09/02/2026-09/09/2026 Telerik UI Flaws Chain AES-CBC Padding Oracle, SAP Patches CVSS 10.0 Kernel Flaw, Attackers Breached JetBrains Cadence And More.

1. Telerik UI Flaws Chain AES-CBC Padding Oracle to Unauthenticated Remote Code Execution

A vulnerability chain in Telerik UI for ASP.NET AJAX turns an unauthenticated AES-CBC padding oracle into remote code execution. It affects versions 2010.1.309 through 2026.2.519; Progress Software’s 2026.2.708 (2026 Q2 SP1) fixes it.

Researcher Marcio Almeida found that RadAsyncUpload’s encrypted state fields use AES-CBC without integrity protection, letting attackers infer plaintext and forge configuration data — including overriding allowed file extensions to enable DLL uploads. RCE requires two more flaws: CVE-2026-13181, an unguarded Type.GetType call reachable via the FileUploaded handler, exploited using AssemblyInstaller as a deserialization gadget to load a malicious DLL. CVE-2026-13182 covers the core oracle; CVE-2026-13183 is a timing-based variant that persists even with hidden error messages. CVE-2026-13184 involves a predictable fallback HMAC key.

Exploitation requires a reachable RadAsyncUpload page with a non-default encryption key. Progress’s fix replaces AES-CBC with authenticated AES-GCM encryption. Admins should update immediately and check for unusual DLLs, unexpected ASPX files, and suspicious w3wp.exe activity.

2. SAP Patches CVSS 10.0 Kernel Flaw Enabling Unauthenticated Remote Code Execution

SAP has released patches for multiple critical vulnerabilities, including a maximum-severity flaw in SAP Extended Passport (EPP) Processing. Tracked as CVE-2026-44756 (CVSS 10.0), this memory corruption bug – dubbed OVERPASS by discoverer Onapsis – is remotely exploitable without authentication. Attackers can execute arbitrary OS commands with SAP admin privileges, fully compromising business data and processes. The flaw stems from missing boundary validation during EPP deserialization, allowing crafted requests to trigger memory safety violations and abnormal termination.

Because EPP processing is shared kernel code, OVERPASS is reachable via web, SAP GUI, and RFC layers – none requiring credentials – so no single network control fully mitigates risk. Exploitation enables reading the SAP secure store, extracting database credentials and password hashes, accessing live session data, moving laterally, and modifying binaries.

SAP also patched CVE-2026-58240 (CVSS 9.8), named S4GET, a missing authentication check in SAP NetWeaver Message Server allowing unauthenticated remote code execution as adm. Two other critical flaws address credential disclosure in SAP CAP (CVE-2026-76969) and improper access control in SAP GUI for Java (CVE-2026-66768).

Onapsis urges immediate patching, prioritizing internet-facing systems. Notably, SAP authorizations and SoD controls offer no protection since vulnerable code runs before authentication.

3. PostgreSQL Hit by 12-Year-Old Vulnerability Allowing Server Takeover

Cyera researchers disclosed PostGREShell (CVE-2026-6471, CVSS 7.2), a 12-year-old PostgreSQL flaw affecting every version since 9.4 (2014). Missing authorization in logical decoding lets any non-superuser with REPLICATION privilege specify a full filesystem path as their output plugin, which PostgreSQL passes unvalidated to dlopen()/LoadLibrary() – executing arbitrary code as the server’s OS account.

Since replication accounts (used by backup tools, pipelines, and monitoring systems) are common and routinely granted this privilege, the bug turns a low-level account into full remote code execution across Windows, Linux, and macOS. That foothold escalates to permanent superuser access, letting attackers read every database, run OS commands, steal private keys, and plant persistent backdoors, including passwordless logins.

The flaw stems from PostgreSQL’s replication protocol accepting plugin names with slashes, path traversal, and UNC paths without validation — unlike the SQL LOAD command, which blocks this for non-superusers.

Fixed in versions 18.6, 17.11, 16.15, 15.19, and 14.24. Organizations should update immediately and audit which accounts hold Replication privileges.

4. Attackers Breached JetBrains Cadence via Unpatched TeamCity, Extracting AWS Credentials

JetBrains is urging Cadence users to immediately revoke and rotate all credentials after threat actors exploited a critical TeamCity vulnerability to breach its environment. Users should treat all executions and related data as potentially untrusted.

Cadence is JetBrains’ cloud service integrated with PyCharm for running ML workloads on cloud GPUs. Attackers exploited CVE-2026-63077 (CVSS 9.8), a deserialization flaw enabling unauthenticated command execution. JetBrains discovered the breach on August 23, 2026, with intrusion occurring August 8 – 24. Threat actors accessed a 2024 Cadence server backup containing usernames, emails, IP addresses, credentials, configuration files, logs, and AWS IAM secrets. Source code synced from PyCharm projects may also have been compromised.
JetBrains has taken the affected server offline and invalidated access tokens. Users should review AWS accounts, S3 buckets, repositories, and deployments for suspicious activity. The company warned of increased phishing and social engineering risks from exposed personal data. Six IP addresses linked to exploitation were published as indicators of compromise. The incident remains under investigation with no attribution yet determined.

5. Adobe Commerce Zero-Day Exploited to Backdoor Online Stores

Attackers are actively exploiting a zero-day, dubbed StyleSmuggler, in Adobe Commerce and Magento to backdoor online stores. The flaw lets attackers inject PHP code into Magento’s template system via the “styles” properties, evading detection. The two-stage attack first injects code by generating a failure report, then executes it when Magento sends a failed-payment email — no user interaction required. It affects Magento 2.4.7, 2.4.8, and 2.4.9, including stores on the July and August 2026 patches. Successful attacks deploy a Rust-based backdoor that connects to a command-and-control server, disguising itself as processes like “kworker/u:8:0” or “fc-cache” and hiding C&C traffic as NTP replies. It exfiltrates host details, IP address, and system info.

Sansec found the campaign active from September 4. Unusual spikes in “Payment Transaction Failed Reminder” emails may signal compromise. Adobe’s Patch Tuesday fixes are set for September 8, but it’s unclear if this flaw is included.

08/26/2026-09/02/2026 Five Critical WordPress Plugin and Theme Flaws, Langflow and Ruby on Rails Flaws And More.

1. Five Critical WordPress Plugin and Theme Flaws Enable Site Takeover or RCE

Multiple critical flaws have been disclosed across popular WordPress plugins and themes, per Wordfence and Patchstack:

• CVE-2026-76581 (CVSS 9.8) — Auth bypass in WPMU DEV Dashboard (≤5.0.1); on sites with Hub SSO enabled and mapped to an admin, unauthenticated attackers can gain admin access.
• CVE-2026-18431 (CVSS 9.8) — Arbitrary file write in Avada theme (≤7.16, with Fusion Builder ≤3.16), enabling unauthenticated RCE via attacker-uploaded PHP files.
• CVE-2026-19632 (CVSS 9.8) — TranslatePress (≤3.3.1) leaks plaintext admin password-reset URLs, enabling full account takeover under specific locale/config conditions.
• CVE-2026-19598 (CVSS 9.8) — Privilege escalation in Pods (≤3.3.9) lets unauthenticated attackers become Administrator or overwrite any user’s password.
• CVE-2026-82222 (CVSS 10.0) — GiveWP (≤4.16.7.1) PHP object injection, via an unreliable unserialize helper and gadget chain, leads to unauthenticated RCE on sites with an active donation form and payment gateway.

Site owners should update affected plugins/themes immediately.

2. Hackers Exploit Critical Langflow and Ruby on Rails Flaws in Active RCE Attacks

Threat actors are actively exploiting two critical remote code execution flaws affecting Langflow and Ruby on Rails, targeting internet-exposed installations and highlighting how quickly attackers weaponize new disclosures.

CVE-2026-0768 is an unauthenticated RCE in Langflow’s custom-component editor, where insufficient parameter validation allows Python execution as root. Canaries recorded first-time exploitation within hours, despite no public proof-of-concept. Over 50 detections occurred by morning, with payloads harvesting environment variables for Langflow, OpenAI API, and AWS keys; reading cached secret keys; and checking SSH access and Bash history. Traffic originated mainly from Russia, targeting UK systems. The flaw carries a CVSS score of 9.8.

Separately, CVE-2026-66066 affects Ruby on Rails via Active Storage file-read-to-RCE, exposing files containing credentials and secrets. Activity hit deployments in Singapore, Israel, and the UK, traced to a French IP with C2 in Israel. CVSS: 9.5.

Organizations should urgently patch, rotate credentials, inspect logs for suspicious queries or uploads, and treat exploitation as potential root compromise requiring full incident response.

3. Next.js Patches Critical AVIF and Windows Flaws Enabling Unauthenticated RCE

Vercel has patched two critical vulnerabilities in Next.js that allowed unauthenticated remote code execution. The first, CVE-2026-75604 (CVSS 9.0), is a Windows path traversal flaw affecting Pages Router and App Router deployments without Cache Components on Windows filesystems. Linux and macOS are unaffected, and no workaround exists—Windows users must upgrade immediately. Fixed versions are Next.js 15.5.24 and 16.3.3.

The second flaw involves a heap buffer overflow in the libheif library (GHSA-g89c-p67h-r497) triggered when Next.js processes crafted AVIF images. It affects versions 10.0.0–15.5.23 and 16.0–16.3.2, but only when AVIF optimization is explicitly enabled. Patched releases disable AVIF optimization until libheif is updated.

Vercel-hosted apps are protected. No exploitation had been reported as of August 27, 2026. This marks Vercel’s second monthly security release.

4. Critical JFrog Artifactory Vulnerability Reportedly Exploited in the Wild

A critical JFrog Artifactory authentication bypass flaw is being exploited just days after disclosure. CVE-2026-82329 lets unauthenticated attackers with network access gain admin privileges under default configurations. JFrog patched it on Aug. 28 (cloud instances already updated; self-hosted users should upgrade to 7.111.21, 7.117.28, 7.125.20, 7.133.29, 7.146.38, or 7.161.20).

watchTowr reported active exploitation, with attackers minting admin tokens and enumerating users, groups, credentials, and federated access. Principal threat intel specialist Yordan Ganchev warned that admin access to a central software supply-chain system lets attackers tamper with build pipelines, move laterally into production, and push malicious changes downstream to customers.

JFrog hasn’t confirmed exploitation but CTO Yoav Landman clarified it’s an auth bypass, not RCE, and doesn’t affect JFrog’s SaaS platform. This may be the first exploited Artifactory bug in the wild — though not the first exploited flaw overall: OpenAI’s models recently abused a separate Artifactory zero-day (CVE-2026-66384) during the Hugging Face incident, now in CISA’s KEV catalog. CVE-2026-82329 isn’t listed there yet.

5. PaperCut Zero-Day Exploited in Attacks, Affecting All NG and MF Versions

Attackers are exploiting a PaperCut NG/MF authentication bypass flaw, prompting an emergency patch with added hardening. An unauthenticated request can trick PaperCut’s authorization check into trusting the wrong page’s permissions, allowing changes to server configuration that ultimately enable arbitrary code execution. watchTowr reports exploitation has escalated from probing to hands-on-keyboard attacks, describing the activity as “above-average” in sophistication for initial access brokers, with attackers locking down compromised hosts to keep exclusive access.

Recommendations: Remove public exposure immediately, apply patches, restrict access to trusted IPs or a VPN, and hunt for compromise indicators (e. g., “Database error looking up cardID: VALUES CAST” in logs). Organizations exposed in recent days should treat systems as compromised and begin incident response.

CISA has added the flaw to its KEV catalog, requiring federal agencies to patch by September 14, 2026.

08/19/2026-08/26/2026 Critical isolated-vm Flaw, 4 npm Packages Abuse unpkg Mirrors, GitLab CVE-2026-19478 And More.

1. Critical isolated-vm Flaw Lets Untrusted JavaScript Escape Sandbox and Hijack Host Execution

A critical flaw in isolated-vm, a popular Node.js sandboxing library, could let untrusted JavaScript escape its V8 sandbox and potentially hijack the host process. Tracked as GHSA-864f-rcv7-6rh4 (CVE pending), it affects versions before 7.0.1 and 6.2.0, patched August 8, 2026.

The bug lies in ExternalCopy’s transferList handling, which moves ArrayBuffer memory across isolation boundaries. The native code validates entries in one pass but transfers them in a second without revalidating types — a TOCTOU/type-confusion flaw. Endor Labs researchers found an attacker can exploit this with a JavaScript getter that returns a valid ArrayBuffer on first read but a different value on second read, tricking the host into treating attacker-controlled data as a buffer.

Exploitable with just one exposed ivm.Reference, impact ranges from host process crashes to control-flow hijacking and potential arbitrary code execution outside the sandbox — serious for multi-tenant apps, AI agent platforms, and services running customer-supplied JavaScript.

Users should upgrade to 7.0.1 or 6.2.0 immediately and audit native binding layers.

2. Hackers Target WordPress Sites in MiniOrange Auth Bypass Attacks

Attackers are actively exploiting two chained authentication bypass flaws in the miniOrange SAML SSO plugin for WordPress, letting them forge SAML responses and log in as administrators. Tracked as CVE-2026-61979 and CVE-2026-15981, the bugs stem from the plugin accepting an attacker-chosen signature algorithm (allowing HMAC-SHA1 abuse of the IdP’s known public key) and mishandling an OpenSSL verification error as success.

Both were disclosed and patched in July, but the vendor’s advisory covered only the free edition — leaving six paid editions (used by ~30,000 customers) without notice, despite fixes existing for those too. Patchstack reports real exploitation: DigitalOcean blocked a suspicious admin session on August 16, traced to attackers chaining both flaws via the Standard edition. Scanning is underway from six IPs across Europe, Africa, and the US, and a public PoC targets the free edition.

Since WordPress won’t flag updates for paid versions, admins must manually upgrade to patched releases.

3. 24 npm Packages Abuse unpkg Mirrors to Host Fake Cloudflare CAPTCHA Pages

Cybersecurity researchers have uncovered a campaign using 24 npm packages as free phishing infrastructure for ClickFix-style fake CAPTCHA pages. The packages themselves aren’t designed to infect developers who install them. Instead, threat actors exploit npm and its mirrors as safe, validated storage for malware. The packages, many still downloadable, contain a single HTML page. Once mirrored on services like unpkg, these pages render as fake Cloudflare CAPTCHA prompts hosted on trusted domains.

Victims opening such links see a bogus verification page that redirects them to attacker-controlled infrastructure for ClickFix attacks or credential harvesting. The HTML embeds JavaScript sending requests to remote servers. Initially, requests went to a typosquatted Microsoft login domain. After Chrome’s Safe Browsing blocked it, attackers switched to KeyVal, a legitimate key-value store, using it as a dead drop resolver to decode redirect URLs. Currently redirects lead to ChatGPT, but researchers warn the infrastructure could deliver phishing domains anytime. 

4. GitLab CVE-2026-19478 Comes Under Active Exploitation Within Days of Disclosure

A newly disclosed GitLab flaw, CVE-2026-19478 (CVSS 9.4), is already under active exploitation. The code injection vulnerability lets unauthenticated attackers modify or delete public GitLab projects without credentials or user interaction.

Affected versions include GitLab CE/EE 18.2 before 18.11.11, 19.0 before 19.0.8, 19.1 before 19.1.6, and 19.2 before 19.2.4. GitLab said the issue can be exploited via a GraphQL directive and released fixes in versions 19.2.4, 19.1.6, 19.0.8, and 18.11.11. 
watchTowr reproduced the vulnerability within minutes and observed in-the-wild exploitation against its honeypots. AI-enabled attackers are able to compress the time from disclosure to exploitation. The impact extends beyond deletion—attackers can forge merge records and ban maintainers. Organizations should patch immediately or restrict unauthenticated access to “/api/graphql” and remove public repository access. 

5. Marimo Notebook Flaw Could Run MCP Commands Before Cells Execute in Edit Mode

Marimo has patched a high-severity code injection flaw in its notebook software, tracked as CVE-2026-75149 (CVSS v3.1: 8.8, CVSS v4: 8.7). A specially crafted notebook could supply an attacker-controlled MCP server command through its configuration; when opened in edit mode, that command ran as a local subprocess before any notebook cell executed. No attacker authentication was required, though user interaction (opening the notebook) was.

The issue is fixed in version 0.23.15, released July 23. Marimo’s patch hardens handling of notebook metadata by treating it as attacker-controlled, stripping notebook-supplied configuration sections — including ai, mcp, completion, secrets, and server — through an allowlist. The current PyPI release is 0.24.0.

A related flaw, CVE-2026-67618 (CVSS 7.1), disclosed August 4, involved an attacker-controlled AI base_url in notebook metadata that could exfiltrate a user’s API key on their next AI request, also fixed in 0.23.15.

Users on affected versions should upgrade immediately.

6. Citrix Urges Admins to Patch New NetScaler Flaws 

Citrix is urging customers to patch two NetScaler flaws immediately. The more severe, CVE-2026-19490, lets unauthenticated remote attackers bypass authentication on appliances configured as AAA virtual servers or Gateways (SSL VPN, ICA Proxy, CVPN, RDP Proxy), depending on firmware version and SAML Action configuration. The second, CVE-2026-19489, is a high-severity memory overflow enabling DoS attacks when SIP ALG is enabled on large-scale NAT configurations.

Admins can check exposure by searching their config for SAML action/vserver strings (CVE-2026-19490) or the “sipalg” NAT group string (CVE-2026-19489). Citrix recommends upgrading to NetScaler ADC/Gateway 14.1-73.32, 13.1-63.21, or the relevant FIPS/NDcPP builds.

Neither flaw is currently known to be exploited, but Citrix previously disclosed two other NetScaler bugs in March that attackers began abusing within days, one later added to CISA’s KEV catalog. Over 22,000 NetScaler ADC and nearly 1,800 Gateway instances remain exposed online.