Skip to content

Blog · page 4/7

CVE analysis, as it happens

Critical vulnerabilities and CISA KEV additions, explained: what is affected, which versions fix it, and what to check first.

  1. Routers: 11 Critical CVEs in September — D-Link, Totolink, Netis, WAVLINK

    Eleven CVSS 9.1 to 9.9 CVEs across D-Link DIR-823G / DIR-878 / DWR-M921, Totolink A3002MU, Netis NX10 and WAVLINK WN535M. Public exploits, and a web server abandoned in 2005 behind several of them.

    CVE-2026-90605 CVE-2026-90680 CVE-2026-90692 CVE-2026-90702 +2 · 8 min

  2. JFrog Artifactory: 4 CISA KEV CVEs in 16 Days — Fixed in 7.133.11 and 7.146.8

    CVE-2026-66384, 82329, 42016 and 42018: four JFrog Artifactory vulnerabilities added to CISA KEV between August 27 and September 11, 2026. Three of the four are authentication failures.

    CVE-2026-42016 CVE-2026-42018 CVE-2026-82329 CVE-2026-66384 · 7 min

  3. CVE-2026-85706 GitLab: Fixed in 19.1.8, 19.2.6, 19.3.2 — Unauthenticated File Read

    GitLab CE/EE fixes 19.1.8, 19.2.6 and 19.3.2 for CVE-2026-85706 (CVSS 10.0, CISA KEV): a path traversal in the commits API allowing arbitrary file reads without authentication.

    CVE-2026-85706 · 6 min

  4. RMM in CISA KEV: N-able N-central 2026.3.1.14 and ConnectWise ScreenConnect 26.6.5.9742

    CVE-2026-86218 (9.8) in N-able N-central and CVE-2026-84869 (9.9) in ConnectWise ScreenConnect: two remote management tools KEV-listed four days apart. Fixes and detection.

    CVE-2026-86218 CVE-2026-84869 · 7 min

  5. Citrix NetScaler and Cisco FMC: 2 Authentication Bypasses in CISA KEV

    CVE-2026-19490 (NetScaler ADC / Gateway) and CVE-2026-20079 (Cisco Secure FMC): two alternate-path authentication bypasses added to CISA KEV on September 9, 2026, with a three-day deadline.

    CVE-2026-19490 CVE-2026-20079 · 7 min

  6. Chrome 153.0.8010.36: 4 CVEs, 2 Exploited — V8, WebView and Extensions

    Chrome fix 153.0.8010.36 for CVE-2026-87534 and 87544, plus two V8 CVEs in CISA KEV (CVE-2026-87491, CVE-2026-85046). Why the NVD scores mislead here.

    CVE-2026-87491 CVE-2026-85046 CVE-2026-87534 CVE-2026-87544 · 7 min

  7. Samsung SMR September 2026: CVE-2026-21095 and 21096, 9.8 RCE in Image Decoders

    CVE-2026-21095 and CVE-2026-21096 (CVSS 9.8): two heap overflows in the DNG and JPEG decoders of libimagecodec.quram.so, fixed by SMR Sep-2026 Release 1. Android 14 through 17.

    CVE-2026-21095 CVE-2026-21096 · 5 min

  8. MikroTik RouterOS: Fixed in 6.49.21, 7.23.4 and 7.24.2 — 2 CVEs in CISA KEV

    RouterOS fixes 6.49.21, 7.23.4 and 7.24.2 for CVE-2026-67277 (kernel memory leak via btest) and CVE-2026-86060 (privilege escalation), both added to CISA KEV on September 10, 2026.

    CVE-2026-67277 CVE-2026-86060 · 7 min

  9. Windows: CVE-2026-85880 and CVE-2026-81963 in CISA KEV — Escalation to SYSTEM

    September 2026 Patch Tuesday: two Windows privilege escalations KEV-listed the same day — an ALPC heap overflow and a link following flaw in the Windows Update Stack.

    CVE-2026-85880 CVE-2026-81963 · 6 min

  10. Commvault: 3 CVSS 9.8 CVEs — Fixed in 11.36.123, 11.40.72, 11.44.20, 11.46.20

    Commvault fixes 11.36.123, 11.40.72, 11.44.20 and 11.46.20 for CVE-2026-77089, 77092 and 77098: authentication bypass, deserialization and SQL injection across the backup platform.

    CVE-2026-77089 CVE-2026-77092 CVE-2026-77098 · 6 min

  11. CVE-2026-75650 Adobe Commerce / Magento 2.4.4-2.4.9: 10.0 RCE in CISA KEV

    CVE-2026-75650 (CVSS 10.0): template engine injection in Adobe Commerce and Magento Open Source 2.4.4 through 2.4.9 — code execution with no authentication and no user interaction. Added to CISA KEV.

    CVE-2026-75650 · 6 min

  12. Kestra and Starlette in CISA KEV: CVE-2026-49869 and CVE-2026-48710

    Kestra (workflows run without authentication) and Starlette, the base of FastAPI (authentication bypass), added to CISA KEV.

    CVE-2026-49869 CVE-2026-48710 · 5 min

  13. SonicWall SMA1000: CVE-2026-83548 and 83549 in CISA KEV — SSRF and Command Injection

    SonicWall SMA1000: unauthenticated SSRF (CVE-2026-83548) and command injection (CVE-2026-83549) added to CISA KEV with a three-day deadline.

    CVE-2026-83548 CVE-2026-83549 · 4 min

  14. PaperCut CVE-2026-81578 + 82078: Fixed in 24.1.9, 25.0.12, 26.0.4 — a Chain to RCE

    PaperCut NG/MF fixes 24.1.9, 25.0.12 and 26.0.4 for CVE-2026-81578 (9.8) and CVE-2026-82078 (9.1), two CISA KEV entries the agency explicitly flags as chainable.

    CVE-2026-81578 CVE-2026-82078 · 6 min

  15. SOHO Routers: 6 Critical CVEs with Public Exploits (TRENDnet, ipTIME, Comfast, UTT)

    TRENDnet TEW-821DAP / 823DRU / 755AP, EFM ipTIME T16000M, Comfast CF-N1-S and UTT HiPER 1250GW: six CVSS 9.9-10.0 CVEs, every exploit is public. Audit and mitigation.

    CVE-2026-77946 CVE-2026-75976 CVE-2026-76589 CVE-2026-78167 +2 · 8 min

  16. OpenShift Multi-Cluster: 3 CVSS 9.9 CVEs in Submariner, Lighthouse and ACM

    CVE-2026-66785, CVE-2026-66788 and CVE-2026-70496: a compromised spoke cluster can hijack traffic and inject resources into its peers. The hub-spoke trust model questioned.

    CVE-2026-66785 CVE-2026-66788 CVE-2026-70496 · 9 min

  17. Firefox 154 / ESR 140.14: 4 Use-After-Free CVSS 9.8 — Thunderbird Too

    Fixes in Firefox 154, ESR 153.1, ESR 140.14, ESR 115.39 and Thunderbird 154 / 153.1 / 140.14 for CVE-2026-74936, 74940, 74943 and 74944: four critical use-after-free flaws.

    CVE-2026-74936 CVE-2026-74940 CVE-2026-74943 CVE-2026-74944 · 6 min

  18. Oracle August 2026: 17 Critical CVEs in Hyperion and Reports Developer

    17 CRITICAL CVEs (CVSS 9.8 to 10.0) in Oracle Hyperion 11.2.25 and Reports Developer 12.2.1.19 / 14.1.2 — unauthenticated takeover over HTTP, TCP, IIOP, UDP and CORBA.

    CVE-2026-70880 CVE-2026-62457 CVE-2026-62608 CVE-2026-62609 · 9 min

  19. Check Point SmartConsole CVE-2026-16232: Admin Token Obtained Without Authentication

    An unauthenticated attacker can obtain a SmartConsole session token and authenticate with full administrative privileges on Quantum and Multi-Domain Security Management. Exploitation confirmed by Check Point.

    CVE-2026-16232 · 7 min

  20. Cisco FMC & Unified CM in KEV: When Cisco Rates Its Own Flaws Above CVSS

    CVE-2026-20316 (hard-coded password in Secure Firewall Management Center) and CVE-2026-20230 (Unified CM SSRF to root) are in CISA KEV. Two cases where CVSS understates real risk.

    CVE-2026-20316 CVE-2026-20230 · 6 min