Google's Stable Channel Update for Desktop (1 September 2026) promotes Chrome to 152.0.7977.75/.76 on Windows and Mac and 152.0.7977.75 on Linux, with 26 security fixes. Google rates two Critical, both use-after-free flaws reported by Google: CVE-2026-84353 in Shared Tab Groups and CVE-2026-84352 in WebGL. It rates nine High, including incorrect authorization in FileSystem (CVE-2026-84354), an information leak in Skia (CVE-2026-84359), improper input validation in Omnibox (CVE-2026-84357), use-after-free flaws in Proxy, Browser and Dawn, a buffer overflow in GPU and an uninitialized resource in V8, plus ten Medium and five Low. Google's post does not say any of the flaws is being exploited in the wild and gives no CVSS scores. (source: Chrome Releases) Correction (29 Oct 2026): this card previously covered both Chrome 152 and Firefox 155; Firefox 155 now has its own card, sourced from Mozilla's advisory, and the news report the Firefox figures came from is no longer linked here. The card date is now 1 September 2026, the date shown on Google's post (it was 2 September). (source: Chrome Releases)
VulDB's CVE record for CVE-2026-84115, published on 1 September 2026 (11:00 pm Perth), says a vulnerability was found in Cleo Harmony up to 5.8.1.10, in an unknown function of the file /api/connections of the JWT Refresh Token Handler component: manipulating the Bearer argument results in improper privilege management, the attack can be carried out remotely, and the exploit has been made public and could be used. The record lists Harmony 5.8.1.0 to 5.8.1.10 as affected and says upgrading to version 5.8.1.11 is sufficient to fix the issue. VulDB scores it CVSS 3.1 8.3 (High) and CVSS 4.0 6.9 (Medium). (source: CVE-2026-84115 record, CNA VulDB) Correction (1 Nov 2026): removed the SecurityWeek link and credit, which this desk cannot read, and the details that came only from SecurityWeek, Cyber Security News or Cleo's Harmony 5.8.1 release notes, which did not load for the desk this pass (watchTowr's comments, the release-note build description and the remark about vendor detail); the CVSS scores now come from VulDB's CVE record. The card date stays 1 September 2026, the record's publication date. (source: CVE-2026-84115 record)
UPDATE 17–19 October 2026: researcher Zach Main published the Plex2Shell write-up and proof-of-concept code on 16 October, showing how four of the flaws chain into unauthenticated remote code execution on Plex Media Server before 1.43.3.10861: the /player/timeline SSRF (CVE-2026-96652) is used to call searchOne (CVE-2026-96654) and obtain the owner's admin token, the transcoder SSRF (CVE-2026-96655) fetches an attacker-hosted file, and the Codecs path flaw (CVE-2026-96656) writes it as a shared object that Plex then runs. The fixes shipped in PMS 1.43.3.10861 on 3 August, after Zach Main reported the bugs to Plex on 27 July. Researcher boredhackerblog reported in-the-wild exploitation of a honeypot from the morning of 17 October, first from 45.194.92[.]222 and also from 91.92.40[.]202 and 176.65.139[.]228, which downloaded payloads from 217.60.194[.]116: an XMRig miner (seen as 'mylovelyminer', mining to ota.proxystream[.]st) and a Linux reverse-proxy backdoor called 'myawesomeproxy' (SHA-256 e546b10aee5edc754da4f9b0baace00392257121911f630145078eafad1e6bd9). Bitsight linked another proxystream[.]st subdomain to the AISURU DDoS and proxyware botnet in August. Plex users on Reddit report servers infected with the same miner, though it is not confirmed those infections came from Plex2Shell. Zach Main has published detection guidance and boredhackerblog has published packet captures. UPDATE 23–24 September 2026: NVD and CISA CSAF VA-26-266-01 (published 23 Sep 2026) assign five CVEs to Plex Media Server before 1.43.3.10861 — the build family covered by Plex’s 1 September 2026 forum security notice (PMS 1.43.3 / Desktop 1.115.0) that previously said CVEs were requested but withheld. CVE-2026-96656 (CVSS 3.1 7.2 High, AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H): admin can write arbitrary files via TranscoderH264Options appended to x264; .so files run at startup without signature checks. CVE-2026-96651 (6.5 Medium): path traversal on /system/agents/media/get can read files including PlexOnlineToken (account/server control) with a valid session token. CVE-2026-96654 (6.5): unauth URL injection via searchOne into other plugins. CVE-2026-96652 / CVE-2026-96655 (4.3): SSRF via /player/timeline and transcoder universal path. BleepingComputer reported on 9 September 2026 that Shadowserver said over 36,000 internet-exposed Plex Media Server instances were still unpatched against the flaws in v1.43.2 and earlier. Patch: PMS ≥1.43.3.10861 / Desktop ≥1.115.0; confirm auto-updates landed. UPDATE (22 Oct 2026): CISA added CVE-2026-96652, CVE-2026-96654, CVE-2026-96655 and CVE-2026-96656 to its Known Exploited Vulnerabilities catalog on 20 October 2026 (US federal due dates 23 October for -96654 and -96656, 3 November for -96652 and -96655). (source: CISA KEV catalog) Correction (02 Nov 2026): removed The Hacker News as a source; removed details no other source gives. (source: Plex)
Manifold Security published GitSpawn research on 1 September 2026: several AI coding agents run git (status, diff and similar) to gather repo context at startup, in some products before a workspace-trust prompt or authentication. Those calls did not strip the repository's own git configuration. Git settings that name a helper program (including core.fsmonitor) then run as the developer, outside the agent sandbox, with no approval prompt. Manifold says clone, fetch or pull of a hostile URL does not carry this; the repository has to arrive as files with its .git directory already inside (zip, shared drive, USB). Named products and status at publication: Claude Code core.fsmonitor patched by 2.1.196 (confirmed on 2.1.193; reported 26 June, closed as duplicate); Claude Code ultrareview still unpatched on 2.1.252; Goose patched in 1.44.0 (CVE-2026-72718, maintainers 7.0); Hermes unpatched on 0.21.0 (CVE-2026-71963); Qwen Code unpatched on 0.22.3; Grok Build unpatched on 1.0.13; OpenAI Codex and Cursor patched (reports closed as duplicates). Manifold 1 September update says Codex and Cursor were also affected, reported, and have since been patched. Inspect .git/config before opening a received folder in an agent. This Cyberstack does not invent CVSS for the unpatched products. Correction (26 Oct 2026): a reference to the CVE numbering authority for CVE-2026-71963 has been removed. (source: Manifold Security) Correction (02 Nov 2026): removed The Hacker News as a source. (source: Manifold Security)
GeoNetwork (OSGeo geospatial metadata catalog used behind many government and agency geoportals) published advisories on 31 August 2026 for two flaws that chain to unauthenticated remote code execution. CVE-2026-63219 (CVSS 8.6 per the project's GitHub advisory) is a missing authorisation check on the formatter upload endpoint that lets an anonymous attacker write arbitrary .xsl or .zip formatter files. CVE-2026-58400 (CVSS 9.1 per the project's GitHub advisory) is an unsafe Saxon XSLT configuration in the formatter engine that can call Runtime.exec / ProcessBuilder as the GeoNetwork process user once a malicious stylesheet is loaded. Fixed in 4.4.12 and 4.2.17; all 4.4.x through 4.4.11 and 4.2.x through 4.2.16 are affected. Project mitigation until patched: block write methods to /geonetwork/srv/api/formatters at the reverse proxy. The advisories credit Ethiack researchers as reporters. (sources: GitHub GHSA-mh22-prqr-vf42; GitHub GHSA-x898-729x-cc3r) Correction (02 Nov 2026): removed The Hacker News as a source; removed details no other source gives. (source: GitHub GHSA-mh22-prqr-vf42; GitHub GHSA-x898-729x-cc3r)
JFrog's 28 August 2026 advisory rates CVE-2026-82329 Critical (CVSS 3.1 9.8): under default configuration, an unauthenticated attacker with network access may obtain administrative privileges on self-managed Artifactory. BleepingComputer reported on 2 September 2026 that researchers at watchTowr observed the flaw being exploited by "attackers minting themselves admin tokens"; BleepingComputer says an attacker forging their own admin tokens can enumerate users, groups and federated topologies, read artifacts, change security configurations and poison existing packages (source: BleepingComputer). Self-hosted patches: 7.111.21, 7.117.28, 7.125.20, 7.133.29, 7.146.38, 7.161.20; JFrog says cloud was already fortified. Access tokens are independent credentials — upgrading the binary does not by itself revoke minted tokens, so rotate/revoke tokens and hunt anomalous admin activity after patching. CISA added CVE-2026-82329 to the KEV catalog on 2 September 2026. UPDATE 10–11 September 2026 (Wiz): Wiz also saw CVE-2026-82329 abused in the wild alongside a separate 42018→42016 chain (15 Aug–8 Sep) that yields admin and drops Rust C2 / Groovy plugins. Correction (29 Oct 2026): exploitation details are now credited to BleepingComputer's linked report; removed details that only SecurityWeek gave (backdoor users, a small set of IPs, no mass scanning, a 'phantom' join key), internal cross-references and a duplicate JFrog link. (sources: JFrog; BleepingComputer) Correction (02 Nov 2026): removed The Hacker News as a source. (source: Wiz)
JFrog security advisories (CVE-2026-82329, 28 Aug 2026)
Patchstack (28 August 2026) and CVE-2026-82222 describe an unauthenticated PHP object injection chain in GiveWP through 4.16.7.1 that reaches remote code execution. On 4.16.5.1 and below a default install with one published donation form and an active gateway is enough. On 4.16.6–4.16.7.1 reachability narrows but a legacy give_forms post without formBuilderSettings (including draft/trashed) re-arms the chain. The plugin's give_action=user_register path ignores WordPress users_can_register, so an attacker can obtain an account even when registration is disabled. Patchstack rates CVSS 10.0. Vendor fixed in GiveWP 4.16.7.2 (27 August 2026), which breaks the chain at several layers and migrates serialized object payloads already in the database. Patch to 4.16.7.2 or later.
WatchGuard PSIRT published a cluster of advisories on 27 August 2026 covering Fireware OS (iked / epm) and WatchGuard Dimension. Five issues are rated 9.3 on the vendor page: iked heap overflow CVE-2026-19313, iked stack overflow CVE-2026-19318 and iked type confusion CVE-2026-19315 (unauthenticated remote code execution via crafted traffic); epm stack overflow CVE-2026-13086 in the deprecated Mobile Security feature; and Dimension CVE-2026-78174, session-ID and CSRF token exposure that can let a low-privileged administrator take over a super-admin session. SecurityWeek (Ionut Arghire, 1 September) matches those five at CVSS 9.3. Patch to Fireware OS 2026.2.2, 12.12.2 or 12.5.20 and Dimension 2.3.1. WatchGuard also shipped additional high- and medium-severity fixes in the same wave (iked denial-of-service and Dimension SQL injection, CSRF, SSRF and related issues among them); this card does not list every CVE. The vendor is not aware of exploitation of these defects.
Palo Alto Networks advisory CVE-2026-0251 (published 13 May 2026, updated 27 August 2026 after a public PoC): multiple local privilege-escalation bugs in the GlobalProtect app (CWE-426 untrusted search path) let a local user reach NT AUTHORITY\SYSTEM on Windows and root on macOS and Linux, then run commands with administrative privileges. iOS, Android, Chrome OS and the GlobalProtect UWP app are not affected. No special configuration is required. Vendor CVSS-BT is 7.1 (CVSS 4.0); the same advisory lists CVSS-B 8.5. Exploit maturity is POC. Palo Alto Networks says it is not aware of malicious exploitation.
ServiceNow's 27 August 2026 CVE record (CNA title: Sandbox Escape in ServiceNow AI Platform) says it remediated a sandbox-escape issue that could allow an unauthenticated user to execute arbitrary code within the ServiceNow AI Platform and gain more access than intended. ServiceNow scores it 10.0 (CVSS 4.0, CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H). Hosted instances received a vendor-deployed security update; partners and self-hosted customers were given the update. ServiceNow says it is not currently aware of malicious exploitation against ServiceNow instances. Self-hosted operators should apply the August 2026 CVE advisory updates (KB3152242). CNA-listed affected rows span Xanadu, Yokohama, Zurich and Australia patch families (including builds before Xanadu Patch 11 Hot Fix 7a, Yokohama Patch 12 Hot Fix 3b / Patch 13 Hot Fix 4, Zurich Patch 7b–12 hotfixes as listed, and Australia Patch 2–5 hotfixes as listed). Same-day cards cover the three CVSS 4.0 10.0 AI Platform issues (CVE-2026-18885, CVE-2026-18886, CVE-2026-74820). Correction (23 Oct 2026): this card said ServiceNow scored CVE-2026-6876 at 8.7 (CVSS 4.0) with a vector requiring low privileges and named the product Now Platform. ServiceNow's CVE record (last updated 1 September 2026) scores it 10.0 (CVSS 4.0) with no privileges required (PR:N) and names the product ServiceNow AI Platform. Updated 24 Oct 2026: the facts box now also shows the CVE record's product name and CVSS 4.0 vector. (source: CVE-2026-6876 record (cve.org))
ServiceNow's 27 August 2026 CVE record (CNA title: Unauthenticated Privilege Escalation via System Configuration Image Upload Processor) says it remediated an improper access control flaw in the ServiceNow AI Platform that could, in certain circumstances, let an unauthenticated user create or modify instance data beyond what was intended, resulting in privilege escalation. ServiceNow scored it 10.0 (CVSS 4.0). Hosted instances received a vendor-deployed security update; partners and self-hosted customers were given the update. ServiceNow says it is not currently aware of exploitation against ServiceNow instances. Self-hosted operators should apply the August 2026 CVE advisory updates (KB3152242). Affected CNA rows include Xanadu, Yokohama, Zurich and Australia patch families listed on the CVE record.
ServiceNow's 27 August 2026 CVE record (CNA title: Unauthenticated Remote Code Execution in GraphQL Composite Data API) says it remediated a code-injection flaw in the ServiceNow AI Platform that could, in certain circumstances, let an unauthenticated user run arbitrary code and gain access to or change instance data beyond what was intended. ServiceNow scored it 10.0 (CVSS 4.0). Hosted instances received a vendor-deployed security update; partners and self-hosted customers were given the update. ServiceNow says it is not currently aware of malicious exploitation. Self-hosted operators should apply the August 2026 CVE advisory updates (KB3152242). Affected CNA rows include Xanadu, Yokohama, Zurich and Australia patch families listed on the CVE record.
