frameworks · browsers · authentication flows
CISA added CVE-2026-85046, a V8 type-confusion bug that allows a remote attacker to execute arbitrary code inside the Chromium sandbox via a crafted HTML page. Affects Chrome, Edge, Opera, and other Chromium-based browsers. Google has shipped a fixed build.
Force-restart Chrome/Edge across engineering and admin workstations to pick up the fix — this is the browser your ops team uses to reach production consoles.
packages · build systems · dependency attacks
CVE-2026-63376: `toml.parse()` writes attacker-controlled keys onto Object.prototype via a __proto__ key-path desync that bypasses the parser's Object.create(null) hardening. A companion advisory (CVE-2026-77465) reports uncaught RangeError crashes on ~5KB deeply nested payloads. The `toml` package sees ~47M monthly npm downloads.
Grep your Node services and Next.js build tooling for direct or transitive use of `toml`; if any parses untrusted input (config uploads, tenant manifests), pin to the fixed version and add a depth/size guard in front of it.
kubernetes · cloud · network · ingress
no entries this week
wordpress · drupal · plugins · php frameworks
Wordfence reports in-the-wild exploitation of a critical unauthenticated arbitrary file upload flaw in Elementor Pro (~6M active installs), disclosed August 19. Unauthenticated attackers can upload executable PHP and achieve full site takeover. Patch is available; unpatched sites should be treated as compromised until proven otherwise.
If any Fruition-managed WordPress site runs Elementor Pro, verify the plugin is on the fixed version this week and run an IOC sweep against uploads/ and mu-plugins/ — exploitation is not theoretical.
Sixteen Drupal contrib advisories published September 2 include critical access-bypass issues in Jsonapi Role Access (<2.0.2, CVE-2026-84917 — XHR-mimicking requests bypass role checks) and Email/SMS/OTP Verification (<2.4.0, CVE-2026-84923/84924 — account takeover plus reflected XSS). Component blocks, AI Translate, Islandora, and Advanced Search also received fixes.
For any Drupal 10+ site using JSON:API with role-based restrictions or the OTP Verification module, patch this week — the JSON:API bypass is trivially reachable and OTP Verification allows unauthenticated account takeover.
Wordfence Argus found an unauthenticated arbitrary file upload in Gravity Forms (~1M active installs) that writes attacker-chosen extensions to a public temp upload directory, chainable to RCE. Disclosed August 9, patched in the current release.
Gravity Forms is common on airport and government marketing sites — audit composer.json and wp-content/plugins now and push the update alongside your Elementor Pro fixes.
Wordfence disclosed an unauthenticated second-order SQL injection in All-in-One WP Migration and Backup, installed on more than 5 million WordPress sites. Reported August 14; fix shipped in the plugin's current release.
This is one of the most-installed backup plugins on the planet. Inventory it across all managed WP tenants and force-upgrade — second-order SQLi means stored payloads may already be resident.
oauth · saml · iam · session attacks
CISA added CVE-2026-59822: BerriAI LiteLLM's MCP Streamable HTTP endpoint lets an unauthenticated attacker establish an authenticated MCP session using any Bearer token. Actively exploited. Any LiteLLM proxy exposed to a network the attacker can reach is effectively unauthenticated.
If a team stood up LiteLLM as an internal AI gateway, put it behind Auth0 or mTLS today and upgrade — treating MCP endpoints as trusted-internal is no longer safe.
active exploitation · breaches · ransomware
CISA added two SonicWall SMA1000 flaws to KEV: CVE-2026-83548 (unauthenticated SSRF) and CVE-2026-83549 (authenticated admin OS command injection leading to RCE). Exploitation follows earlier summer attacks on the same edge-device family. SonicWall has issued fixed firmware.
If any client still fronts internal apps with SMA1000, patch this week and rotate any admin credentials on the appliance — the SSRF is pre-auth and pairs cleanly with the command-injection bug for full compromise.
Threat actors exploited long-known ownCloud commodity CVEs (including CVE-2023-49105, freshly re-added to CISA KEV) to gain initial access to the Philippines' nuclear research agency, exfiltrating reactor databases, personnel records, and credential stores. Confirms ongoing mass exploitation of legacy ownCloud installs.
Any lingering ownCloud instance on a client network is now a documented initial-access vector for state-adjacent operators — decommission or fully patch, and rotate any credentials it stored.
CISA added CVE-2026-82329 to KEV: an improper-authentication flaw in JFrog Artifactory that, under default configuration, allows an unauthenticated network-reachable attacker to obtain administrative privileges. A second Artifactory path-traversal (CVE-2026-66384) was also added the prior week.
If your build pipeline uses Artifactory, confirm it is not reachable from the public internet and apply JFrog's fixed release — an admin-level bypass on your artifact store is a supply-chain event, not an infra bug.
CISA KEV added CVE-2026-49869 in Kestra OSS, an OS command injection that lets an unauthenticated remote attacker create and execute arbitrary workflows without credentials. Any exposed Kestra instance should be considered compromised until inspected.
If any team is running Kestra for data or CI orchestration, get it behind SSO/VPN today — the exploited path is fully unauthenticated workflow creation, which is effectively RCE on your orchestrator host.
CISA added CVE-2026-81578 (missing authentication for critical function) and CVE-2026-82078 (unsafe reflection) in PaperCut NG/MF. Chained, an unauthenticated attacker modifies configuration parameters and executes arbitrary Java bytecode as the PaperCut server process. Both are marked exploited.
PaperCut sits on many campus and government networks. Confirm exposure, patch to the vendor-fixed builds, and restrict management interfaces to trusted networks — this is an unauth-to-RCE chain.