minors). Temporary workaround: block /api/session/reset_password. After upgrade on a previously exposed instance: delete core_session rows, review API keys and admin accounts, rotate connected-database credentials, and review warehouse and Metabase query history. This CVE is the Metabase flaw referenced in the Mathspace AU/NZ education breach and in third-party reporting on the ShipMonk/Trezor supply-chain incident. Primary: Metabase GitHub security advisory.
Product
Metabase (self-hosted)
Versions
≥0.58.0 lines before 0.58.24 / 0.59.21 / 0.60.17 / 0.61.11 / 0.62.9 / 0.63.5 (see GHSA; Enterprise 1.x on same minors)
CVSS
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
AVAttack Vector
Network
ACAttack Complexity
Low
PRPrivileges Required
None
UIUser Interaction
None
SScope
Changed
CConfidentiality
High
IIntegrity
High
AAvailability
High
(CVSS 3.1, GHSA)
Exploited in Australia?
yes
Patch to
0.58.24; 0.59.21; 0.60.17; 0.61.11; 0.62.9; 0.63.5 (or Enterprise 1.x equivalents); then session/API/credential review per GHSA
CyberArk (now Idira, the Palo Alto Networks identity security platform) published security bulletins CA26-37 and CA26-38. The public Technical Community notice, edited 4 August 2026, says CA26-37 is High severity and affects Privilege Cloud Central Policy Manager (CPM), all versions prior to 15.0, and CA26-38 is High severity and affects Secrets Manager, Self Hosted, version 13.9.0. Full technical detail sits behind the CyberArk/Idira Technical Community login. No CVE identifiers or CVSS vectors are in that public post. Idira is the May 2026 rebrand of CyberArk after the Palo Alto Networks acquisition; it is not a separate invented product. Confirm the exact patched builds from the logged-in bulletins before upgrading.
CISA lists CVE-2026-9198 as a Langflow code-injection issue that allows unauthenticated remote code execution on default deployments. Do not internet-expose unauthenticated AI workflow UIs. Apply vendor mitigations; this desk does not invent a patch build.
Apache Tomcat Missing Encryption of Sensitive Data Vulnerability. Apache Tomcat contains a missing encryption of sensitive data vulnerability that allows the bypass of the EncryptInterceptor. This vulnerability can be chained with CVE‑2025‑24813. Apply vendor mitigations. Check the NVD record and the vendor advisory for affected versions and the patch.
The Rails project's GitHub advisory says an unauthenticated attacker can abuse Active Storage image variant processing with libvips to read arbitrary files accessible to the Rails process, including environment secrets; exposed signing or service credentials can enable remote code execution or lateral movement. The affected configuration uses libvips for Active Storage and accepts untrusted image uploads. SecurityWeek reported on 31 August that VulnCheck had observed exploitation. Upgrade Active Storage to 7.2.3.2, 8.0.5.1 or 8.1.3.1, use libvips 8.13 or later, and rotate secret_key_base plus every other secret readable by the application process. Rails branches without a fixed release should move to a supported branch or remove libvips until they can patch.
Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability. Arista VeloCloud Orchestrator On-Prem contains an OS command injection vulnerability that may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator and data managed by the orchestrator. Apply vendor mitigations. Check the NVD record and the vendor advisory for affected versions and the patch.
Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability. Fortinet FortiOS contains an exposure of sensitive information to an unauthorized actor vulnerability. This may allow a remote unauthenticated attacker to bypass the patch developed for the symbolic link persistency mechanism observed in some post-exploit cases, via crafted HTTP requests. An attacker would need first to have compromised the product via another vulnerability, at filesystem level. Apply vendor mitigations. Check the NVD record and the vendor advisory for affected versions and the patch.
Microsoft SharePoint Deserialization of Untrusted Data Vulnerability . Microsoft SharePoint contains a deserialization of untrusted data vulnerability which could allow an unauthorized attacker to execute code over a network. Apply vendor mitigations. Check the NVD record and the vendor advisory for affected versions and the patch.
Check Point SmartConsole Improper Authentication Vulnerability. Check Point SmartConsole contains an improper authentication vulnerability which could allow an unauthenticated remote attacker to obtain an application login token and use it to authenticate with full administrative privileges. Apply vendor mitigations. Check the NVD record and the vendor advisory for affected versions and the patch.
DD-WRT Stack-Based Buffer Overflow Vulnerability. DD-WRT contains a stack-based buffer overflow vulnerability that could allow an unauthenticated attacker to overflow an internal buffer used by UPnP and trigger a code execution vulnerability. Apply vendor mitigations. Check the NVD record and the vendor advisory for affected versions and the patch.
Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability. Langflow contains an inclusion of functionality from untrusted control sphere vulnerability that allows remote attackers to execute arbitrary code on affected installations. Apply vendor mitigations. Check the NVD record and the vendor advisory for affected versions and the patch.
WordPress Core Interpretation Conflict Vulnerability. WordPress Core contains an interpretation conflict vulnerability that could allow an attacker to perform SQL Injection and achieve Remote Code Execution. This vulnerability can be chained with CVE-2026-60137. Apply vendor mitigations. Check the NVD record and the vendor advisory for affected versions and the patch.
WordPress Core SQL Injection Vulnerability. WordPress Core contains a SQL injection vulnerability when a plugin or theme passes untrusted input to the parameter. This vulnerability can be chained with CVE-2026-63030 to allow an unauthenticated attacker to gain remote code execution on default WordPress installations. Apply vendor mitigations. Check the NVD record and the vendor advisory for affected versions and the patch.
Microsoft SharePoint Deserialization of Untrusted Data Vulnerability. Microsoft SharePoint contains a deserialization of untrusted data vulnerability that allows an unauthorized attacker to execute code over a network. Apply vendor mitigations. Check the NVD record and the vendor advisory for affected versions and the patch.
F5 CNA advisory K000162231 (NVD published 15 July 2026) says that when an HTTP/2 profile is configured on a virtual server, undisclosed requests can raise TMM memory until the process restarts. That is a data-plane denial of service; F5 says there is no control-plane exposure. F5 scores it 8.7 (CVSS 4.0) and 7.5 (CVSS 3.1). Affected classic BIG-IP: 21.1.0 before 21.1.0.1, 21.0.0 before 21.0.0.3, 17.5.0 before 17.5.1.8, 17.1.0 before 17.1.3.4. Also BIG-IP Next for Kubernetes 2.3 before 2.3.2 and 2.0 before 2.2.3, Next CNF 2.3 before 2.3.2 / 2.0 before 2.2.3 / 1.1 before 1.4.3, and Next SPK 1.7 before 1.7.18 (NVD also lists Next SPK 1.9.0 as affected with no upper bound). Not in CISA KEV at last check. The NVD record does not state in-the-wild exploitation.
Product
F5 BIG-IP (all modules); BIG-IP Next for Kubernetes / SPK / CNF (TMM)
Versions
BIG-IP 21.1.0 before 21.1.0.1; 21.0.0 before 21.0.0.3; 17.5.0 before 17.5.1.8; 17.1.0 before 17.1.3.4; Next Kubernetes/CNF 2.3 before 2.3.2 and 2.0 before 2.2.3; Next CNF 1.1 before 1.4.3; Next SPK 1.7 before 1.7.18 (1.9.0 listed affected)
Horizon3 published on 1 September 2026 that Defused Cyber honeypots saw valid in-the-wild exploitation of CVE-2026-9586 on 30 August 2026 (attacker IP 176.65.148.184 in the published honeypot traffic). The flaw is an unauthenticated SQL injection in Sangoma Switchvox SMB Edition: the /pa PhoneAppsHandler.pm endpoint concatenates the PhoneIP field from an XML body into a PostgreSQL query, which Horizon3 says can be turned into remote code execution as the database superuser. Sangoma released Switchvox 8.4.0.2 on 14 July 2026. Horizon3 reported the issues in April; Security Risk Advisors independently reported them in May and published on 17 July. GitHub CVE advisory (17 July) rates it Critical 9.3. The CNA record cites Switchvox SMB Edition 8.3 (build 104997); Horizon3 notes Sangoma 8.4.0.2 release notes also mention 8.2.2.1 — upgrade to 8.4.0.2 rather than assuming an older build is safe. Horizon3 cites about 4,000 internet-exposed Switchvox devices on Shodan, mostly in the United States. CISA added CVE-2026-9586 to the KEV catalog on 2 September 2026. Restrict /pa to trusted phone networks until patched. IoC path if SSH is available: /var/log/switchvox/db-quirks.log.
Product
Sangoma Switchvox SMB Edition
Versions
Before 8.4.0.2 (CNA: 8.3/104997; vendor notes also mention 8.2.2.1)
CVSS
9.3 (Critical; GitHub advisory / CVSS 4.0 as reported by Horizon3)
Exploited in Australia?
unknown
Patch to
Switchvox 8.4.0.2 or later; restrict /pa to trusted phone networks
Juniper's 8 July 2026 security bulletin (JSA110083): an improper validation issue in the TCP proxy plugin of Junos OS on SRX Series and MX Series with SPC3 lets an unauthenticated, network-based attacker cause a complete denial of service. When TCP proxy is in use (ALGs, Advanced Anti-Malware, ICAP or UTM), a TCP packet with a specifically malformed header crashes flowd, causing a full service outage until the process restarts. CVSS 3.1 is 7.5; CVSS 4.0 is 8.7. Affected: 23.4 before 23.4R2-S7, 24.2 before 24.2R2-S4, 24.4 before 24.4R2-S3, 25.2 before 25.2R2. Not before 23.4R1. Juniper SIRT says it is not aware of malicious exploitation; the issue was seen during production usage. No workaround. This was part of Juniper's 8 July 2026 bulletin round (Canadian Centre for Cyber Security AV26-675).
Product
Juniper Junos OS on SRX Series and MX Series with SPC3
Versions
23.4, 24.2, 24.4, 25.2 before the listed fixed releases
CVSS
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
AVAttack Vector
Network
ACAttack Complexity
Low
PRPrivileges Required
None
UIUser Interaction
None
SScope
Unchanged
CConfidentiality
None
IIntegrity
None
AAvailability
High
(CVSS 3.1, Juniper SIRT); 8.7 (CVSS 4.0)
Exploited in Australia?
unknown
Patch to
23.4R2-S7, 24.2R2-S4, 24.4R2-S3, 25.2R2, 25.4R1 or later
ASD's ACSC is aware of active exploitation in Australia of a critical authentication-bypass in cPanel/WHM that can lead to control-panel access and remote code execution. The vendor and the ACSC advisory body identify the issue as CVE-2026-41940 (ACSC listing text also used CVE-2026-4194). Affects versions after 11.40. Vendor patches were published from 28 April 2026; ACSC noted patches as of 30 April 2026.
Tenable's advisory says Langflow's POST /api/v2/files endpoint does not sanitise multipart filenames, allowing a logged-in attacker to use path traversal to write files outside the upload directory. The CNA rates it 8.8 (CVSS 3.1). Exploit-DB published a working exploit on 31 August for Langflow 1.8.4 and earlier that uses the default auto-login path, writes a cron file and reaches remote code execution; active-exploitation reporting also appeared on the wire. Upgrade to Langflow 1.9.0 or later. Disabling auto-login and restricting network access reduce exposure but do not fix the underlying arbitrary file write.
Trend Micro ZDI advisory ZDI-26-034 (public 9 January 2026; CVE-2026-0768) rates an unauthenticated code-injection flaw in Langflow at CVSS 9.8: the validate endpoint executes a user-supplied code string as Python, which ZDI says can run as root. NVD published the CVE on 23 January 2026 and records affected Langflow 1.4.2. On 1 September 2026 VulnCheck told BleepingComputer and SecurityWeek it had seen exploitation against U.K. honeypots over the prior weekend (about 50 attempts at first report, later more than 360), mainly from Russia, with attackers querying LANGFLOW_SUPERUSER, OPENAI_API*, AWS_ACCESS* and AWS_SECRET* environment variables and reading Langflow secret material. Distinct from desk card cve-2026-9198 (separate Langflow code-injection CVE on CISA KEV). ZDI's published mitigation is to restrict interaction with the product; this desk does not invent a single fixed build number for CVE-2026-0768. Do not internet-expose unauthenticated Langflow.
Product
Langflow
Versions
NVD/ZDI record Langflow 1.4.2 affected; confirm your installed build against current vendor releases
CVSS
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AVAttack Vector
Network
ACAttack Complexity
Low
PRPrivileges Required
None
UIUser Interaction
None
SScope
Unchanged
CConfidentiality
High
IIntegrity
High
AAvailability
High
(CVSS 3.0, ZDI)
Exploited in Australia?
unknown
Patch to
Restrict exposure of Langflow (ZDI); apply current vendor releases after verifying they address CVE-2026-0768
