Wiz Research (Amitai Cohen & Yaara Shriki, 9 September 2026) scanned ~3,074 internet-facing LiteLLM AI gateways: 294 (9.6%) accepted the docs/Docker default master key sk-1234 or required no authentication (191 of those had no key at all). Default/missing master key grants admin and exposes every configured LLM provider API key (LLMjacking), and can chain to post-auth custom-code-guardrail RCE CVE-2026-59821 (fixed v1.82.0) for root-in-container when still on vulnerable builds. Same research covers MCP auth bypass CVE-2026-59822 (already on Cyberstack; CISA KEV; Wiz honeypot exploitation). LiteLLM still ships sk-1234 as the example/default in common install paths. Mitigate: set a unique strong master key immediately; upgrade past 1.82.0/1.84.0; review custom guardrails and pass-through endpoints. (source: Wiz) Correction (02 Nov 2026): removed The Hacker News as a source. (source: Wiz)
BleepingComputer (9 September 2026) reports anonymous researcher Nightmare Eclipse released a ShieldCrash proof-of-concept against Microsoft Defender immediately after September 2026 Patch Tuesday. The researcher claims ShieldCrash bypasses the ShieldBreak elevation issue patched as CVE-2026-69414 and demonstrates arbitrary file read as SYSTEM on fully patched Windows 10, Windows 11, and Windows Server, without write access to the compromised system. ShieldBreak itself followed RoguePlanet (disclosed June, patched July). Microsoft had not commented to BleepingComputer at publish. Treat as a local privilege-escalation research drop / incomplete patch claim — not a remote wormable CVE. No Australian exploitation signal on this pass. (source: BleepingComputer) Correction (02 Nov 2026): removed The Hacker News as a source. (source: BleepingComputer; Microsoft)
Cisco PSIRT advisory cisco-sa-onprem-fmc-authbypass-5JPp45V2 covers CVE-2026-20079, a maximum-severity (CVSS 10.0) authentication-bypass in Cisco Secure Firewall Management Center (FMC) and related management paths. Improper process creation at boot lets an unauthenticated remote attacker send crafted HTTP requests to the web interface and execute scripts/commands as root. Cisco updated the advisory on 9 September 2026 to state PSIRT became aware of active exploitation in August 2026 (no public attribution or start date). Cloud-hosted Security Cloud Control is already patched per Cisco; on-prem FMC has no workaround — upgrade to a fixed release. BleepingComputer (9 Sep) notes CISA added CVE-2026-20079 to the KEV catalog with FCEB remediation due 12 September 2026. Hunt guidance from related July FMC coverage includes /var/log/messages activity around /var/tmp/license.tmp. (source: Cisco PSIRT) NEW 10 September 2026 (Cisco Talos “Active exploitation of Cisco Secure Firewall Management Center vulnerabilities”; BleepingComputer same day): Talos tracks three post-compromise clusters on FMC — UAT-11988 (high confidence Qilin ransomware affiliates), UAT-11823 (high confidence APT tooling overlap with Sandworm / Cyclops Blink deployment), and UAT-12197 (state-sponsored/crimeware mix). Actors abused CVE-2026-20079 and companion CVE-2026-20316 (static low-privileged credentials; CVSS 5.3 per report, Cisco High because it chains with other FMC bugs) to plant web shells, steal AD/MySQL credentials, stand up SOCKS5/SSH tunnels, and in one cluster deploy Qilin ransomware. At the time, Talos advised installing Cisco's hot fixes for both CVEs and said a comprehensive hardening package was forthcoming. Distinct companion CVE covered here rather than a sibling card. UPDATE (26 Oct 2026): Cisco's advisory (version 2.6, 16 September 2026) replaced the hot fixes with security hardening releases that fix this flaw and other internally found ones: first fixed releases are 7.0.10 (for 7.0 and earlier), 7.2.12, 7.4.8, 7.6.6, 7.7.13, 10.0.2 and 10.1.0. Cisco recommends upgrading to the hardening release for your train. (source: Cisco Security Advisory cisco-sa-onprem-fmc-authbypass-5JPp45V2)
Palo Alto Networks security advisory CVE-2026-0310 (published 9 September 2026): buffer overflow in PAN-OS XML processing lets an unauthenticated network attacker with access to the management web or dataplane interface cause DoS on VM-Series firewalls or execute arbitrary code as root on PA-Series. Vendor severity 7.2 HIGH; urgency HIGHEST; exploit maturity UNREPORTED. Panorama is impacted. Risk is reduced when management is restricted to trusted internal IPs per Palo Alto best practice. Fixed builds include PAN-OS 12.2.3; 12.1.4-h10 / 12.1.7-h5 / 12.1.10; 11.2.4-h21 / 11.2.7-h20 / 11.2.10-h14 / 11.2.13-h2; 11.1.4-h36 / 11.1.6-h38 / 11.1.7-h10 / 11.1.10-h33 / 11.1.13-h12 / 11.1.16-h2; 10.2.7-h37 / 10.2.10-h40 / 10.2.13-h24 / 10.2.16-h10 / 10.2.18-h10 (confirm against the live advisory for your branch). Prisma Access / Cloud NGFW called medium severity on the same advisory and are scheduled for maintenance upgrades. (source: Palo Alto Networks advisory)
OX Research (8 September 2026): CVE-2026-82533 (CWE-807) in DeepSeek Harness (dsh) before 0.1.2-alpha.1. The local agent-control HTTP API trusted only the client-supplied Host header, not the TCP peer. The OS sandbox confined file writes but left loopback networking open, so a sandboxed agent could curl the API, set danger-full-access / approval never, and run unconfined — on shipped defaults, with no credentials. If the port was reachable via tunnel/proxy/SSH forward, an unauthenticated remote attacker could control the agent and export stored conversations. CVSS 4.0 9.4 (AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H) and CVSS 3.1 9.6, per the CVE record. Reported 24 Aug; fixed in 0.1.2-alpha.1 (27 Aug); CVE published 8 Sep. npm package @deepseek-ai/dsh — install 0.1.2-alpha.2+ / current rc. (sources: OX Research; the CVE record) Correction (02 Nov 2026): removed The Hacker News as a source; removed details no other source gives. (source: OX Research; CVE.org)
OX Research — CVE-2026-82533 DeepSeek Harness (8 Sep 2026)
Fortinet published two critical advisories on 8 September 2026. FG-IR-26-170 (CVE-2026-84390): the JWTs that authenticate the FortiMonitorOnSight web GUI are signed with a static key, an inclusion of sensitive information in source code flaw (CWE-540) that may let a remote unauthenticated attacker bypass authentication with a forged or reused JWT. FortiMonitorOnSight 7.2.0 to 7.2.2 and 7.2.4 to 7.2.7 are affected; the fix is 7.2.8 or above. Fortinet found it internally. FG-IR-26-168 (CVE-2026-84388): an improper authentication flaw (CWE-287) in the Fortinet Privileged Access Agent Chrome extension may let a remote unauthenticated attacker proxy a user's browser traffic through attacker-controlled servers if the user visits a malicious website. Fortinet says the fix needed coordinated changes in FortiPAM and the extension: to be fully secure, upgrade FortiPAM to 1.9.1 or 1.8.4 and make sure the Chrome extension is 8.0.1.123 or above; extension 7.4 users must migrate to a fixed release. Fortinet lists neither flaw as known exploited. Fortinet's advisories give CVSS 3 base scores of 9.8 and 9.6; its CVE records list 9.6 and 9.1. The same day Fortinet also published FG-IR-26-166 (CVE-2026-26084, rated High), an improper access control flaw in the FortiSandbox web UI that may let an unauthenticated attacker access sensitive information, fixed in FortiSandbox 5.0.6 and 4.4.9 and in FortiSandbox Cloud and PaaS 5.0.6. (sources: Fortinet PSIRT advisories FG-IR-26-170, FG-IR-26-168 and FG-IR-26-166) Correction (29 Oct 2026): the card relied on a SecurityWeek report, which is no longer linked; details that only it gave were removed. The card now follows Fortinet's own advisories, published on 8 September (the card was dated 9 September), and gives Fortinet's advisory scores of 9.8 for CVE-2026-84390 and 9.6 for CVE-2026-84388 instead of the CVE-record figures of 9.6 and 9.1. (source: Fortinet PSIRT)
Fortinet PSIRT — FG-IR-26-170: FortiMonitorOnSight JWT signed with static key (CVE-2026-84390) (8 Sep 2026)
Siemens ProductCERT advisory SSA-142885 (published 8 September 2026) says Reyrolle 7SR5 before V2.70 is affected by multiple vulnerabilities, with a CVSS v3.1 base score of 9.8 (CVSS v4.0 9.3), and recommends updating to V2.70 or later. (source: Siemens ProductCERT SSA-142885) Siemens advisory SSA-503852, also published 8 September 2026, says Industrial Edge Management contains an authentication bypass (CVE-2026-18963, CVSS v3.1 9.1) that could allow an unauthenticated remote attacker to perform full account takeover by resetting user credentials without completing email verification. Siemens says Industrial Edge Management Cloud was mitigated with firewall rules on 26 August 2026 and fixed with an update on 2 September 2026, with no user action necessary, and that Pro V1, Pro V2 and Virtual should be updated to V1.15.20, V2.2.2 and V2.9.1 or later. (source: Siemens ProductCERT SSA-503852) AhnLab ASEC's summary of Siemens' September 2026 regular security update (8 Sep 2026) also lists an OIS Web Module file-upload flaw (CVE-2026-50093, CVSS 9.0), a relative path traversal in SIMOVE Fleetmanager and SIPLANT (CVE-2026-67367, CVSS 8.6) and a resource transfer flaw (CVE-2026-31431, CVSS 7.8) in multiple Siemens industrial products. (source: AhnLab ASEC)
Siemens ProductCERT SSA-142885 — Multiple Vulnerabilities in Reyrolle 7SR5 Before V2.70 (8 Sep 2026)
Schneider Electric's security notification SEVD-2026-251-04 (8 September 2026) describes CVE-2026-3869, an incorrect implementation of an authentication algorithm (CWE-303) in Modicon M580 and Modicon M580 Safety controllers. Schneider says failure to apply the remediations may risk establishing an unauthenticated connection to the controllers, which could result in loss of confidentiality, integrity and availability of the PLC, when an application project with a lower application level is running on it. Schneider rates it Critical: CVSS v4.0 9.2 and CVSS v3.1 9.8. Affected: Modicon M580 with an application level below 4.00 and Modicon M580 Safety with an application level below 4.20. Remediation: for M580, firmware 4.10 or above and an application project at application level 4.00 or above (available in EcoStruxure Control Expert V15.2 or later); for M580 Safety, firmware 4.21 or above and application level 4.20 or above (EcoStruxure Control Expert V16.0 with HF001 or later). (source: Schneider Electric SEVD-2026-251-04) Schneider's security notifications index lists other advisories published the same day, for EcoStruxure IT Data Center Expert (CVE-2026-19233, CVE-2026-8044), PowerLogic T300 RTU (CVE-2026-77120) and SCADAPack x70 products (CVE-2026-81861), and shows older Modicon advisories last updated that day. (source: Schneider Electric security notifications) Correction (29 Oct 2026): this card previously combined Schneider Electric, Siemens, AVEVA and Rockwell September ICS advisories from a news report; Siemens now has its own card, the AVEVA and Rockwell mentions were removed because no readable source for them is linked, and this card is now sourced from Schneider's own notifications. The card date is now 8 September 2026, the date on Schneider's notification (it was 9 September). (source: Schneider Electric SEVD-2026-251-04)
Schneider Electric SEVD-2026-251-04 — Modicon M580 and M580 Safety (8 Sep 2026)
Ivanti's September 2026 security update (blog, 8 Sep 2026) discloses flaws in Neurons for ITSM, Sentry and Endpoint Manager Mobile (EPMM). According to Ivanti's CVE records (published 8 Sep 2026 UTC), Neurons for ITSM before 2026.2 is affected by missing-authorization flaws CVE-2026-12645, CVE-2026-12646 and CVE-2026-12647 and deserialization flaw CVE-2026-12650, each letting a remote authenticated attacker execute arbitrary code on the server (CVSS 9.9), and by deserialization flaws CVE-2026-12744 and CVE-2026-12745, which let a remote unauthenticated attacker execute arbitrary code (CVSS 9.8). Sentry before R10.8.2, R10.7.3 and R10.6.4 has authentication bypass CVE-2026-83527, letting a remote unauthenticated attacker gain administrative access (CVSS 8.1), and EPMM before 12.10.0.0, 12.9.0.2 and 12.8.0.4 has missing-authorization flaw CVE-2026-18851, letting a remote authenticated attacker escalate to admin (CVSS 8.8). Ivanti's blog says it has no evidence of exploitation in the wild and that no other Ivanti products are affected. (sources: Ivanti September 2026 Security Update blog; CVE records) Correction (30 Oct 2026): removed a bug count and fixed-build details that only SecurityWeek, which this desk cannot read, gave; CVE details are now credited to Ivanti's own CVE records. (source: CVE records)
Ivanti September 2026 Security Update blog (8 Sep 2026)
Google's Stable Channel Update for Desktop (8 September 2026) promotes Chrome 153 to 153.0.8010.36 (Linux) and 153.0.8010.36/.37 (Windows/Mac). Google lists Medium CVE-2026-87491 as an out-of-bounds write in V8 (reported 6 August 2026 by Jihyeon Jeong, Compsec Lab, Seoul National University) and states an exploit exists in the wild — the seventh Chrome zero-day Google has fixed in 2026 per same-day press coverage. BleepingComputer (9 September) describes remote code execution inside the sandbox via crafted HTML and heap corruption risk; Google has not published attack details while uptake is incomplete. Update Chrome promptly; other Chromium browsers should follow vendor builds. NEW 11 September 2026 (WA SOC advisory 20260911001, TLP:CLEAR): Chromium V8 Known Exploited Vulnerability covers the same CVE-2026-87491 for Google Chrome versions prior to 153.0.8010.36; WASOC table lists CVSS 8.8 High (out-of-bounds write enabling code execution inside the sandbox via crafted HTML). Notes Google is aware of in-the-wild exploit use and CISA KEV listing; WASOC had not received reports of exploitation on Western Australian Government networks at time of writing. Patch Chrome/Chromium browsers to 153.0.8010.36+ per vendor.
Chrome Stable Channel Update for Desktop (8 Sep 2026)
cPanel's 8 September 2026 advisory is titled SQL injection in EmailTrack. The body says an authenticated account with mail-related privileges can create arbitrary files through EmailTrack, and that success is code execution as root. All supported versions. Patched builds: 11.110.0.143, 11.134.0.55, 11.136.0.39, 11.138.0.4, and WP Squared 11.138.1.9. Credit to Ali Mustafa (rz1027) and abed1526. No CVSS and no exploitation claim on the vendor page. Separate from the August domain-parking flaw and from the April login bypass. Correction (02 Nov 2026): removed The Hacker News as a source; removed details no other source gives. (source: cPanel)
Calif (8 September 2026) built a demo worm, WeWorm, that takes over a WeChat account through an incoming call and spread it across three test phones on Android and iOS; simply by calling a victim, it can hijack the account and call the victim's friends. The victim does not need to answer the call or touch the phone. Calif reported the bug to Tencent in July; Tencent published Android 8.0.77 and iOS 8.0.76, which mitigated it, on 21 August, and Calif confirmed on 28 August that its exploit was mitigated on the server side for all users. Update WeChat from official stores and confirm the installed build is current. (source: Calif) Correction (02 Nov 2026): removed The Hacker News as a source; removed details no other source gives. (source: Calif)
