Cisco PSIRT advisory cisco-sa-ISE-ABP-VNSW7Tn5 (first published 16 September 2026 16:00 GMT) covers CVE-2026-76460, a maximum-severity authentication bypass in an API of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC), regardless of configuration. Insufficient authentication control on an API endpoint lets an unauthenticated remote attacker send a crafted request and bypass the web-based management interface to gain unauthorised device access; Cisco notes successful exploitation may yield root command execution and that on-box evidence can be removed afterward. Cisco CVSS 3.1 base 10.0 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H); CWE-648; Bug CSCww39530. No workarounds; temporary mitigation: infrastructure ACLs restricting management/control-plane traffic to the device. Fixed software: ISE/ISE-PIC 3.5 Patch 4, 3.4 Patch 7, 3.3 Patch 12, 3.2 Patch 11, 3.1 Patch 12. Cisco PSIRT is aware of active exploitation; CISA added CVE-2026-76460 to KEV on 16 September 2026 (same alert also added Acronis CVE-2026-87886). Same-day Cisco ISE/ISE-PIC criticals including CVE-2026-76423 are noted as related context, not separate cards — only 76460 has claimed in-the-wild use in the PSIRT advisory. Hunt ise-kong/access.log for suspicious usernames and correlate off-box network/firewall logs. (sources: Cisco PSIRT; BleepingComputer)
Forever Security (16 September 2026) documents BragJack: a research technique where a malicious Chromium extension with common page-modify and declarativeNetRequest permissions injects into the trusted origin the browser AI "body" listens to, then commands the built-in assistant. Affected demos: Gemini Live in Chrome (CVE-2026-0628, CVSS 8.8 per CISA score cited by researchers; fixed in Chrome 143.0.7499.192, Jan 2026), Microsoft Edge (CVE-2026-55945, CVSS 4.2; fixed in Edge 150.0.4078.48, 2 Jul 2026), Perplexity Comet, Opera Neon, and Claude in Chrome (latter three without CVE; vendor bounty acknowledgements claimed). Impacts vary by product (agent hijack, local file read, camera/mic on Chrome). Researcher demos only — not reported in the wild; requires the attacker's extension already installed. (source: Forever Security) Correction (02 Nov 2026): removed The Hacker News as a source. (source: Forever Security)
Forever Security — BragJack research (16 Sep 2026)
WSO2 security advisory WSO2-2026-5328 / CVE-2026-5430 (published 3 May 2026; Critical): JWT authentication can be bypassed when a token is signed with an unsupported algorithm, allowing unauthorized access and potential administrative account takeover. Vendor CVSS 10.0 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H); single-tenant deployments adjusted to 9.8 (S:U). Affected: WSO2 API Manager 4.1.0–4.6.0; API Control Plane 4.5.0/4.6.0; Traffic Manager 4.5.0/4.6.0; Universal Gateway 4.5.0/4.6.0. Support subscription holders: apply stated update levels (e.g. API Manager 4.6.0 UL 21, 4.5.0 UL 57, 4.4.0 UL 72, 4.3.0 UL 108, 4.2.0 UL 197, 4.1.0 UL 257; Control Plane/Traffic Manager/Universal Gateway levels on the advisory). Community: GitHub fixes carbon-apimgt PR 13752 and product-apim PR 14167, or migrate to an unaffected release. Credits: Hacktron Team. (source: WSO2 WSO2-2026-5328) UPDATE 24–25 Sep 2026: CISA added CVE-2026-5430 to KEV on 24 Sep 2026 (FCEB due 27 Sep) alongside Adobe CVE-2026-71362. CISA’s KEV shortDescription labels the issue a path-traversal / unrestricted file-upload RCE; the authoritative WSO2-2026-5328 advisory text remains JWT authentication bypass via unsupported signing algorithm — Cyberstack keeps the vendor description. (source: CISA KEV) Correction (02 Nov 2026): removed The Hacker News as a source; removed details no other source gives. (source: WSO2; CISA KEV)
Docker security announcements (Sandboxes 0.42.0; NVD received CVE-2026-77179 on 15 September 2026) document two sandbox-escape flaws. CVE-2026-77179 (Critical, Docker CVSS 4.0 base 9.4): on macOS the virtio-fs host server followed symlinks when reopening an unlinked file from a stored path, so malicious guest code (e.g. a compromised AI coding agent inside sbx) could escape the shared project workspace and read/modify arbitrary host files as the VMM user — potentially host code execution. Affects Sandboxes 0.28.0 up to but not including 0.42.0 on macOS. Companion CVE-2026-79994 (High, CVSS 4.0 8.7): guest-to-host Unix-domain socket relay TOCTOU symlink race; affects 0.37.0 up to but not including 0.42.0. Both fixed in 0.42.0 (release notes / sbx-releases tag). CISA's CVE-record enrichment lists exploitation as 'none', and neither CVE is in CISA's KEV catalog as of 27 October 2026. Workaround if unable to upgrade: use clone mode and avoid additional host mounts. Category vulnerabilities with AI-agent sandbox tag. (sources: Docker security announcements; NVD; GitHub sbx-releases v0.42.0) Correction (27 Oct 2026): the affected range for CVE-2026-79994 is now given as Docker states it, 0.37.0 up to but not including 0.42.0, rather than 'through 0.41.9'; a line on exploitation status was removed because Docker's announcement does not contain it. (source: Docker security announcements; CVE.org)
JFrog (15 September 2026) documents ParaShells: an unprivileged local user on macOS can get root via Parallels Desktop's prl_disp_service (world-writable Unix socket, weak local-client auth, appliance-extract argument injection into tar --use-compress-program). Lab-proven on Desktop 26.4.0 build 57513 (Apple silicon); treat installs that still expose the same InstallAppliance extract template and dispatcher socket as in scope. CVE-2026-90894. Fixed in Parallels Desktop 27.0.0 (JFrog: fix shipped 1 Sep; CVE/blog 14–15 Sep). No in-the-wild exploitation reported by JFrog. (source: JFrog research blog) Correction (02 Nov 2026): removed The Hacker News as a source; removed details no other source gives. (source: JFrog)
Mozilla's advisory MFSA 2026-90 (announced 15 September 2026) lists 73 vulnerabilities fixed in Firefox 156, with an overall impact of high; Mozilla rates 27 of them high, 26 moderate and 20 low. Mozilla notes that it no longer rolls all internally identified memory-safety vulnerabilities into a single CVE and now issues an advisory entry for every individual bug. Entries include a use-after-free in Audio/Video: Web Codecs (CVE-2026-92005), privilege escalations due to incorrect boundary conditions in Graphics: CanvasWebGL (CVE-2026-92006 to CVE-2026-92013), a sandbox escape due to incorrect boundary conditions in the Graphics component (CVE-2026-92035) and a sandbox escape in DOM: Core & HTML (CVE-2026-92018). Mozilla does not say any of them is being exploited in the wild. (source: Mozilla MFSA 2026-90)
Mozilla MFSA 2026-90 — Security Vulnerabilities fixed in Firefox 156 (15 Sep 2026)
Google’s September 2026 Pixel update (patch level 2026-09-05) addresses CVE-2026-58704 in the Cellular Modem: improper authorization / logic error enabling remote (proximal/adjacent) privilege escalation with low privileges, no user interaction. NVD (published 15 September 2026; Google as source) scores CVSS 3.1 8.0 (AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). BleepingComputer (16 September 2026) cites Google’s Pixel bulletin warning of indications the flaw “may be under limited, targeted exploitation.” Same bulletin set covers 110 Pixel issues including additional critical/high RCE and privilege-escalation fixes. Apply Pixel Security update to 2026-09-05+. (sources: NVD CVE-2026-58704; BleepingComputer) UPDATE (26 Oct 2026): CISA added CVE-2026-58704 to its Known Exploited Vulnerabilities catalog on 16 September 2026, with a 19 September due date for US federal agencies. The CVE record now also carries a CISA score of 8.8 (CVSS 3.1, no privileges required). (source: CISA KEV catalog; CVE record)
Google's Stable Channel Update for Desktop (15 September 2026) promotes Chrome to 153.0.8010.47/.48 on Windows and Mac and 153.0.8010.47 on Linux, with 42 security fixes. Google rates three Critical: an out-of-bounds read in WebGL (CVE-2026-91726) and use-after-free flaws in Internals (CVE-2026-91721) and Workers (CVE-2026-91749). It rates 28 High, including use-after-free, race-condition and type-confusion flaws in components such as V8, Skia, ServiceWorker, Extensions and Core, plus ten Medium and one Low. Google's post does not say any of the flaws is being exploited in the wild. (source: Chrome Releases) Correction (29 Oct 2026): this card previously covered both Chrome 153 and Firefox 156; Firefox 156 now has its own card, and a combined defect count from a news report that is no longer linked here was removed. (source: Chrome Releases)
Acronis security advisory SEC-10986 / update UPD-2609-3d72-20a7 (reported by BleepingComputer 15 September 2026) covers CVE-2026-87886, a high-severity Linux local privilege escalation in Acronis Backup plugin for cPanel & WHM and the Acronis Backup extension for Plesk. Acronis assigns severity 7.8. A low-privileged attacker can raise privileges on a vulnerable Linux host without user interaction; further exploit detail withheld while patches propagate. Acronis says exploitation has been detected in the wild in limited, targeted attacks against cPanel & WHM plugin deployments (assessment based on a single report from a potentially affected customer; no public IoCs released). Affected: cPanel & WHM plugin builds earlier than 1.9.3.1021 (fixed 1.9.3 HF3); Plesk extension builds earlier than 1.8.11.638 (fixed 1.8.11). Apply those updates immediately. (sources: Acronis SEC-10986; BleepingComputer) UPDATE 16 September 2026: CISA added CVE-2026-87886 to KEV (same alert as Cisco ISE CVE-2026-76460).
BleepingComputer (15 September 2026) relays Wordfence/Defiant telemetry that attackers are actively exploiting CVE-2026-27540 in the premium WooCommerce Wholesale Lead Capture WordPress plugin. Unauthenticated AJAX action wwlc_file_upload_handler accepts a user-controlled file_settings allowlist, letting attackers permit .php uploads and drop webshells (researcher: Teemu Saarentaus). Affected: versions 2.0.3.1 and older; fixed in 2.0.3.2 (released 20 February). Wordfence reports 100,000+ blocked attacks with spikes around 4–17 June, 1 July, and 30 August 2026; Wordfence also published a list of high-offender attacker IP addresses. Hunt admin-ajax.php calls to wwlc_file_upload_handler, unexpected PHP under uploads (e.g. shell.php), and unknown admin accounts; upgrade to 2.0.3.2+. (source: BleepingComputer) Correction (26 Oct 2026): the CVE record for CVE-2026-27540, published by Patchstack as the assigning authority, scores it 9.0 under CVSS 3.1 (attack complexity high); an earlier version showed 9.8, which no linked source gives. (source: CVE record CVE-2026-27540) Correction (02 Nov 2026): removed The Hacker News as a source; removed details no other source gives. (source: BleepingComputer; CVE record CVE-2026-27540)
BleepingComputer — WooCommerce Wholesale Lead Capture CVE-2026-27540 (15 Sep 2026)
WA Cyber Security Unit advisory 20260915001 (15 September 2026, TLP:CLEAR) highlights CVE-2026-69829, a Critical remote code execution flaw in Microsoft Windows Shell with CVSS 9.8. WASOC states successful exploitation could allow an unauthenticated attacker to execute arbitrary code and potentially fully compromise affected systems. Affected products/versions are as listed by Microsoft on the MSRC update-guide entry for CVE-2026-69829 (JS-rendered; versions not mirrored here beyond vendor listing). WASOC reports no exploitation observed on Western Australian Government networks at time of writing and recommends applying Microsoft’s fixes per normal patch timeframes. (sources: Microsoft MSRC CVE-2026-69829; WASOC 20260915001)
Microsoft MSRC — CVE-2026-69829 (Windows Shell RCE)
WA Cyber Security Unit advisory 20260915003 (15 September 2026, TLP:CLEAR) relays Canonical LXD updates for eight Critical issues (CVE-2026-66897, CVE-2026-66898, CVE-2026-63300, CVE-2026-63299, CVE-2026-63297, CVE-2026-63296, CVE-2026-63294, CVE-2026-62420), each listed at CVSS 9.9. Successful exploitation can let a remote attacker achieve root command execution on the LXD host. Affected lines per WASOC: LXD 6.x prior to 6.10; 5.21.x prior to 5.21.7; 5.0.x prior to 5.0.9; all versions prior to 4.0.13. Canonical GitHub advisory GHSA-q39m-8fx9-42fv (CVE-2026-66897 example) documents instance template path traversal to arbitrary host file write as root, with patched versions including 4.0.13, 5.0.9, 5.21.7, 6.9-ab8fad2, and 6.10; related LXD GHSAs cover further path-traversal / privilege issues in the same wave. WASOC reports no exploitation observed on Western Australian Government networks at time of writing. Patch to vendor-fixed LXD builds; review Canonical LXD security advisories for the full set. (sources: Canonical LXD GitHub Security Advisories; WASOC 20260915003)
