CVE-2026-14540 (CNA: Google LLC; published 31 July 2026) is a server-side request forgery in the generic HTTP source/tool components of Google mcp-toolbox (MCP Toolbox for Databases) versions 0.3.0 through 1.4.0. The Go HTTP client lacked a restrictive CheckRedirect policy and target IP validation, so a crafted path parameter (including via a malicious data-driven prompt to a connected agent) could coerce redirects to internal or arbitrary endpoints (CWE-918). Google CVSS 4.0 base 8.0 HIGH: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U. Fixed in mcp-toolbox 1.5.0+ via SSRFGuard (GitHub PR #3448 — DNS-rebinding/TOCTOU protection, IP allow/block lists, base-URL fail-fast). Credited: Syed Anas Mohiuddin. No public in-the-wild exploitation stated on the CVE record. (sources: CVE.org; googleapis/mcp-toolbox PR #3448; Researcher write-up)
The CVE record for CVE-2026-66755, published by Apache as CVE numbering authority on 31 July 2026 (Perth), describes a relative path traversal in the ISA-Tab parser of Apache Tika from 1.8 through 3.3.1, and 4.0.0-alpha-1. It 'allows an attacker who can place files in a directory that the application subsequently parses to read arbitrary files accessible to the Tika process and have their contents emitted into the extracted text output', via a 'Study Assay File Name' value in the ISA-Tab investigation file that traverses outside the dataset directory. The affected package is org.apache.tika:tika-parser-scientific-module. Apache rates it CVSS 4.0 5.9 (Medium), local attack vector, and recommends upgrading to 3.3.2 or 4.0.0-beta-1. CISA's enrichment in the record lists exploitation as none. Credited finders: BugQore, and independently n0mi1k. Correction (28 Oct 2026): removed the Ubuntu USN-8717-1 link, its Ubuntu ESM package versions and its 10 September date, because the notice could not be read by Cyberstack; the card is now sourced to the CVE record and re-dated to the record's publication date. (source: CVE record)
CVE-2026-66755 — CVE record (Apache CNA, published 31 Jul 2026, Perth)
The Rails project's GitHub advisory says an unauthenticated attacker can abuse Active Storage image variant processing with libvips to read arbitrary files accessible to the Rails process, including environment secrets; exposed signing or service credentials can enable remote code execution or lateral movement. The affected configuration uses libvips for Active Storage and accepts untrusted image uploads. Upgrade Active Storage to 7.2.3.2, 8.0.5.1 or 8.1.3.1, use libvips 8.13 or later, and rotate secret_key_base plus every other secret readable by the application process. Rails branches without a fixed release should move to a supported branch or remove libvips until they can patch. No vendor, CISA or other source Cyberstack can cite has confirmed exploitation of CVE-2026-66066 in the wild; it was not in CISA's Known Exploited Vulnerabilities catalogue when checked on 26 October 2026. Correction (26 Oct 2026): a 1 September report of exploitation against honeypots in Singapore, Israel and the UK from a single IP address in France, with command-and-control in Israel, has been removed: The Hacker News attributed it to one threat-intelligence company's honeypot data, and no vendor, CISA or other independent source confirms it. A SecurityWeek link this Cyberstack does not use has also been removed. (source: Rails security advisory)
Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability. Arista VeloCloud Orchestrator On-Prem contains an OS command injection vulnerability that may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator and data managed by the orchestrator. Apply vendor mitigations. Check the NVD record and the vendor advisory for affected versions and the patch.
Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability. Fortinet FortiOS contains an exposure of sensitive information to an unauthorized actor vulnerability. This may allow a remote unauthenticated attacker to bypass the patch developed for the symbolic link persistency mechanism observed in some post-exploit cases, via crafted HTTP requests. An attacker would need first to have compromised the product via another vulnerability, at filesystem level. Apply vendor mitigations. Check the NVD record and the vendor advisory for affected versions and the patch.
Microsoft SharePoint Deserialization of Untrusted Data Vulnerability . Microsoft SharePoint contains a deserialization of untrusted data vulnerability which could allow an unauthorized attacker to execute code over a network. Apply vendor mitigations. Check the NVD record and the vendor advisory for affected versions and the patch.
Check Point SmartConsole Improper Authentication Vulnerability. Check Point SmartConsole contains an improper authentication vulnerability which could allow an unauthenticated remote attacker to obtain an application login token and use it to authenticate with full administrative privileges. Apply vendor mitigations. Check the NVD record and the vendor advisory for affected versions and the patch.
DD-WRT Stack-Based Buffer Overflow Vulnerability. DD-WRT contains a stack-based buffer overflow vulnerability that could allow an unauthenticated attacker to overflow an internal buffer used by UPnP and trigger a code execution vulnerability. Apply vendor mitigations. Check the NVD record and the vendor advisory for affected versions and the patch.
Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability. Langflow contains an inclusion of functionality from untrusted control sphere vulnerability that allows remote attackers to execute arbitrary code on affected installations. Apply vendor mitigations. Check the NVD record and the vendor advisory for affected versions and the patch.
Microsoft SharePoint Deserialization of Untrusted Data Vulnerability. Microsoft SharePoint contains a deserialization of untrusted data vulnerability that allows an unauthorized attacker to execute code over a network. Apply vendor mitigations. Check the NVD record and the vendor advisory for affected versions and the patch.
F5 CNA advisory K000162231 (NVD published 15 July 2026) says that when an HTTP/2 profile is configured on a virtual server, undisclosed requests can raise TMM memory until the process restarts. That is a data-plane denial of service; F5 says there is no control-plane exposure. F5 scores it 8.7 (CVSS 4.0) and 7.5 (CVSS 3.1). Affected classic BIG-IP: 21.1.0 before 21.1.0.1, 21.0.0 before 21.0.0.3, 17.5.0 before 17.5.1.8, 17.1.0 before 17.1.3.4. Also BIG-IP Next for Kubernetes 2.3 before 2.3.2 and 2.0 before 2.2.3, Next CNF 2.3 before 2.3.2 / 2.0 before 2.2.3 / 1.1 before 1.4.3, and Next SPK 1.7 before 1.7.18 (NVD also lists Next SPK 1.9.0 as affected with no upper bound). Not in CISA KEV at last check. The NVD record does not state in-the-wild exploitation.
Horizon3 published on 1 September 2026 that Defused Cyber honeypots saw valid in-the-wild exploitation of CVE-2026-9586 on 30 August 2026 (attacker IP 176.65.148.184 in the published honeypot traffic). The flaw is an unauthenticated SQL injection in Sangoma Switchvox SMB Edition: the /pa PhoneAppsHandler.pm endpoint concatenates the PhoneIP field from an XML body into a PostgreSQL query, which Horizon3 says can be turned into remote code execution as the database superuser. Sangoma released Switchvox 8.4.0.2 on 14 July 2026. Horizon3 reported the issues in April; Security Risk Advisors independently reported them in May and published on 17 July. GitHub CVE advisory (17 July) rates it Critical 9.3. The CNA record cites Switchvox SMB Edition 8.3 (build 104997); Horizon3 notes Sangoma 8.4.0.2 release notes also mention 8.2.2.1 — upgrade to 8.4.0.2 rather than assuming an older build is safe. Horizon3 cites about 4,000 internet-exposed Switchvox devices on Shodan, mostly in the United States. CISA added CVE-2026-9586 to the KEV catalog on 2 September 2026. Restrict /pa to trusted phone networks until patched. IoC path if SSH is available: /var/log/switchvox/db-quirks.log.
