This brief covers the trailing ~48 hours (September 12–14, 2026). Every item below was verified against its primary source — vendor advisory, CISA KEV entry, or the original research — with the publish date confirmed on that page. It was a quiet weekend: two developments cleared verification inside the window, followed by several active campaigns from the days just before it.

Cisco Secure Email Gateway SQL injection actively exploited for root, added to CISA KEV

Cisco PSIRT / CISA · September 14, 2026

Cisco published a critical advisory for CVE-2026-76461 (CVSS 9.8, CWE-89), a SQL injection flaw in the email-parsing logic of AsyncOS for Cisco Secure Email Gateway that lets an unauthenticated remote attacker execute arbitrary commands as root simply by sending a crafted email through the appliance. It affects physical and virtual Secure Email Gateway deployments regardless of configuration (Secure Email and Web Manager and Secure Web Appliance are not affected); fixed releases are 15.5.5-0141, 16.0.4-3021 and 16.5.0-780, and there are no workarounds. Cisco confirmed in-the-wild exploitation, has already upgraded all Secure Email Cloud tenants, and has directly contacted cloud customers where indicators of compromise were found. CISA added the CVE to the KEV catalog the same day with a September 17 remediation due date; the advisory includes a mail_logs grep for COPY.*TO PROGRAM as a triage indicator.

“In September 2026, the Cisco PSIRT became aware of active exploitation of this vulnerability.” — Cisco Security Advisory cisco-sa-esa-inj-2bLVGmhX

Source: Cisco advisory · CISA KEV alert

Microsoft ships out-of-band updates after September security patches broke Remote Desktop Services

Microsoft · September 14, 2026

Microsoft released emergency out-of-band cumulative updates to fix Remote Desktop Services (RDS) failures introduced by the September 8 security updates: KB5129237 (Windows Server 2022, OS Build 20348.5631), KB5129235 (Windows Server 2025), KB5129195 (Windows 11 24H2/25H2, builds 26100.9457 and 26200.9457), KB5129194 (Windows 11 26H1) and KB5129236 (Windows 10 21H2/22H2). The server packages are available via the Microsoft Update Catalog only. The regression matters from a security standpoint because many admins had been rolling back KB5122882 / KB5122871 to restore RDP, which also removed that month’s security fixes, including the two exploited zero-days (CVE-2026-81963 and CVE-2026-85880). The OOB updates also fix a Hyper-V/Plan9 shared-folder issue and a multichannel USB audio problem; a separate USB Audio Class 1.0 “Code 10” failure remains unresolved.

“In affected environments, RDS might become unstable, causing RDP connection and sign-in failures or servers to become unresponsive during Remote Desktop configuration.” — Microsoft, KB5129237 release notes

Source: Microsoft KB5129237 · Microsoft KB5129195 · BleepingComputer

Still developing

GitLab CVSS 10 file read, ScreenConnect and chained Artifactory flaws land in KEV

CISA · September 11, 2026

CISA added four vulnerabilities to KEV on September 11: CVE-2026-85706 (GitLab CE/EE path traversal in the repository commits API, CVSS 10.0, unauthenticated arbitrary file read; fixed in 19.1.8, 19.2.6 and 19.3.2, with watchTowr observing in-the-wild probes within hours of disclosure), CVE-2026-84869 (ConnectWise ScreenConnect improper privilege management / missing authorization, CVSS 9.9, allowing file transfer and execution through active remote sessions without host confirmation), and CVE-2026-42016 / CVE-2026-42018 (JFrog Artifactory, CVSS 8.1 and 7.5). Wiz reports the two Artifactory bugs were chained between August 15 and September 8 to mint admin-scoped tokens on self-hosted instances, install malicious Groovy plugins and drop a Rust backdoor. Federal due dates: September 14 for GitLab and ScreenConnect, September 25 for Artifactory.

“Between August 15 and September 8, 2026, we observed multiple actors chain CVE-2026-42018 and CVE-2026-42016 against self-hosted Artifactory instances.” — Wiz Research

Source: CISA KEV catalog · GitLab 19.3.2 patch release · ConnectWise bulletin · BleepingComputer

Check Point VPN: two CVSS 9.8 pre-auth RCEs, Dutch NCSC expects large-scale exploitation

Check Point / NCSC-NL · September 9–10, 2026

CVE-2026-85102 (improper certificate validation during VPN negotiation, sk1000117) and CVE-2026-85103 (heap overflow in the VPN certificate ASN.1 decoder, sk1000118), both CVSS 9.8, allow unauthenticated remote code execution on Quantum Security Gateways, with the second also reaching Security Management Servers. Affected lines include R81.20, R82, R82.10, R81.10.x and R82.00.x plus end-of-support R80.x/R81; R82.20 is not affected. Fixes ship via LivePatch Take 24 and Jumbo Hotfix Accumulator Takes 44/126/166. Check Point reported no evidence of exploitation at disclosure; the Dutch NCSC issued an alert the next day rating the likelihood of exploitation as high. Neither CVE is in KEV yet.

“The NCSC assesses the likelihood of exploitation and the potential impact as high and expects exploitation attempts to occur soon.” — Nationaal Cyber Security Centrum (translated)

Source: Check Point sk1000117 · Check Point sk1000118 · NCSC-NL alert · BleepingComputer

UNC3569 exploited a one-click RCE in Tencent’s Sogou Input Method to drop GRAYRABBIT

Gen Threat Labs · September 10, 2026

Gen Digital disclosed CVE-2026-51990, a one-click remote code execution chain in Sogou Input Method for Windows (hundreds of millions of installs) that combines unvalidated argument injection in the sgbiz: protocol handler, unrestricted URL navigation in a CEF webview, and a bundled Chromium 80 engine running with the sandbox and same-origin policy disabled. The PRC-nexus group UNC3569 exploited it in the wild using a public exploit for CVE-2021-38003 to deploy the GRAYRABBIT backdoor via DLL sideloading. Tencent patched the protocol handler in version 16.3.0.3498 (April 21, 2026), but the researchers note the embedded browser remains outdated and unsandboxed. No CVSS score has been published by the vendor, and the CVE is not in KEV.

“We observed this vulnerability actively exploited in the wild by the UNC3569 threat group to deploy the GRAYRABBIT backdoor through a crafted link.” — Gen Threat Labs

Source: Gen Threat Labs research · BleepingComputer

Mass scanning of exposed Vite dev servers for AWS, Azure and Terraform secrets

F5 Labs · September 11, 2026

F5 Labs’ honeypots recorded roughly 32,000 events across 807 attack sessions in August exploiting CVE-2026-39364 (CVSS 7.5, CWE-200), a server.fs.deny bypass in the Vite development server’s /@fs/ route that returns restricted files when query strings such as ?raw?? or ?import&raw are appended. Affected versions are Vite 7.1.0 through 7.3.1 and 8.0.0 through 8.0.4 (fixed in 7.3.2 and 8.0.5). The scanner cycled through .env variants, .aws/credentials across user home directories, Azure accessTokens.json, Terraform state and /proc/self/environ, spoofing Googlebot, ClaudeBot and GPTBot user agents from Google Cloud IP space. The CVE is not in KEV, although the related CVE-2025-31125 is.

“The rapid increase from baseline background noise highlights how quickly newly disclosed bypass methods are folded into automated credential-harvesting operations.” — F5 Labs, Sensor Intel Series

Source: F5 Labs research

This brief covers the trailing ~48 hours (September 12–14, 2026).

Primary sources:

• Cisco Security Advisory cisco-sa-esa-inj-2bLVGmhX (CVE-2026-76461)
• CISA: Adds One Known Exploited Vulnerability to Catalog (Sept. 14, 2026)
• Microsoft KB5129237 (Windows Server 2022 out-of-band)
• Microsoft KB5129195 (Windows 11 24H2/25H2 out-of-band)
• CISA Known Exploited Vulnerabilities Catalog
• GitLab Patch Release 19.3.2 (CVE-2026-85706)
• ConnectWise ScreenConnect Security Bulletin (CVE-2026-84869)
• Check Point sk1000117 (CVE-2026-85102)
• Check Point sk1000118 (CVE-2026-85103)
• NCSC-NL alert on Check Point VPN vulnerabilities
• Gen Threat Labs: Gray Rabbits and the Tale of a One-Click Backdoor (CVE-2026-51990)
• F5 Labs: Cloud Takeover — Mass Scanning for Exposed Vite Endpoints (CVE-2026-39364)

This brief covers the trailing ~48 hours (September 7–9, 2026). Every item below was verified against its primary source — vendor advisory, CISA KEV entry, CVE record, or original researcher publication — before inclusion.

Microsoft patches two exploited Windows privilege-escalation zero-days in record Patch Tuesday

Microsoft MSRC · September 8, 2026

September’s Patch Tuesday fixed roughly 970 vulnerabilities, including two elevation-of-privilege flaws Microsoft confirms are exploited in the wild. CVE-2026-81963 (CVSS 3.1: 7.8, Important) is a link-following bug in the Windows Update Stack affecting Windows 11 and Windows Server 2025, reported by MSTIC. CVE-2026-85880 (CVSS 3.1: 7.8, Important) is a heap-based buffer overflow in Windows ALPC affecting Windows 10 and Windows Server 2012–2022, credited to Volexity and Proofpoint; Microsoft notes it lets code in a low-privilege AppContainer escape the sandbox. Both grant SYSTEM, both are patched, and CISA added both to KEV on September 8. Also worth prioritizing: CVE-2026-69730, a critical (CVSS 9.8) unauthenticated use-after-free RCE in Windows DNS Server — not exploited, but rated “Exploitation More Likely.”

“An attacker who can execute code in a low-privilege AppContainer could exploit this vulnerability locally to escape the sandbox and elevate privileges on the affected system. No additional user interaction is required.” — Microsoft Security Response Center, CVE-2026-85880

Source: MSRC CVE-2026-81963 · MSRC CVE-2026-85880 · MSRC CVE-2026-69730 · BleepingComputer

Adobe ships emergency fix for actively exploited Magento / Adobe Commerce “StyleSmuggler” RCE

Adobe PSIRT · September 7, 2026

Adobe published out-of-band bulletin APSB26-146 for CVE-2026-75650 (CVSS 3.1: 10.0, Critical), a template-injection flaw (CWE-1336) enabling unauthenticated arbitrary code execution in Adobe Commerce, Adobe Commerce B2B, and Magento Open Source — all supported branches through the 2026-aug releases (2.4.4 through 2.4.9). Sansec, which discovered the bug, reports in-the-wild attacks beginning September 4, three days before the patch. Adobe confirms exploitation; a Composer hotfix (VULN-39341) is available, and CISA added the CVE to KEV on September 8.

“Adobe is aware of CVE-2026-75650 being exploited in the wild.” — Adobe Security Bulletin APSB26-146

Source: Adobe APSB26-146 · Sansec research · BleepingComputer

N-able N-central pre-auth RCE (CVSS 10.0) lands in CISA KEV

N-able / CISA · September 8, 2026

CVE-2026-86218 (CVSS 4.0: 10.0, Critical; CWE-96 static code injection) allows pre-authenticated remote code execution on the N-central RMM server in all builds before 2026.3.1.14. N-able’s public release notes for Hotfix 4 (posted September 6) said it had no confirmed production exploitation, but CISA’s September 8 KEV addition is based on evidence of active exploitation, and Help Net Security reports a separate customer notice from N-able describing the flaw as exploited in the wild. Hosted (NCOD) instances are already patched; self-hosted deployments must upgrade to 2026.3 HF4. This follows the HF3 authentication-bypass fixes for CVE-2026-86206 and CVE-2026-86207 released days earlier.

“Customers running on-premises N-central deployments should upgrade to N-central 2026.3 HF4 immediately to protect their environment.” — N-able, N-central 2026.3 Hotfix 4 release notes

Source: N-able Hotfix 4 notes · CVE.org record · CISA KEV alert · Help Net Security

Chrome 153 fixes 230 flaws including a V8 zero-day exploited in the wild

Google Chrome · September 8, 2026

Chrome 153.0.8010.36/.37 (Windows/Mac) and 153.0.8010.36 (Linux) addresses 230 security bugs. CVE-2026-87491, an out-of-bounds write in the V8 JavaScript engine rated Medium, is confirmed exploited in the wild; it was reported by Jihyeon Jeong (Compsec Lab, Seoul National University) on August 6. The release also includes five Critical fixes, four of them memory-safety bugs in WebGL. This is the seventh Chrome zero-day patched in 2026. Not yet in CISA KEV as of this writing.

“Google is aware that an exploit for CVE-2026-87491 exists in the wild.” — Chrome Releases blog, Stable Channel Update for Desktop

Source: Chrome Releases · BleepingComputer

“ShieldCrash” PoC claims bypass of Microsoft’s Defender ShieldBreak patch — no fix available

BleepingComputer · September 9, 2026

Hours after Patch Tuesday, the anonymous researcher Nightmare Eclipse published a proof-of-concept called ShieldCrash, described as a bypass of Microsoft’s fix for CVE-2026-69414 (ShieldBreak, CVSS 7.8), a Microsoft Defender / Malware Protection Engine privilege-escalation flaw patched last week. The current PoC demonstrates arbitrary file read as SYSTEM on fully patched Windows 10, 11, and Server, without write access. No CVE has been assigned to the bypass, no patch exists, and it is not in KEV. Microsoft had not commented at publication time.

“While Microsoft fixed several things to prevent re-exploiting the issue, they missed a spot where ShieldBreak can still be exploited.” — Nightmare Eclipse, as quoted by BleepingComputer

Source: BleepingComputer · MSRC CVE-2026-69414

Calif demonstrates “WeWorm,” an AI-found zero-click WeChat worm spreading via voice calls

Calif Research · September 8, 2026

Security firm Calif disclosed WeWorm, a self-propagating exploit for a memory-corruption bug in WeChat’s VoIP stack on both iOS and Android. Simply placing a call — answered or not — is enough to take over the recipient’s WeChat account, which then calls its own contacts. The attacker must be on the victim’s friend list. Calif says AI found the bug and produced the first RCE exploit in about two days. Tencent shipped mitigations in WeChat Android 8.0.77 and iOS 8.0.76 on August 21 and blocked the exploit server-side by August 28; no CVE is listed and technical details are withheld pending a conference talk.

“The victim does not need to answer the call, or interact with their phone at all. Even if they do answer, they hear nothing, and the exploit still succeeds.” — Calif Research, WeWorm disclosure

Source: Calif Research · The Hacker News

Still developing

“MikroTrick”: CERT Polska confirms active exploitation of MikroTik RouterOS SSH auth-bypass chain

CERT Polska · September 5, 2026

CERT Polska disclosed six RouterOS vulnerabilities and confirmed attackers are chaining two of them to take full control of devices with SSH exposed to the internet. CVE-2026-67276 (CVSS 9.2) is an SSH authentication bypass — RouterOS compared only the RSA public modulus rather than the full key — and CVE-2026-86060 (CVSS 9.2) elevates a crafted-username SSH session to full admin. CVE-2026-67277 (CVSS 8.8) in the bandwidth-test service enables kernel memory disclosure or DoS. MikroTik patched in RouterOS 7.25beta3, 7.24.2, 7.23.4, and 6.49.21; patched builds flag known malicious config changes at boot. Indicators include an unexpected privileged user named “ops.” None of the CVEs are in CISA KEV yet.

“We have obtained confirmation that the attackers are exploiting this combination of vulnerabilities to take full control of devices whose SSH service is accessible from public networks.” — CERT Polska

Source: CERT Polska advisory · Help Net Security

This brief covers the trailing ~48 hours (September 7–9, 2026).

Primary sources:

• CISA — Adds Four Known Exploited Vulnerabilities to Catalog (Sep 8, 2026)
• MSRC — CVE-2026-81963
• MSRC — CVE-2026-85880
• MSRC — CVE-2026-69730
• Adobe — APSB26-146
• Sansec — StyleSmuggler research
• N-able — N-central 2026.3 Hotfix 4
• CVE.org — CVE-2026-86218
• Google — Chrome 153 Stable Channel Update
• MSRC — CVE-2026-69414
• Calif — WeWorm
• CERT Polska — MikroTik RouterOS advisory

This brief covers the trailing ~48 hours (September 5–7, 2026). Every item below was verified against its primary source (vendor advisory, national CERT, or original researcher) and dated from that source. Three unauthenticated remote-takeover bugs dominate the window: an unpatched Magento/Adobe Commerce zero-day, an actively exploited MikroTik RouterOS SSH chain, and a maximum-severity N-able N-central RCE.

Magento and Adobe Commerce: unpatched “StyleSmuggler” zero-day gives unauthenticated RCE, actively exploited

Sansec · September 5, 2026

Sansec disclosed StyleSmuggler, an unauthenticated remote code execution flaw in Magento Open Source and Adobe Commerce, after observing live attacks that began September 4. No CVE ID, CVSS score, Adobe advisory, or patch exists as of this writing, and the bug is not in CISA KEV. Sansec reproduced the full unauthenticated chain on clean 2.4.7, 2.4.8, and 2.4.9 installs; the first known victim was running 2.4.6-p15 with the July and August 2026 security updates applied. The attack poisons a file Magento writes itself (such as a failure report or log), then triggers execution via the platform’s “Payment Transaction Failed Reminder” email, ultimately dropping a persistent Rust implant disguised as a kernel thread ([kworker/u:8:0]) under ~/.local/share/.gvfsd/. Sansec’s interim advice for stores not behind its WAF is to temporarily disable GraphQL; Adobe’s next scheduled security release is September 8.

“Sansec is publishing early because stores are being compromised right now.”
— Sansec, StyleSmuggler advisory (as quoted by The Hacker News)

Source: Sansec advisory · The Hacker News

MikroTik RouterOS: CERT Polska confirms “MikroTrick” SSH auth-bypass + privilege-escalation chain exploited in the wild

CERT Polska / MikroTik · September 5, 2026

CERT Polska published details of six RouterOS vulnerabilities it discovered and coordinated, warning that two of them are being chained (“MikroTrick”) to take full control of routers with SSH reachable from the internet. CVE-2026-67276 (CVSS 9.2) is an SSH authentication bypass: RouterOS compared only the RSA key type and modulus, not the full public key, so an attacker who knows a user’s modulus can forge a key and log in without the private key. CVE-2026-86060 (CVSS 9.2) is an SSH privilege-escalation flaw triggered by a username beginning with a disallowed character, yielding a session with full admin rights. A third bug, CVE-2026-67277 (CVSS 8.8), in the bandwidth-test service allows unauthenticated kernel memory disclosure or a remote crash. MikroTik shipped fixes on September 3 in RouterOS 7.25beta3, 7.24.2, 7.23.4, and 6.49.21 and added a startup “Flagged” compromise-detection check. CERT Polska says successful attacks from 82.192.72.4 date to at least September 2 and that the patches stop the observed attacks. None of the CVEs are in CISA KEV yet.

“We have obtained confirmation that the attackers are exploiting this combination of vulnerabilities to take full control of devices whose SSH service is accessible from public networks.”
— CERT Polska

Source: CERT Polska advisory · MikroTik security bulletin · BleepingComputer

N-able N-central: emergency Hotfix 4 for CVE-2026-86218, CVSS 10.0 pre-authentication RCE

N-able · September 5–6, 2026

N-able released N-central 2026.3 Hotfix 4 (build 2026.3.1.14) on September 5 to fix CVE-2026-86218, a pre-authentication remote code execution vulnerability in the RMM platform’s server, rated CVSS 10.0 per Huntress. The hotfix supersedes HF3, which was issued a day earlier for two authentication-bypass bugs (CVE-2026-86206 and CVE-2026-86207); systems on HF3 remain vulnerable to the new flaw. N-able’s public advisory says it has no confirmation of exploitation in production, but Huntress and Help Net Security report a separate customer notice from N-able describing the bug as observed exploited in the wild, and Huntress had earlier found a compromised, patched N-central server whose logs had rotated. Hosted (NCOD) instances are already patched; on-premises customers must upgrade. Not in CISA KEV. Shadowserver counts nearly 1,500 internet-exposed N-central servers.

“At this time, we have no confirmations that this vulnerability has been exploited in production environments, but unpatched systems remain at risk.”
— N-able, N-central 2026.3 Hotfix 4 release notes

Source: N-able status notice · HF4 release notes · Huntress · BleepingComputer

Still developing

Google Chrome: CVE-2026-85046 V8 type confusion exploited in the wild, now in CISA KEV

Google / CISA · September 3–4, 2026

Google shipped Chrome 152.0.7977.82/.83 (Windows, macOS) and 152.0.7977.82 (Linux) on September 3 with 12 security fixes, including CVE-2026-85046, a High-severity type confusion in the V8 JavaScript engine reported by Salvatore Gulizia (“Serotav”). Google confirmed an exploit exists in the wild; it is the sixth Chrome zero-day patched this year. CISA added it to the KEV catalog on September 4 with a federal remediation deadline of September 18. Chromium-based browsers (Edge, Brave, Opera, Vivaldi) will pick up the fix on their own schedules.

“Google is aware that an exploit for CVE-2026-85046 exists in the wild.”
— Google Chrome Releases

Source: Chrome Releases · CISA KEV alert · BleepingComputer

ConnectWise ScreenConnect: file-transfer flaw with mitigation only, patch expected this week

ConnectWise · September 3, 2026

ConnectWise disclosed an issue “affecting file transfer behavior” in ScreenConnect Remote Access Support and Access sessions, impacting both cloud and on-premises deployments. No CVE has been assigned and no patch is available yet; the vendor’s interim mitigation is to remove the TransferFiles (or legacy TransferFilesInSession) scoped permission from every role’s session groups. Shadowserver tracks nearly 6,000 exposed ScreenConnect instances. Not in CISA KEV.

Source: ConnectWise security advisories · BleepingComputer

This brief covers the trailing ~48 hours (September 5–7, 2026).

Primary sources:

• Sansec — StyleSmuggler: Magento and Adobe Commerce 0-day RCE under active attack
• CERT Polska — Critical vulnerabilities in MikroTik RouterOS are being actively exploited
• MikroTik — September 2026 vulnerability
• N-able — N-central 2026.3 Hotfix 4 – CVE-2026-86218
• Huntress — Critical N-able N-central Vulnerability and Active Exploitation
• Google — Stable Channel Update for Desktop (Chrome 152.0.7977.82)
• CISA — Adds One Known Exploited Vulnerability to Catalog
• ConnectWise — Security Advisories

This brief covers the trailing ~48 hours (September 2–4, 2026). Every item below was checked against its primary source — the vendor advisory, the CISA KEV entry, or the original researcher’s disclosure — and the CVE IDs, scores, and dates come from those pages.

CISA adds seven flaws to KEV: SonicWall SMA 1000 zero-days, JFrog Artifactory auth bypass, Sangoma Switchvox SQLi, plus Starlette, Kestra and LiteLLM

CISA · September 2, 2026

CISA added seven vulnerabilities to the Known Exploited Vulnerabilities catalog in a single update. The headline entries are the two SonicWall SMA 1000 zero-days — CVE-2026-83548 (CVSS 10.0, pre-auth SSRF via an unintended forward proxy in the Work Place interface) and CVE-2026-83549 (CVSS 7.8, post-auth OS command injection in the Appliance Management Console) — which SonicWall disclosed on September 1 with confirmation of in-the-wild exploitation. Affected models are SMA 1000 6210, 7210 and 8200v on 12.4.3-03453 and 12.5.0-02835 and earlier; fixes are 12.4.3-03526 and 12.5.0-02952, and SonicWall advises re-imaging, password resets and TOTP resets if IoCs are found.

Also added: CVE-2026-82329 (CVSS 9.8), an improper-authentication bug in self-hosted JFrog Artifactory that grants admin privileges under default configuration — patched August 28, with watchTowr reporting attackers minting admin tokens within days; CVE-2026-9586 (CVSS 9.3), an unauthenticated SQL injection in Sangoma Switchvox’s /pa endpoint that reaches PostgreSQL superuser and yields RCE, fixed in Switchvox 8.4.0.2 (July 14) and observed exploited by Horizon3/Defused honeypots from August 30; CVE-2026-48710 (CVSS 6.5, Starlette request smuggling); CVE-2026-49869 (CVSS 10.0, Kestra OSS command injection, tied to a Microsoft-reported crypto-miner intrusion); and CVE-2026-59822 (CVSS 8.8, LiteLLM MCP endpoint improper authentication). All are patched. Federal remediation deadline is September 5 for most, September 16 for the Starlette and LiteLLM entries.

“IMPORTANT: These vulnerabilities have been confirmed as being actively exploited in the wild.” — SonicWall, Product Notice SNWLID-2026-0016

“…we believe that it is likely that most internet exposed Switchvox instances will be or have already been targeted.” — Zach Hanley, Horizon3

Source: CISA alert · SonicWall SNWLID-2026-0016 · Horizon3 disclosure · SecurityWeek (Artifactory) · The Hacker News

Google patches Chrome V8 type-confusion zero-day exploited in the wild (CVE-2026-85046)

Google Chrome · September 3, 2026

Chrome 152.0.7977.82/.83 (Windows/macOS) and 152.0.7977.82 (Linux) ships 12 security fixes, including CVE-2026-85046, a high-severity type confusion in the V8 JavaScript engine reported by Salvatore Gulizia (Serotav) on August 4 and rated CVSS 8.8. Google confirms an exploit exists in the wild and has restricted bug details; this is the sixth Chrome zero-day patched in 2026. Not yet listed in KEV at time of writing. The same release also fixes a V8 race condition (CVE-2026-85045) and out-of-bounds write in WebGL (CVE-2026-85050). Chromium-based browsers (Edge, Brave, Opera, Vivaldi) will need their own updates.

“Google is aware that an exploit for CVE-2026-85046 exists in the wild.” — Google Chrome Releases

Source: Chrome Releases – Stable Channel Update · The Hacker News

Cisco: critical unauthenticated root RCE in Silicon One-based Nexus 9000 switches (CVE-2026-20212)

Cisco PSIRT · September 2, 2026

CVE-2026-20212 (CVSS 9.8, CWE-1327) affects Nexus 9000 Series switches that include a Silicon One ASIC — PIDs N9324C-SE1U, N9348Y2C6D-SE1U, N9364E-SG2-O/-Q, N9396T12C-SE1, N9348Y12C-SE1, N9396Y12C-SE1, N9336C-SE1, N9K-C9804 and N9K-C9808. TCP ports 43210 and 43211 are reachable in the default L3 VRF; crafted input to that service executes as root and can crash the S1HAL process to reload the device. Fixed software is available, Cisco has published a Live Protect shield as a temporary mitigation, and infrastructure ACLs blocking those ports are a documented workaround. Cisco PSIRT is not aware of exploitation; the bug surfaced during a TAC case. Not in KEV.

“A vulnerability in the Silicon One integration for Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to execute code with root privileges.” — Cisco Security Advisory cisco-sa-n9k-s1-rce-EH8dEtr

Source: Cisco advisory · SecurityWeek

Broadcom fixes VM-escape bugs in VMware Workstation and Fusion (CVE-2026-59346, CVE-2026-59347)

Broadcom VMSA-2026-0007 · September 3, 2026

Two guest-to-host code execution flaws affect VMware Workstation and Fusion 25H2 and 26H1. CVE-2026-59346 (CVSS 9.3, Critical) is an integer overflow in the VMXNET3 virtual NIC; CVE-2026-59347 (CVSS 8.1) is a stack-based buffer overflow in HGFS that executes code as the host-side VMX process. Both require local admin on a guest VM. Fixed in 26H1u1; no workarounds. Reported privately (ZDI and Tencent Xuanwu Lab credited); no known exploitation and not in KEV.

“A malicious actor with local administrative privileges on a virtual machine with VMXNET3 virtual network adapter may exploit this issue to execute code on the host.” — Broadcom, VMSA-2026-0007

Source: Broadcom VMSA-2026-0007 · SecurityWeek

“PostGREShell”: Cyera details 12-year-old PostgreSQL logical-decoding bug that turns REPLICATION privilege into server takeover (CVE-2026-6471)

Cyera / PostgreSQL · September 4, 2026 (patched August 13)

Cyera published research on CVE-2026-6471 (CVSS 7.2, missing authorization), in which the logical-decoding plugin name is passed unsanitized to dlopen(), letting any account with the REPLICATION attribute load an arbitrary shared object and run code as the postgres OS user — then write itself into pg_authid for permanent superuser and persistence. Every release from 9.4 through 18 is affected; the PostgreSQL project shipped fixes in 18.6, 17.11, 16.15, 15.19 and 14.24 on August 13 and added an output_plugin_libraries allowlist parameter. No exploitation reported; not in KEV. Audit which accounts hold REPLICATION — backup tools, monitoring agents and pipelines commonly do.

“Missing authorization in PostgreSQL logical decoding allows a non-superuser holding REPLICATION privilege to dlopen any file visible to the operating system account running the server…” — PostgreSQL Security, CVE-2026-6471

Source: PostgreSQL security page · SecurityWeek

Still developing

GitSpawn: repository-supplied Git config runs attacker code through seven AI coding agents; four still unpatched

Manifold Security · September 2, 2026

Manifold disclosed eight findings in which a repo’s own .git/config (chiefly core.fsmonitor) names a command that CLI coding agents execute at session startup — before any trust prompt, outside the sandbox, as the user. Fixed: goose 1.44.0 (CVE-2026-72718, CVSS 7.0 per GitHub advisory), Codex CLI 0.131.0 and Codex Desktop (OpenAI published three CVEs including CVE-2026-19592), Claude Code 2.1.196 on the fsmonitor path, and Cursor. Still executing repo-supplied commands at Manifold’s September 1 retest: Hermes Agent, Qwen Code, Grok Build, and a second Claude Code path via ultrareview. Exploitation requires the repo to arrive as files with .git intact (archive, shared drive, USB), not a normal clone. No exploitation reported; none in KEV. Mitigation: git config --global core.fsmonitor false and inspect .git/config before opening received directories with an agent.

“The vulnerability is not in the model, or in anything new. It is in the ordinary plumbing underneath…” — Manifold Security

Source: The Hacker News · goose GHSA-r5pp-p5r8-466r

Langflow unauthenticated RCE (CVE-2026-0768) under active exploitation for credential theft

VulnCheck · September 1, 2026

VulnCheck reports in-the-wild exploitation of CVE-2026-0768 (CVSS 9.8), an unauthenticated Python exec() injection in Langflow’s custom-component validator affecting all releases through 1.4.2, publicly disclosed by ZDI as a zero-day in January. Observed post-exploitation: reading environment variables, the Langflow secret key, cloud API keys, .env files and SSH keys, with 360+ attempts against canaries by September 1. Not yet in KEV. VulnCheck counts 11 additional Langflow CVEs exploited so far in 2026.

Source: SecurityWeek · ZDI-26-034

This brief covers the trailing ~48 hours (September 2–4, 2026).

Primary sources:

• CISA – Adds Seven Known Exploited Vulnerabilities to Catalog (Sept 2, 2026)
• SonicWall – SNWLID-2026-0016
• Horizon3 – CVE-2026-9586 Sangoma Switchvox RCE
• Google – Chrome Stable Channel Update (Sept 3, 2026)
• Cisco – cisco-sa-n9k-s1-rce-EH8dEtr
• Broadcom – VMSA-2026-0007
• PostgreSQL – CVE-2026-6471
• GitHub – goose GHSA-r5pp-p5r8-466r (CVE-2026-72718)
• ZDI – ZDI-26-034 (Langflow CVE-2026-0768)

The trailing ~48 hours (August 31 – September 1, 2026) were dominated by software supply chain compromise. Every item below was checked against a primary vendor advisory, CISA KEV entry, or the original research report, and confirmed to fall inside the window.

Attackers mint admin tokens on JFrog Artifactory days after disclosure (CVE-2026-82329)

watchTowr · September 1, 2026

CVE-2026-82329 (CVSS 9.8) is an authentication bypass in JFrog Access, the component that issues and validates Artifactory credentials. Under default configuration, an unauthenticated attacker with network access can obtain administrative privileges — instances without an additional join key configured receive a “phantom” join key that can be abused to forge access and mint administrator-level credentials. JFrog patched the flaw in Artifactory 7.161.20 on August 28, 2026; affected branches include 7.161.0–7.161.19, 7.146.0–7.146.36, 7.133.0–7.133.28, 7.125.0–7.125.19, 7.117.0–7.117.27, and 7.111.4–7.111.21. watchTowr reported that threat actors began weaponizing the flaw on September 1, generating admin tokens and enumerating users, groups, credential sets, and federated access topologies. The CVE is not in the CISA KEV catalog as of this writing.

“This moved from disclosure to real-world exploitation with uncomfortable efficiency.”
— Yordan Ganchev, principal threat intelligence specialist, watchTowr

Source: CVE-2026-82329 (CVE.org) · JFrog security advisories · The Hacker News

BGP hijack redirected Virtualizor update traffic, delivering a malicious package

Softaculous · September 1, 2026

Softaculous disclosed that between 20:57 UTC on August 28 and 06:10 UTC on August 30, an attacker announced a false route for a block of Hetzner-hosted IP addresses, diverting traffic destined for its software update systems and client/billing portal. The hijack allowed a malicious Virtualizor update package to reach a small number of hosting-provider installations that happened to check for updates during the window. Because requests never reached Softaculous, the vendor has no logs of who was served the package. There is no CVE — this is an infrastructure-level supply chain compromise, not a product vulnerability. Operators are told to check for the service file /etc/systemd/system/java-jre-update.service, rotate and restrict API credentials, and audit for unauthorized SSH keys, accounts, scheduled tasks, and outbound connections. Routing has been restored, the fraudulent certificate was reported for revocation, and Virtualizor 3.2.9.9 shipped September 1 with a Security Analyzer tool. Softaculous says it will add cryptographic signing for all packages going forward.

“We have confirmed that a malicious Virtualizor update package was delivered to a small number of installations that checked for updates while their traffic was being diverted.”
— Softaculous security incident notice

Source: Virtualizor security incident notice · BleepingComputer

CISA adds the exploited PaperCut NG/MF chain to KEV with a September 14 deadline

CISA · August 31, 2026

CISA added CVE-2026-81578 and CVE-2026-82078 to the Known Exploited Vulnerabilities catalog on August 31, setting a September 14, 2026 remediation deadline for federal civilian agencies. CVE-2026-81578 (CVSS 8.8) is an improper access control flaw in the PaperCut NG/MF web management interface; CVE-2026-82078 (CVSS 9.4) is an unsafe dynamic class-loading flaw in the product’s database connection utilities. Chained, they yield pre-authentication remote code execution. The bugs were exploited as zero-days before a fix existed, and PaperCut shipped Emergency Patch Release 2 on August 28 after watchTowr and Huntress found multiple bypasses of the first patch — customers who applied the original emergency patch still need Release 2. Patches cover NG/MF versions 24, 25, and 26 on Windows, Linux, and macOS; version 23 and earlier require an upgrade.

“Under specific conditions, unauthenticated remote requests targeting administrative functions can trigger backend actions prior to the completion of access validation checks.”
— PaperCut security bulletin, 27 Aug 2026

Source: CISA KEV alert · PaperCut security bulletin · BleepingComputer

VulnCheck canaries log credential harvesting against Langflow and Rails

VulnCheck · September 1, 2026

VulnCheck reported active exploitation of two critical flaws. CVE-2026-0768 (CVSS 9.8) is an input-validation failure in the code validator behind Langflow’s custom component editor that allows unauthenticated arbitrary Python execution as root. CVE-2026-66066, “KindaRails2Shell” (CVSS 9.5), is an Active Storage/libvips arbitrary file read in Ruby on Rails that leaks secret_key_base, master keys, database passwords, and cloud credentials, and can escalate to RCE. VulnCheck recorded more than 50 detections in a few hours on August 30, rising to 360 by September 1. Both CVEs are patched upstream, though VulnCheck noted that on a patched Rails 8.1.3.1 server the fix blocks the libvips file read but does not neutralize the variation-key Marshal deserialization gadget. Neither CVE appears in KEV as of this writing.

“Source traffic primarily originates from Russia and has thus far exclusively hit Canaries in the U.K.”
— Caitlin Condon, vice president of threat research, VulnCheck

Source: ZDI-26-034 (CVE-2026-0768) · VulnCheck initial access report · The Hacker News

This brief covers the trailing ~48 hours (August 31 – September 1, 2026).

Primary sources:

• CVE-2026-82329 — CVE.org
• JFrog Security Advisories
• Virtualizor — Security Incident: BGP Hijacking
• CISA — Adds Two Known Exploited Vulnerabilities to Catalog (Aug 31, 2026)
• PaperCut — Urgent Security Advisory (27 Aug 2026)
• Zero Day Initiative — ZDI-26-034
• VulnCheck — Initial Access Intelligence: CVE-2026-66066

Covering the trailing ~48 hours (August 29–31, 2026). Every item below was checked against its primary advisory, vendor blog, or original research before inclusion.

Rails “KindaRails2Shell” (CVE-2026-66066) comes under active exploitation

VulnCheck · August 31, 2026

Attackers have begun exploiting CVE-2026-66066 (CVSS 9.5), the pre-auth arbitrary file read to RCE chain in Ruby on Rails Active Storage that abuses parser confusion between Rails, libvips, libmatio, and HDF5 to read attacker-chosen server files as “image” pixels. Affected releases are Rails 7.2.0–7.2.3.1, 8.0.0–8.0.5, and 8.1.0–8.1.3 in default configuration; fixes shipped in 7.2.3.2, 8.0.5.1, and 8.1.3.1 in late July. VulnCheck reported exploitation roughly a month after patches landed, following public PoC code, and previously counted around 7,000 exposed Rails instances. The flaw is not currently listed in CISA’s KEV catalog. VulnCheck also warns that patching does not close the whole chain.

“[W]hile the fix blocks the libvips file read, it does not neutralize the variation-key Marshal deserialization: the RCE gadget still executes on a patched server given a valid signature.” — VulnCheck

Source: VulnCheck initial access intelligence · Rails forensic tooling · SecurityWeek

Fire Ant turns Cisco IOS XR routers and TACACS servers into collection platforms

Sygnia · August 30, 2026

Sygnia published an investigation into the China-nexus actor Fire Ant, which has moved beyond its 2025 VMware ESXi and vCenter tradecraft into the network and identity layer: Cisco IOS XR edge routers, TACACS authentication servers, and Linux management hosts. On the routers, the actor deployed purpose-built implants that hooked the IOS XR logging path — a modified syslog library that forwarded a message only if it contained the string “Health” — and appended an | exclude filter to show command output to hide its GRE tunnel from administrators. Investigators also found a VMCI-socket backdoor on the TACACS server and a credential-collection toolset Sygnia tracks as TacTap, plus PCAP captures exported from multiple routers to external FTP infrastructure. No CVE is attached; this is post-compromise abuse of trusted infrastructure rather than a single exploited flaw.

“[W]hen a threat actor controls routers, they do not only gain reach. They gain perspective.” — Sygnia

Source: Sygnia research · BleepingComputer

“HardBreacher” PoC drops for a Kaspersky Endpoint Security privilege escalation

Nightmare Eclipse / Kaspersky · August 31, 2026

The researcher known as Nightmare Eclipse (also Chaotic Eclipse) released a public proof-of-concept over the weekend targeting a privilege escalation vulnerability in Kaspersky Endpoint Security, dubbed HardBreacher. No CVE ID or CVSS score has been assigned publicly. Kaspersky told SecurityWeek the underlying issue is resolved and that the fix ships through automatic database updates, so an operator who has disabled or delayed database updates remains exposed. The same researcher’s prior drops — ShieldBreak and LegacyHive — targeted Windows and Microsoft Defender, and a few have gone on to be exploited in the wild.

“The interesting part about this is the Kaspersky completely loses it when you take control over the UI process, you can cause it to stop functioning, grant/block access to files its not supposed to, if the PoC succeeds, the entire operating system becomes a hot mess.” — Nightmare Eclipse

Source: HardBreacher PoC · SecurityWeek

Microsoft details “TerminalFix,” a ClickFix variant that ends in a reverse tunnel

Microsoft Threat Intelligence · August 29, 2026

Microsoft published analysis of a social-engineering campaign it calls TerminalFix, which serves fake Cloudflare CAPTCHA overlays on compromised websites, silently copies a malicious PowerShell command to the victim’s clipboard, and steers them into Windows Terminal or PowerShell rather than the Run dialog. The chain that follows uses DLL sideloading and steganographic payload extraction to plant a reverse-tunnel implant, giving the operator a route into the internal network — a materially worse outcome than the infostealer payloads typical of ClickFix. There is no vulnerability to patch here; the campaign relies entirely on user execution, and Microsoft’s post includes detection and hunting guidance.

“While traditional ClickFix campaigns direct victims to the Windows Run dialog, TerminalFix campaigns apply the same technique but direct users to Windows Terminal or PowerShell instead, increasing the likelihood that complex, multi-line scripts execute successfully.” — Microsoft Threat Intelligence

Source: Microsoft Security Blog · BleepingComputer

Silver Fox hides ValleyRAT inside signed Chinese adware

Kaspersky (Securelist) · August 31, 2026

Kaspersky documented a new ValleyRAT (Winos 4.0) distribution wave attributed to Silver Fox, built around QN Wallpaper — a real Chinese desktop-wallpaper tool that is adware in its unmodified form. The installer unpacks a modified copy and runs the signed QnWallpaper.exe, which sideloads a malicious libcef.dll from the same directory, so the backdoor executes inside a legitimately signed process. The abuse is compounded by users adding adware of this kind to their antivirus exclusions. Kaspersky recorded more than 100,000 detections of ValleyRAT and related malware during 2026 across over 1,500 unique users, primarily in China and India. No CVE is involved.

“This case is a clear example of how adware and affiliate networks can turn out to be far more dangerous than they appear.” — Kaspersky

Source: Securelist

Cronos halts its blockchain after a ~$75M Tectonic lending exploit

Cronos / Tectonic · August 30, 2026

An attacker inflated the price of the thinly traded TONIC governance token roughly 100x in about 20 minutes, deposited the revalued tokens into the Tectonic lending protocol, and borrowed real assets against the manipulated collateral — a price-oracle manipulation in the mold of the 2022 Mango Markets attack rather than a code vulnerability with a CVE. Validators halted the Cronos chain in response, limiting the attacker to roughly $6 million bridged to Ethereum out of an estimated $75 million affected. The network has since resumed trading; Tectonic’s total value locked fell from about $121.7 million on August 26 to roughly $3 million.

Source: The Block · CoinDesk · BleepingComputer

This brief covers the trailing ~48 hours (August 29–31, 2026).

Primary sources:

• VulnCheck — CVE-2026-66066 initial access intelligence
• Ruby on Rails — CVE-2026-66066 forensic tooling
• Sygnia — Fire Ant Evolves: From Hypervisors to Trusted Infrastructure
• Nightmare Eclipse — HardBreacher PoC
• Microsoft Threat Intelligence — TerminalFix campaign
• Kaspersky Securelist — ValleyRAT spreading disguised as adware