The Consensus Security Vulnerability Alert

ISC provides a free analysis and warning service to thousands of Internet users and organizations, and is actively working with Internet Service Providers to fight back against the most malicious attackers. https://isc.sans.edu/about.html

Microsoft Patch Tuesday August 2026

Published: 2026-08-11

Last Updated: 2026-08-11 17:54:49 UTC

by Renato Marinho (Version: 1)

This month we got patches for 418 vulnerabilities. Of these, 62 are critical, 1 is being exploited in the wild, and 2 were publicly disclosed as zero-days. Notable fixes include Windows privilege escalation, container tampering, and critical QUIC and DNS Server remote code execution bugs.

A few vulnerabilities worth mentioning:

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability (CVE-2026-68820)

This Important-severity elevation of privilege vulnerability is listed by Microsoft as exploited in the wild but not publicly disclosed, and it has a CVSS score of 7.0. The flaw is a use-after-free issue in the Windows Ancillary Function Driver for WinSock affecting supported Windows client and server versions; a locally authenticated attacker with low privileges could run a specially crafted application to trigger a race condition and, if successful, gain SYSTEM privileges. The CVSS vector reflects local access, low privileges required, no user interaction, and high attack complexity because exploitation requires winning that race condition. Administrators should prioritize applying the relevant Windows security updates, particularly on systems where local code execution by untrusted users is possible, and monitor for suspicious privilege-escalation activity.

Windows User Profile Service Elevation of Privilege Vulnerability (CVE-2026-62832)

Microsoft says this vulnerability has been publicly disclosed but has not been exploited in the wild, making it a zero-day disclosure without confirmed exploitation at this time. Rated Important with a CVSS score of 7.8, this Windows User Profile Service flaw is an improper link resolution, or “link following,” issue that could allow a local authenticated attacker to elevate privileges. To exploit it, an attacker would need credentials for another local account and could run a specially crafted application to load another user’s registry hive; successful exploitation could allow access to or modification of another user’s data and ultimately grant administrator privileges. User interaction is not required. Administrators should prioritize applying the Microsoft security updates across affected Windows 10, Windows 11, Windows Server 2022, and Windows Server 2025 systems, and should also limit local account reuse and monitor for unusual registry hive loading or profile service activity.

Windows Container Isolation FS Filter Driver (unionfs.sys) Tampering Vulnerability (CVE-2026-72971)

This vulnerability was publicly disclosed before Patch Tuesday, making it a zero-day, but Microsoft says it has not been exploited in the wild; it is rated Important with a CVSS score of 5.5. The flaw is an improper link-resolution, or “link following,” issue in the Windows Container Isolation file system filter driver, unionfs.sys, affecting Windows 11 Version 26H1 on x64 and ARM64 systems. A local, authenticated attacker could exploit it with low complexity and no user interaction to tamper with files, resulting in high integrity impact, though Microsoft rates confidentiality and availability impact as none. Administrators should apply the Windows updates that correct the driver’s link-handling behavior, particularly on systems using Windows containers or container isolation features.

Microsoft QUIC Remote Code Execution Vulnerability (CVE-2026-62815)

This Critical Microsoft QUIC remote code execution vulnerability is not listed as exploited in the wild or publicly disclosed. It carries a CVSS score of 9.8 and is a use-after-free flaw that could allow an unauthenticated remote attacker to send a specially crafted packet to an affected service over the network and execute code on the target system, with no user interaction required. Affected platforms include Windows 11 and Windows Server 2022/2025, including Server Core installations. Administrators should prioritize applying the Microsoft update, especially on systems exposing QUIC-enabled services to untrusted networks, and consider limiting network exposure where patching cannot be completed immediately.

Windows DNS Server Remote Code Execution Vulnerability (CVE-2026-62878)

Microsoft reports that CVE-2026-62878 is neither exploited in the wild nor publicly disclosed; it is a Critical Windows DNS Server remote code execution vulnerability with a CVSS score of 9.8. The flaw is a stack-based buffer overflow in Windows DNS that can be triggered remotely by an unauthenticated attacker sending a specially crafted packet to an affected service over the network, with no user interaction required, potentially allowing code execution on the target DNS server. Affected systems include multiple Windows Server releases from 2012 through 2025, as well as listed Windows 10 versions where the vulnerable component is present. Administrators should apply Microsoft’s security updates promptly, especially on DNS servers, and reduce exposure by limiting DNS service access to trusted networks where possible, blocking unnecessary inbound traffic at firewalls, and monitoring DNS servers for crashes or anomalous traffic patterns.

This was a summary of Microsoft’s monthly updates highlighting some important vulnerabilities. Prioritize the exploited WinSock privilege-escalation flaw, then the publicly disclosed User Profile Service and unionfs[.]sys issues, and patch internet-exposed QUIC services and DNS servers quickly due to remote code execution risk.

A detailed list of this month's vulnerabilities follows below ...

Read the full entry: https://isc.sans.edu/diary/Microsoft+Patch+Tuesday+August+2026/33236/

Linux Shell Forensic: Let?s Dive Into Atuin!

Published: 2026-08-07

Last Updated: 2026-08-07 07:22:28 UTC

by Xavier Mertens (Version: 1)

UNIX systems (including Linux) are well-known to record a lot of activities in many different locations. But there is one domain where they definitely lack of "modern" logging: shells. Most shells provide an historization of the typed commands through a flat file in the $HOME directory (ex: $HOME/[.]bash_history). They suffer of multiple problems:

*History is stored in memory and the file is updated when the shell exits

*The order of commands is not reliable

*There is no timestamps (by default)

*The size of history can be limited (see $HISTFILESIZE)

*Can be removed/tampered by the user

Note that if you use sudo to switch to another user (usually root), events are sent to the classic logging mechanism (syslog or journal) ...

To search across the history, the shell user can use the “reverse-i-search” feature available in Bash (but also other shells). This is the built-in incremental search through your command history, bound to CTRL-R. You hit it, start typing part of a command you ran before, and bash walks backwards through history showing the most recent match as you type — hence "reverse" (newest-first) and "i" for incremental (it updates on every keystroke) ...

Read the full entry: https://isc.sans.edu/diary/Linux+Shell+Forensic+Lets+Dive+Into+Atuin/33226/

Don't Revoke That Token Yet: Inside the keyv/cacheable npm Worm

Published: 2026-08-05

Last Updated: 2026-08-05 17:56:15 UTC

by Renato Marinho (Version: 1)

When you learn that a compromised package executed on one of your build hosts, muscle memory takes over: revoke the npm token, rotate the GitHub PAT, cycle the cloud keys. That reflex has been correct in almost every supply-chain incident I have worked. In the keyv/cacheable compromise that has been unfolding since yesterday, it is the one thing you should not do first — because revoking the stolen token is exactly what arms the payload.

Let me back up.

What happened

On August 4, 2026, an attacker took over the maintainer account behind the widely used keyv and cacheable npm namespaces — caching libraries that sit near the bottom of a very large number of dependency trees — and published trojanized releases. Socket's Threat Research team, which did the primary analysis, places the first malicious release ... at 09:35 UTC. The poisoned versions ship a preinstall hook ...

Read the full entry: https://isc.sans.edu/diary/Dont+Revoke+That+Token+Yet+Inside+the+keyvcacheable+npm+Worm/33218/

Scans for Solana (Surfpool?) Endpoints (2026.08.10)

https://isc.sans.edu/diary/Scans+for+Solana+Surfpool+Endpoints/33230/ 22

Seconds to Compromise: How Automated SSH Actors Move From Login to Persistence Before You Can Blink [Guest Diary] (2026.08.06)

https://isc.sans.edu/diary/22+Seconds+to+Compromise+How+Automated+SSH+Actors+Move+From+Login+to+Persistence+Before+You+Can+Blink+Guest+Diary/33220/

The list is assembled by pulling recent vulnerabilities from NIST NVD, Microsoft, Twitter mentions of vulnerabilities, ISC Diaries and Podcast, and the CISA list of known exploited vulnerabilities. There are also some unscored, but significant, vulnerabilities at the end. This includes vulnerabilities that have not been added to the NVD yet.

CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Product: Microsoft Windows Ancillary Function Driver for WinSock

CVSS Score: 7.0

** KEV since 2026-08-11 **

CISA KEV: https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-68820

ISC Diary: https://isc.sans.edu/diary/33236

MSFT Details: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68820

CVE-2026-72898 - Metabase is vulnerable to remote, unauthenticated SQL injection via the '/reset_password' endpoint, allowing attackers to gain administrator access to the connected instance.

Product: Metabase

CVSS Score: 0

** KEV since 2026-08-11 **

CISA KEV: https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-72898

CVE-2026-20349 - The Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software are vulnerable to unexpected device reloads through a crafted HTTP request, leading to a denial of service (DoS) condition.

Product: Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software

CVSS Score: 0

** KEV since 2026-08-11 **

CISA KEV: https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-20349

CVE-2026-18556 - N-able N-central is vulnerable to authentication bypass via an alternate path or channel, allowing unauthorized access without proper authentication through version 2026.1.

Product: N-Able N-Central

CVSS Score: 0

** KEV since 2026-08-04 **

CISA KEV: https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-18556

CVE-2026-61920, CVE-2026-62787, CVE-2026-62817, CVE-2026-62820, CVE-2026-62878 (CVSS score 9.8), CVE-2026-65789 - Windows DNS Server Remote Code Execution Vulnerabilities

Product: Microsoft Windows DNS

CVSS Scores: 6.6 - 9.8

ISC Diary: https://isc.sans.edu/diary/33236

MSFT Details:

- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-61920

- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62787

- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62817

- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62820

- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62878

- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65789

CVE-2026-62769, CVE-2026-62778, CVE-2026-62881, CVE-2026-62883, CVE-2026-65795, CVE-2026-65797, CVE-2026-65798, CVE-2026-65799, CVE-2026-70304, CVE-2026-70330 - Windows DNS Elevation of Privilege Vulnerabilities

Product: Microsoft Windows DNS

CVSS Score2: 6.7 - 8.1

ISC Diary: https://isc.sans.edu/diary/33236

MSFT Details:

- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62769

- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62778

- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62881

- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62883

- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65795

- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65797

- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65798

- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65799

- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70304

- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70330

CVE-2026-62714, CVE-2026-62715, CVE-2026-62716, CVE-2026-62718, CVE-2026-62720, CVE-2026-62742, CVE-2026-62745, CVE-2026-62761, CVE-2026-62776, CVE-2026-62803, CVE-2026-62807, CVE-2026-62812, CVE-2026-62814, CVE-2026-62823 (CVSS score 8.8) - Multiple vulnerabilities in Windows DHCP Server

Product: Microsoft Windows DHCP Server

CVSS Scores: 6.5 - 8.8

ISC Diary: https://isc.sans.edu/diary/33236

MSFT Details:

- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62714 (information disclosure)

- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62715 (information disclosure)

- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62716 (information disclosure)

- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62718 (information disclosure)

- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62720 (information disclosure)

- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62742 (information disclosure)

- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62745 (information disclosure)

- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62761 (elevation of privilege)

- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62776 (elevation of privilege)

- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62803 (elevation of privilege)

- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62807 (elevation of privilege)

- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62812 (elevation of privilege)

- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62814 (information disclosure)

- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62823 (remote code execution)

CVE-2026-61361, CVE-2026-62736, CVE-2026-62755, CVE-2026-65785 - Multiple vulnerabilities in Windows DHCP Client

Product: Microsoft Windows DHCP Client

CVSS Score: 6.5 - 7.8

ISC Diary: https://isc.sans.edu/diary/33236

MSFT Details:

- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-61361 (remote code execution)

- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62736 (elevation of privilege)

- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62755 (elevation of privilege)

- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65785 (denial-of-service)

CVE-2026-61356, CVE-2026-61364, CVE-2026-61365, CVE-2026-61367, CVE-2026-62692 - Windows Remote Desktop Services Elevation of Privilege Vulnerabilities

Product: Microsoft Windows Remote Desktop Services

CVSS Score: 7.8

ISC Diary: https://isc.sans.edu/diary/33236

MSFT Details:

- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-61356

- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-61364

- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-61365

- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-61367

- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62692

CVE-2026-59134, CVE-2026-61352, CVE-2026-61363, CVE-2026-61918, CVE-2026-61921, CVE-2026-61924, CVE-2026-62824 (CVSS score 8.8) - Windows Remote Desktop Client Information Disclosure and Remote Code Execution Vulnerabilities

Product: Microsoft Widows Remote Desktop Client

CVSS Scores: 6.5 - 8.8

ISC Diary: https://isc.sans.edu/diary/33236

MSFT Details:

- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-59134 (remote code execution)

- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-61352 (remote code execution)

- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-61363 (remote code execution)

- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-61918 (information disclosure)

- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-61921 (information disclosure)

- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-61924 (information disclosure)

- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62824 (remote code execution)

CVE-2026-57105, CVE-2026-58639, CVE-2026-62827, CVE-2026-62829, CVE-2026-62837, CVE-2026-62839, CVE-2026-62917, CVE-2026-63512, CVE-2026-63514, CVE-2026-63516, CVE-2026-63520, CVE-2026-64897,CVE-2026-64900, CVE-2026-64901, CVE-2026-64902, CVE-2026-64916, CVE-2026-64921, CVE-2026-64922, CVE-2026-65658, CVE-2026-65663, CVE-2026-65660, CVE-2026-65665, CVE-2026-66805, CVE-2026-66808, CVE-2026-70306 (CVSS score 9.3), CVE-2026-70321, CVE-2026-70324, CVE-2026-70326, CVE-2026-70355 - Multiple Vulnerabilities in Microsoft SharePoint Server

Product: Microsoft SharePoint Server

CVSS Scores: 4.6 - 9.3

ISC Diary: https://isc.sans.edu/diary/33236

MSFT Details:

- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57105 (spoofing)

- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58639 (spoofing)

- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62827 (elevation of privilege)

- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62829 (spoofing)

- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62837 (information disclosure)

- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62839 (spoofing)

- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62917 (spoofing)

- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63512 (tampering)

- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63514 (remote code execution)

- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63516 (spoofing)

- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63520 (remote code execution)

- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64897 (spoofing)

- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64900 (spoofing)

- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64901 (remote code execution)

- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64902 (spoofing)

- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64916 (spoofing)

- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64921 (elevation of privilege)

- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64922 (spoofing)

- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65658 (remote code execution)

- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65663 (remote code execution)

- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65660 (spoofing)

- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65665 (remote code execution)

- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66805 (remote code execution)

- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66808 (remote code execution)

- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70306 (spoofing)

- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70321 (remote code execution)

- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70324 (elevation of privilege)

- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70326 (elevation of privilege)

- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70355 (elevation of privilege)

CVE-2026-53413, CVE-2026-53414, CVE-2026-53415 - Multiple vulnerabilities in Zoom Clients.

Product: Zoom Video Communications Zoom Clients

CVSS Scores: 6.5 - 8.3

Zoom Bulletins:

- https://www.zoom.com/en/trust/security-bulletin/zsb-26015/ (buffer over-write)

- https://www.zoom.com/en/trust/security-bulletin/zsb-26016/ (buffer over-read)

- https://www.zoom.com/en/trust/security-bulletin/zsb-26017/ (use after free)

ISC Podcast: https://isc.sans.edu/podcast/10048

CVE-2026-34191 - Apache Portable Runtime Utility: SQL Injection in apr_dbd_oracle

Product: Apache Portable Runtime Utility

CVSS Score: 9.1

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-34191

NVD References: https://lists.apache.org/thread/8xch90zogywwpo5wnsf4o088mkxy4qtf

CVE-2026-50540 - Kata Containers: Config Path Annotation Arbitrary File Loading

Product: Kata Containers

CVSS Score: 9.6

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-50540

NVD References: https://github.com/kata-containers/kata-containers/security/advisories/GHSA-mp2j-xm59-qfgw

CVE-2026-62815 - Microsoft QUIC Remote Code Execution Vulnerability

Product: Microsoft QUIC

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-62815

ISC Diary: https://isc.sans.edu/diary/33236

MSFT Details: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62815

CVE-2026-72971 - Windows Container Isolation FS Filter Driver (unionfs.sys) Tampering Vulnerability

Product: Microsoft Windows Container Isolation FS Filter Driver

CVSS Score: 5.5

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-72971

ISC Diary: https://isc.sans.edu/diary/33236

MSFT Details: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72971

CVE-2026-62832 - Windows User Profile Service Elevation of Privilege Vulnerability

Product: Microsoft Windows User Profile Service

CVSS Score: 7.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-62832

ISC Diary: https://isc.sans.edu/diary/33236

MSFT Details: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62832

CVE-2026-40639 - Dell Client Platform BIOS has a weak password encoding vulnerability that could allow an attacker with physical access to gain elevated privileges.

Product: Dell Client Platform BIOS

CVSS Score: 0

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-40639

ISC Podcast: https://isc.sans.edu/podcast/10042

CVE-2026-54489 - Dell Virtual Storage Integrator for VMware vSphere Client, versions prior to 10.11.1.0, are vulnerable to session hijacking and sensitive information disclosure, allowing unauthenticated attackers to fully impersonate authenticated users, including administrators.

Product: Dell Virtual_Storage_Integrator

CVSS Score: 9.1

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-54489

NVD References: https://www.dell.com/support/kbdoc/en-us/000496035/dsa-2026-335-security-update-for-dell-virtual-storage-integrator-for-vmware-vsphere-client-multiple-vulnerabilities

CVE-2026-67261 - Dell Virtual Storage Integrator for VMware vSphere Client, versions prior to 10.11.1.0, is susceptible to an OS Command Injection vulnerability in the IAPI component, allowing remote attackers to execute arbitrary OS commands with root privileges and potentially gain complete system takeover.

Product: Dell Virtual_Storage_Integrator

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-67261

NVD References: https://www.dell.com/support/kbdoc/en-us/000496035/dsa-2026-335-security-update-for-dell-virtual-storage-integrator-for-vmware-vsphere-client-multiple-vulnerabilities

CVE-2026-18685, CVE-2026-18686 - GL.iNet GL-MT3000 up to 4.4.5 is vulnerable to remote command injection vulnerabilities

Product: GL.iNet GL-MT3000

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-18685

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-18686

CVE-2026-61515 - Puwell IP Camera firmware versions 2.x through 4.x are vulnerable to unauthenticated command injection, allowing remote attackers to execute arbitrary operating system commands through the DebugShell interface on TCP port 34567.

Product: Puwell IP Camera

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-61515

CVE-2025-29296 - The H3C Magic BE18000 V200R007, H3C NX400 V100R015, H3C Magic NX30 Pro V100R0011, H3C Magic R3010 V100R009, H3C Magic NX15 V100R017, H3C Magic R1510 V100R016, H3C NE36 Pro V100R002 and H3C MC102G HM1A0V200R010 devices are prone to multiple command injection vulnerabilities in the /api/esps request handler, potentially allowing remote attackers to execute arbitrary commands as root and gain full control of the affected device.

Product: H3C Magic BE18000 V200R007

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-29296

CVE-2026-15733 - WGDashboard version 4.2.3 and earlier is vulnerable to Remote Code Execution (RCE) due to multiple OS command injections, allowing authenticated attackers to run arbitrary commands as root.

Product: WGDashboard

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-15733

CVE-2026-71944 through CVE-2026-71958 - Mutiple vulnerabilities in D-Link DWR-M961 devices

Product: D-Link DWR-M961

CVSS Score: 9.8

NVD References: https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10512

CVE-2026-71983 - Command injection vulnerabilities in MSI Radix AXE6600 router firmware version v781521

Product: MSI Radix AXE6600 router

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-71983

CVE-2026-71984 through CVE-2026-71993 - MSI Radix AXE6600 router firmware version v781521 is vulnerable to remote command injection via the urlfilter function.

Product: MSI Radix AXE6600 router

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-71984

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-71985

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-71986

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-71987

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-71988

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-71989

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-71990

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-71991

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-71992

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-71993

CVE-2026-69098 - Kotaemon through 0.12.0 has an insecure deserialization vulnerability in the check_connection endpoint, allowing unauthenticated attackers to execute remote code with application process privileges.

Product: Kotaemon

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-69098

CVE-2026-69110 - OpenCode Studio before version 2.4.4 allows unauthenticated remote attackers to access and delete files via specific API endpoints.

Product: OpenCode Studio

CVSS Score: 9.1

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-69110

CVE-2017-20241, CVE-2017-20242, CVE-2026-49435 - Multiple vulnerabilities in Keysight IxChariot Endpoint

Product: Keysight IxChariot Endpoint

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2017-20241 (heap-based buffer overflow)

NVD: https://nvd.nist.gov/vuln/detail/CVE-2017-20242 (stack-based buffer overflow)

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-49435 (stack-based buffer overflow)

CVE-2026-48168 - PraisonAI's bundled Claude GitHub Actions workflow in versions prior to 4.6.40 is vulnerable to command injection, allowing an outside contributor to execute arbitrary shell code and potentially compromise repository privileges.

Product: PraisonAI multi-agent teams system

CVSS Score: 10.0

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-48168

NVD References: https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-xp85-6wwf-r67c

CVE-2026-67870 - In open62541 v1.5.5, a remote attacker can exploit an incomplete validation flaw in the server-side AddReferences implementation to manipulate target nodes.

Product: open62541

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-67870

CVE-2026-66909 - Apache CXF's JMS transport vulnerability allows attackers to submit malicious serialized objects, potentially leading to denial of service or remote code execution.

Product: Apache CXF

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-66909

NVD References: https://lists.apache.org/thread/lr5d4tg6tf7j29jmw8wt242oowonjqpx

CVE-2026-61466 - Apache CXF's OAuth2 Dynamic Client Registration endpoint allows clients to self-assign privileged scopes without proper validation, leading to a security vulnerability.

Product: Apache CXF

CVSS Score: 9.1

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-61466

NVD References: https://lists.apache.org/thread/2l1r16g79tpxd7fzrzr2q9oscwrjgljs

CVE-2026-63687 - Apache CXF's JwtRequestCodeFilter has a vulnerability that allows a client to tamper with security-sensitive parameters, compromising PKCE integrity and OpenID Connect replay protection.

Product: Apache CXF

CVSS Score: 9.1

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-63687

NVD References: https://lists.apache.org/thread/drcq4chmt0btx86f17o47j17r378hzpw

CVE-2026-65583 - Apache CXF’s OIDC relying-party token validation is vulnerable to authentication bypass using crafted self-issued ID tokens that skip required claim checks, but this issue has been resolved in versions 4.2.3, 4.1.8, and 3.6.12.

Product: Apache CXF

CVSS Score: 9.1

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-65583

NVD References: https://lists.apache.org/thread/fzj8yzgfl53gclxrcdrnrx3grcpkq51j

CVE-2026-68079 - Apache CXF's DefaultEncryptingCodeDataProvider allows captured authorization codes to be redeemed multiple times, violating RFC requirements, and users should upgrade to versions 4.2.3, 4.1.8, or 3.6.12 to fix this issue.

Product: Apache CXF

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-68079

NVD References: https://lists.apache.org/thread/6m06gdqz4rxhy9g90qz9lyqx2gqmf13o

CVE-2026-53975, CVE-2026-53976 - OpenChamber 1.11.7 is vulnerable to unauthenticated remote code execution via crafted POST requests to the /api/fs/exec endpoint, due to lack of input validation and authentication bypass when UI_PASSWORD is not configured, allowing attackers to execute OS commands and retrieve command output.

Product: OpenChamber 1.11.7

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-53975 (unauthenticated remote code execution)

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-53976 (path traversal)

CVE-2026-3418 - The System REST API allows authenticated publishers to upload files to server-accessible locations, potentially leading to remote code execution.

Product: System REST API

CVSS Score: 9.1

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-3418

NVD References: https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2026/WSO2-2026-5146/

CVE-2026-70558 - Dinky allows arbitrary file writing via its POST /download/uploadFromRsByLocal handler, exposing the application to potential attacker exploitation.

Product: Dinky's POST /download/uploadFromRsByLocal handler

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-70558

CVE-2026-71558 - Apache Fory C++ is vulnerable to a heap type confusion issue during deserialization, allowing for potential denial of service or arbitrary code execution.

Product: Apache Fory

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-71558

NVD References: https://lists.apache.org/thread/oywndv60jwqdv6j37t7bc1qbcc4b235r

CVE-2026-71560 - Apache Fory C++ deserialization vulnerability allows for out-of-bounds reads when processing certain input payloads.

Product: Apache Fory

CVSS Score: 9.1

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-71560

NVD References: https://lists.apache.org/thread/xl2g544kctbgozccnj35qts43p452y5x

CVE-2026-19264 - Postiz is vulnerable to unauthenticated remote attackers reading sensitive files and forging non-expiring sessions as any user.

Product: Postiz social media scheduling tool

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-19264

CVE-2026-14526 - The AI Copilot – Content Generator plugin for WordPress is vulnerable to authorization bypass, allowing unauthenticated attackers to achieve full site takeover by creating a new administrator-level user account.

Product: WordPress AI Copilot – Content Generator plugin

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-14526

CVE-2026-72567 - AsyncFuncAI/deepwiki-open through commit 16f35a0 is vulnerable to unauthenticated remote attackers gaining root privileges by manipulating file paths in the wiki-cache endpoint.

Product: AsyncFuncAI deepwiki-open

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-72567

CVE-2026-72589 - alseambusher/crontab-ui through 0.4.2 is vulnerable to an OS command injection flaw, allowing an unauthenticated remote attacker to execute arbitrary system commands via a crafted crontab database file.

Product: alseambusher crontab-ui

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-72589

CVE-2026-72590 - Crontab-ui through 0.4.2 allows an unauthenticated remote attacker to inject arbitrary cron job entries via crafted GET requests.

Product: alseambusher crontab-ui

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-72590

CVE-2026-13206 - Zyxel Networks WAH7601 is vulnerable to OS command injection through 20072026.

Product: Zyxel Networks WAH7601

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-13206

CVE-2026-18753 - The product firmware features an embedded RSA private key used by the Lighttpd web server, which if exposed, can compromise HTTPS security by allowing malicious actors to decrypt traffic and spoof servers.

Product: Lighttpd product firmware

CVSS Score: 9.1

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-18753

CVE-2026-18754 - The product firmware features an embedded RSA private key used by the Lighttpd web server, which if exposed, can compromise HTTPS security by allowing malicious actors to decrypt traffic and spoof servers.

Product: Lighttpd product firmware

CVSS Score: 9.1

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-18754

CVE-2026-10050 - Jetty's Digest authentication server-side component in Eclipse uses ISO-8859-1 to encode passwords, potentially allowing for password impersonation by replacing non-ISO-8859-1 characters with `?`.

Product: Eclipse Jetty

CVSS Score: 9.1

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-10050

CVE-2026-61514 - Puwell IP Camera firmware versions 2.x through 4.x allow unauthenticated attackers to access device functions via TCP port 23456 due to an authentication bypass vulnerability.

Product: Puwell IP Camera

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-61514

CVE-2026-25289 - Memory Corruption when processing Device Capability Extended attributes in certain NAN Service Discovery Frames with invalid length values.

Product: Qualcomm Sm7550P

CVSS Score: 9.6

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-25289

NVD References: https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2026-bulletin.html

CVE-2026-63455, CVE-2026-63456 - HPE Networking SD-WAN Orchestrator is vulnerable to multiple flaws in its REST API interface, enabling an unauthenticated remote attacker to bypass authentication and gain unauthorized access to sensitive system functions and data.

Product: HPE Networking SD-WAN Orchestrator

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-63455

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-63456

CVE-2026-61484 - Apache Lucy is vulnerable to deserialization of untrusted data when assigned, affecting all versions, with no plans for fixes due to project retirement.

Product: Apache Lucy

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-61484

NVD References: https://lists.apache.org/thread/942t3pwgz2nrhnklrtyt5zr7g4wqc9cb

CVE-2026-61486 - Apache Lucy is vulnerable to a stack-based buffer overflow when assigned, affecting all versions of the retired project.

Product: Apache Lucy

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-61486

NVD References: https://lists.apache.org/thread/z88yv1z19ppsd4td4nqtg7q72fvqh01b

CVE-2026-10059 - Multicluster Engine for Kubernetes ClusterCurator controller allows tenant administrators to exploit a privilege escalation vulnerability by creating a namespaced ClusterCurator.

Product: Multicluster Engine for Kubernetes ClusterCurator

CVSS Score: 9.1

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-10059

CVE-2026-10090 - Red Hat Advanced Cluster Management for Kubernetes (ACM) allows a user with "edit" privileges to escalate to full cluster-admin privileges by creating a Channel and Subscription pointing to a Helm repository they control, due to a flaw in the Application Subscription controller.

Product: Red Hat Advanced Cluster Management for Kubernetes (ACM)

CVSS Score: 9.9

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-10090

CVE-2026-44945 - Rancher is vulnerable to privilege escalation allowing authenticated users with default roles to gain full administrative access to the control plane and downstream clusters.

Product: Rancher

CVSS Score: 9.1

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-44945

CVE-2026-60053 - Apache Answer is vulnerable to insufficient session expiration in versions up to 2.0.1, allowing administrative API keys to remain usable even after demotion or account deactivation until explicitly removed, with a fix available in version 2.0.2.

Product: Apache Answer

CVSS Score: 9.1

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-60053

NVD References: https://lists.apache.org/thread/2vkcj3bdvso6cywnklt2vtkc2m4o0b5c

CVE-2026-7329, CVE-2026-7557, CVE-2026-8709, CVE-2026-9190, CVE-2026-9192, CVE-2026-9193, CVE-2026-9195 - Multiple vulnerabilities in Progress MarkLogic Server before 11.3.6 and 12.0.3.

Product: Progress MarkLogic Server

CVSS Score: 9.1 - 9.9

NVD References: https://community.progress.com/s/article/Marklogic-Critical-Security-Alert-Bulletin-August-2026

CVE-2026-20267, CVE-2026-20272 - Vulnerabilities in Cisco IOS XE Software contains vulnerabilities related to improper access control issues categorized under CWE-284, and improper neutralization of special elements, categorized under CWE-74

Product: Cisco IOS XE Software

CVSS Scores: 9.0 - 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-20267

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-20272

NVD References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-iosxe-V8NMuMZJ

CVE-2026-20303, CVE-2026-20304, CVE-2026-20310 - Cisco Catalyst SD-WAN has multiple vulnerabilities related to improper input validation issues, improper access control issues, and improper link resolution before file access issues.

Product: Cisco Catalyst SD-WAN

CVSS Scores: 9.1 - 9.9

NVD References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-sdwan-faLcR3K

CVE-2026-70426 - Jenkins versions 2.575 and earlier, LTS 2.568.1 and earlier, are vulnerable to bypassing the JEP-200 deserialization filter for classes on the Jenkins core classpath.

Product: Jenkins

CVSS Score: 9.0

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-70426

NVD References: https://www.jenkins.io/security/advisory/2026-08-05/#SECURITY-3911

CVE-2026-70615 - Boringproxy through 0.10.0 has a newline injection vulnerability that lets attackers inject arbitrary lines into the server's account SSH authorized_keys file, potentially leading to unauthorized access and exposure of sensitive data.

Product: Boringproxy

CVSS Score: 9.9

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-70615

CVE-2025-63823 - The Safetipin Android Application 5.2.1 is vulnerable to hardcoded credentials in the authentication module, enabling remote attackers to bypass authentication and access user accounts using predictable OTP values.

Product: My Safetipin Android Application

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-63823

NVD References: https://github.com/Leoccc98/cve-reports/blob/main/advisories/CVE-2025-63823/README.md

CVE-2026-71319 - Nuxt version prior to 3.3.1 has a vulnerability in the bidirectional RPC channel over the Vite HMR WebSocket in Nuxt DevTools.

Product: Nuxt DevTools

CVSS Score: 9.6

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-71319

NVD References: https://github.com/nuxt/nuxt/security/advisories/GHSA-279x-mwfv-vcqv

CVE-2026-52466 - Open Library Foundation VuFind v11.0.3 and v4.1 is vulnerable to incorrect access control, allowing unauthorized users to execute functions despite receiving a denial response.

Product: Open Library Foundation VuFind

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-52466

CVE-2025-15039 - The Conditional Authentication (Adaptive Authentication) script allows attackers to bypass intermediate authentication challenges and gain unauthorized access to user accounts when specific criteria are met.

Product: Adaptive Authentication

CVSS Score: 9.4

NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-15039

NVD References: https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2026/WSO2-2025-4973/

CVE-2026-1728 - WSO2 products are vulnerable to unrestricted tokens issued to low-privileged users, enabling unauthorized access to Admin REST APIs.

Product: WSO2

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-1728

NVD References: https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2026/WSO2-2026-5077/

CVE-2026-5430 - The JWT authentication mechanism of <product> accepts tokens signed with unsupported algorithms, leading to unauthorized access and potential compromise of administrative accounts.

Product: WSO2

CVSS Score: 10.0

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-5430

NVD References: https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2026/WSO2-2026-5328/

CVE-2025-14561 - WSO2 API Manager: Failure to enforce tenant isolation correctly in multi-tenant deployments allows a privileged user to impact other tenants by exposing or modifying API Metadata through Publisher REST APIs.

Product: WSO2

CVSS Score: 9.0

NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-14561

NVD References: https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2026/WSO2-2025-4918/

CVE-2026-12605 - Eclipse GlassFish version 8.0.x before 8.0.4 allows for a full unauthenticated takeover of the domain due to a CSRF and SSRF vulnerability in the DownloadServlet ContentSources.

Product: Eclipse GlassFish

CVSS Score: 9.6

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-12605

CVE-2026-15732, CVE-2026-15734 - Vulnerabilities in WGDashboard version 4.2.3 and earlier

Product: WGDashboard

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-15732

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-15734

CVE-2026-18367 - Sophos Endpoint and Sophos Home for macOS are vulnerable to privilege escalation, enabling local users to execute root-level code on older versions.

Product: Sophos Endpoint and Sophos Home for macOS

Sophos Endpoint for macOS

CVSS Score: 9.3

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-18367

NVD References: https://www.sophos.com/security-advisories/sophos-sa-20260806-ep-macos-lpe

CVE-2026-53984 - Ground Station prior to 0.6.0 is vulnerable to an unauthenticated database-destruction and arbitrary-data-injection attack through the Socket.IO server's database_backup event handler.

Product: Ground Station 0.6.0

CVSS Score: 9.1

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-53984

NVD References: https://github.com/sgoudelis/ground-station/security/advisories/GHSA-mjp8-x6h7-229q

CVE-2026-67622 - Flowise through 3.1.4 has an insecure direct object reference vulnerability in the OpenAI Assistants integration, allowing authenticated attackers to access credentials from other workspaces without verification and carry out various malicious actions.

Product: Flowise OpenAI Assistants

CVSS Score: 9.9

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-67622

NVD References: https://github.com/Caycon/cve-advisories/blob/main/2026/Flowise/CVE-2026-67622.md

CVE-2026-67688 - ICS-Park Smart Park Management System v2.0 is vulnerable to unrestricted file upload, allowing remote attackers to execute arbitrary code.

Product: ICS Park Smart Park Management System v2.0

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-67688

CVE-2026-67689 - FineAdmin V1.0 is vulnerable to SQL Injection, allowing a remote attacker to execute arbitrary code through the `field` and `order` parameters in paginated list endpoints.

Product: FineAdmin V1.0

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-67689

References: https://github.com/qflksheep/FineAdmin.Mvc-ORDER-BY-Clause-SQL-Injection/blob/main/README.md

CVE-2026-71851 - Crypto-js version prior to 4.0.0 utilizes a non-cryptographically secure pseudorandom number generator, making recovery phrases vulnerable to enumeration attacks.

Product: Crypto-js

CVSS Score: 9.0

References: https://github.com/brix/crypto-js/security/advisories/GHSA-rg76-677x-56q9

CVE-2026-48039 - Meta Ads MCP's vulnerability in versions prior to 1.0.109 allows unauthenticated callers to invoke MCP tools without authentication, potentially exposing sensitive credentials.

Product: Meta Ads MCP

CVSS Score: 9.1

References: https://github.com/pipeboard-co/meta-ads-mcp/security/advisories/GHSA-9gw6-46qc-99vr

CVE-2026-61808 - LightRAG prior to version 1.5.5rc1 allows unauthenticated network attackers full access to indexed document content and API functionality.

Product: LightTAG

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-61808

References: https://github.com/HKUDS/LightRAG/security/advisories/GHSA-mmg5-8x8q-v934

CVE-2026-72564 - Pangolin v1.20.0 allows a remote attacker to access any organization's resources using a reissued access token from a different resource.

Product: Pangolin

CVSS Score: 9.6

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-72564

CVE-2026-72565 - Tencent APIJSON through 8.1.8 is vulnerable to a SQL injection, allowing unauthenticated remote attackers to access arbitrary database tables.

Product: Tencent APIJSON

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-72565

On July 19th and 20th, the Linux kernel project released patches for 432 different vulnerabilities. Many, if not all, of these vulnerabilities were discovered and fixed using AI tools. @Risk will not enumerate these vulnerabilities individually. Linux distributions will include these patches in future kernel updates. The Linux kernel team does not prioritize patches, and takes a quite liberal approach as to what it considers a vulnerability. For more details regarding the Linux kernel’s policy on assigning CVEs see: http://www.kroah.com/log/blog/2026/02/16/linux-cve-assignment-process/