This brief covers the trailing ~48 hours (August 5–7, 2026). Every item below was verified against its primary source — vendor advisory, CISA KEV entry, or original research — before inclusion.
Hackers begin exploiting JetBrains TeamCity RCE (CVE-2026-63077); CISA adds it to KEV
CISA / JetBrains · August 5, 2026
Threat actors are actively exploiting CVE-2026-63077 (CVSS 9.8), a deserialization-of-untrusted-data flaw in JetBrains TeamCity On-Premises that allows unauthenticated remote code execution via HTTP/S requests. CISA added the bug to its Known Exploited Vulnerabilities catalog on Wednesday, roughly a week after disclosure, giving federal agencies three days to patch under BOD 26-04. Fixes are available in TeamCity 2025.11.7 and 2026.1.3, plus a security patch plugin for 2017.1+.
“An unauthenticated attacker could exploit the vulnerability via the TeamCity agent polling protocol.” — JetBrains
Source: CISA KEV catalog · SecurityWeek
CISA flags exploited Langflow, Apache Tomcat, and N-able N-central flaws; Tomcat attacks tied to AI-driven campaign
CISA / Palo Alto Networks Unit 42 · August 5, 2026
CISA added three actively exploited vulnerabilities to the KEV catalog: CVE-2026-9198 (CVSS 9.8), an unauthenticated code-injection RCE in Langflow fixed in version 1.10.1; CVE-2026-34486 (CVSS 7.5), an EncryptInterceptor bypass in Apache Tomcat fixed in 11.0.21, 10.1.54, and 9.0.117; and CVE-2026-18556 (CVSS 8.2), an authentication bypass in N-able N-central whose incomplete fix spawned CVE-2026-18577, itself added to KEV earlier in the week. Unit 42 attributes exploitation of the Tomcat flaw to a Zhuhai-based, Chinese-speaking actor using DeepSeek via the Hermes Agent framework as an autonomous offensive operator. Federal agencies have until August 7 to remediate.
“This actor attempted to exploit over 460 targets, leveraging a mix of autonomous and manual techniques.” — Palo Alto Networks Unit 42
Source: CISA alert · The Hacker News
ChainDrop supply-chain attack infects 440 npm packages with Mini Shai-Hulud worm
Microsoft / JFrog / Socket · August 5, 2026
More than 2,200 malicious versions of 440 npm packages were published in the ChainDrop campaign, which began with the compromise of a maintainer account in the keyv and cacheable namespaces — packages with a combined 500+ million weekly downloads. The self-propagating worm, a descendant of Shai-Hulud 2.0, steals npm, GitHub, cloud, and Vault credentials, republishes poisoned package versions, uses Ethereum-based C2 (EtherHiding), and installs a dead-man’s switch that wipes itself if the stolen GitHub token is revoked. Affected developers should treat machines as compromised, rebuild CI runners, and rotate credentials.
“Once executed, the malware searches developer workstations and continuous integration and continuous delivery (CI/CD) environments for NPM, GitHub, cloud, and infrastructure credentials.” — Microsoft
Source: Microsoft · JFrog · SecurityWeek
Cisco ships critical Catalyst SD-WAN hardening release: three CVSS 9.9 flaws, no workarounds
Cisco PSIRT · August 5, 2026
Cisco’s August 5 advisory bundle addresses five vulnerability classes in Catalyst SD-WAN Software, three rated CVSS 9.9: CVE-2026-20303 (improper input validation/path traversal), CVE-2026-20304 (improper access control), and CVE-2026-20310 (improper link resolution), plus CVE-2026-20312 (8.8) and CVE-2026-20313 (7.7). All deployment types are affected, there are no workarounds, and fixed releases start at 20.9.10 through 26.1.2. The flaws were found internally and are not known to be exploited; the same publication window also included critical IOS XE and FMC fixes.
“These vulnerabilities were found during internal security testing using existing testing processes as well as frontier AI models.” — Cisco PSIRT advisory
Source: Cisco advisory · SecurityWeek
CVSS 10.0 authorization bypass in Paperclip AI agent platform allowed unauthenticated RCE (CVE-2026-41679)
Oasis Security · August 6, 2026
Oasis Security disclosed CVE-2026-41679 (CVSS 10.0), a missing authorization check in Paperclip, an AI agent orchestration platform. On default authenticated-mode deployments, a remote attacker could self-register without email verification, self-approve a CLI authorization challenge for board-level API access, then import a crafted company bundle whose .paperclip.yaml deploys an agent that executes host commands as the server process. Patched in v2026.416.0 along with two related bugs, including a DNS-rebinding-on-loopback flaw enabling code execution on developer machines; no exploitation in the wild has been reported.
“A network attacker could create an account and sign in immediately, without an invitation or control of a verified mailbox.” — Oasis Security
Source: Oasis Security technical report (PDF) · SecurityWeek
This brief covers the trailing ~48 hours (August 5–7, 2026). Primary sources: CISA KEV catalog, CISA KEV alert, Cisco PSIRT, Microsoft Security Blog, JFrog Research, Socket, Unit 42, Oasis Security.