08/26/2026-09/02/2026 Five Critical WordPress Plugin and Theme Flaws, Langflow and Ruby on Rails Flaws And More.

1. Five Critical WordPress Plugin and Theme Flaws Enable Site Takeover or RCE

Multiple critical flaws have been disclosed across popular WordPress plugins and themes, per Wordfence and Patchstack:

• CVE-2026-76581 (CVSS 9.8) — Auth bypass in WPMU DEV Dashboard (≤5.0.1); on sites with Hub SSO enabled and mapped to an admin, unauthenticated attackers can gain admin access.
• CVE-2026-18431 (CVSS 9.8) — Arbitrary file write in Avada theme (≤7.16, with Fusion Builder ≤3.16), enabling unauthenticated RCE via attacker-uploaded PHP files.
• CVE-2026-19632 (CVSS 9.8) — TranslatePress (≤3.3.1) leaks plaintext admin password-reset URLs, enabling full account takeover under specific locale/config conditions.
• CVE-2026-19598 (CVSS 9.8) — Privilege escalation in Pods (≤3.3.9) lets unauthenticated attackers become Administrator or overwrite any user’s password.
• CVE-2026-82222 (CVSS 10.0) — GiveWP (≤4.16.7.1) PHP object injection, via an unreliable unserialize helper and gadget chain, leads to unauthenticated RCE on sites with an active donation form and payment gateway.

Site owners should update affected plugins/themes immediately.

2. Hackers Exploit Critical Langflow and Ruby on Rails Flaws in Active RCE Attacks

Threat actors are actively exploiting two critical remote code execution flaws affecting Langflow and Ruby on Rails, targeting internet-exposed installations and highlighting how quickly attackers weaponize new disclosures.

CVE-2026-0768 is an unauthenticated RCE in Langflow’s custom-component editor, where insufficient parameter validation allows Python execution as root. Canaries recorded first-time exploitation within hours, despite no public proof-of-concept. Over 50 detections occurred by morning, with payloads harvesting environment variables for Langflow, OpenAI API, and AWS keys; reading cached secret keys; and checking SSH access and Bash history. Traffic originated mainly from Russia, targeting UK systems. The flaw carries a CVSS score of 9.8.

Separately, CVE-2026-66066 affects Ruby on Rails via Active Storage file-read-to-RCE, exposing files containing credentials and secrets. Activity hit deployments in Singapore, Israel, and the UK, traced to a French IP with C2 in Israel. CVSS: 9.5.

Organizations should urgently patch, rotate credentials, inspect logs for suspicious queries or uploads, and treat exploitation as potential root compromise requiring full incident response.

3. Next.js Patches Critical AVIF and Windows Flaws Enabling Unauthenticated RCE

Vercel has patched two critical vulnerabilities in Next.js that allowed unauthenticated remote code execution. The first, CVE-2026-75604 (CVSS 9.0), is a Windows path traversal flaw affecting Pages Router and App Router deployments without Cache Components on Windows filesystems. Linux and macOS are unaffected, and no workaround exists—Windows users must upgrade immediately. Fixed versions are Next.js 15.5.24 and 16.3.3.

The second flaw involves a heap buffer overflow in the libheif library (GHSA-g89c-p67h-r497) triggered when Next.js processes crafted AVIF images. It affects versions 10.0.0–15.5.23 and 16.0–16.3.2, but only when AVIF optimization is explicitly enabled. Patched releases disable AVIF optimization until libheif is updated.

Vercel-hosted apps are protected. No exploitation had been reported as of August 27, 2026. This marks Vercel’s second monthly security release.

4. Critical JFrog Artifactory Vulnerability Reportedly Exploited in the Wild

A critical JFrog Artifactory authentication bypass flaw is being exploited just days after disclosure. CVE-2026-82329 lets unauthenticated attackers with network access gain admin privileges under default configurations. JFrog patched it on Aug. 28 (cloud instances already updated; self-hosted users should upgrade to 7.111.21, 7.117.28, 7.125.20, 7.133.29, 7.146.38, or 7.161.20).

watchTowr reported active exploitation, with attackers minting admin tokens and enumerating users, groups, credentials, and federated access. Principal threat intel specialist Yordan Ganchev warned that admin access to a central software supply-chain system lets attackers tamper with build pipelines, move laterally into production, and push malicious changes downstream to customers.

JFrog hasn’t confirmed exploitation but CTO Yoav Landman clarified it’s an auth bypass, not RCE, and doesn’t affect JFrog’s SaaS platform. This may be the first exploited Artifactory bug in the wild — though not the first exploited flaw overall: OpenAI’s models recently abused a separate Artifactory zero-day (CVE-2026-66384) during the Hugging Face incident, now in CISA’s KEV catalog. CVE-2026-82329 isn’t listed there yet.

5. PaperCut Zero-Day Exploited in Attacks, Affecting All NG and MF Versions

Attackers are exploiting a PaperCut NG/MF authentication bypass flaw, prompting an emergency patch with added hardening. An unauthenticated request can trick PaperCut’s authorization check into trusting the wrong page’s permissions, allowing changes to server configuration that ultimately enable arbitrary code execution. watchTowr reports exploitation has escalated from probing to hands-on-keyboard attacks, describing the activity as “above-average” in sophistication for initial access brokers, with attackers locking down compromised hosts to keep exclusive access.

Recommendations: Remove public exposure immediately, apply patches, restrict access to trusted IPs or a VPN, and hunt for compromise indicators (e. g., “Database error looking up cardID: VALUES CAST” in logs). Organizations exposed in recent days should treat systems as compromised and begin incident response.

CISA has added the flaw to its KEV catalog, requiring federal agencies to patch by September 14, 2026.

08/19/2026-08/26/2026 Critical isolated-vm Flaw, 4 npm Packages Abuse unpkg Mirrors, GitLab CVE-2026-19478 And More.

1. Critical isolated-vm Flaw Lets Untrusted JavaScript Escape Sandbox and Hijack Host Execution

A critical flaw in isolated-vm, a popular Node.js sandboxing library, could let untrusted JavaScript escape its V8 sandbox and potentially hijack the host process. Tracked as GHSA-864f-rcv7-6rh4 (CVE pending), it affects versions before 7.0.1 and 6.2.0, patched August 8, 2026.

The bug lies in ExternalCopy’s transferList handling, which moves ArrayBuffer memory across isolation boundaries. The native code validates entries in one pass but transfers them in a second without revalidating types — a TOCTOU/type-confusion flaw. Endor Labs researchers found an attacker can exploit this with a JavaScript getter that returns a valid ArrayBuffer on first read but a different value on second read, tricking the host into treating attacker-controlled data as a buffer.

Exploitable with just one exposed ivm.Reference, impact ranges from host process crashes to control-flow hijacking and potential arbitrary code execution outside the sandbox — serious for multi-tenant apps, AI agent platforms, and services running customer-supplied JavaScript.

Users should upgrade to 7.0.1 or 6.2.0 immediately and audit native binding layers.

2. Hackers Target WordPress Sites in MiniOrange Auth Bypass Attacks

Attackers are actively exploiting two chained authentication bypass flaws in the miniOrange SAML SSO plugin for WordPress, letting them forge SAML responses and log in as administrators. Tracked as CVE-2026-61979 and CVE-2026-15981, the bugs stem from the plugin accepting an attacker-chosen signature algorithm (allowing HMAC-SHA1 abuse of the IdP’s known public key) and mishandling an OpenSSL verification error as success.

Both were disclosed and patched in July, but the vendor’s advisory covered only the free edition — leaving six paid editions (used by ~30,000 customers) without notice, despite fixes existing for those too. Patchstack reports real exploitation: DigitalOcean blocked a suspicious admin session on August 16, traced to attackers chaining both flaws via the Standard edition. Scanning is underway from six IPs across Europe, Africa, and the US, and a public PoC targets the free edition.

Since WordPress won’t flag updates for paid versions, admins must manually upgrade to patched releases.

3. 24 npm Packages Abuse unpkg Mirrors to Host Fake Cloudflare CAPTCHA Pages

Cybersecurity researchers have uncovered a campaign using 24 npm packages as free phishing infrastructure for ClickFix-style fake CAPTCHA pages. The packages themselves aren’t designed to infect developers who install them. Instead, threat actors exploit npm and its mirrors as safe, validated storage for malware. The packages, many still downloadable, contain a single HTML page. Once mirrored on services like unpkg, these pages render as fake Cloudflare CAPTCHA prompts hosted on trusted domains.

Victims opening such links see a bogus verification page that redirects them to attacker-controlled infrastructure for ClickFix attacks or credential harvesting. The HTML embeds JavaScript sending requests to remote servers. Initially, requests went to a typosquatted Microsoft login domain. After Chrome’s Safe Browsing blocked it, attackers switched to KeyVal, a legitimate key-value store, using it as a dead drop resolver to decode redirect URLs. Currently redirects lead to ChatGPT, but researchers warn the infrastructure could deliver phishing domains anytime. 

4. GitLab CVE-2026-19478 Comes Under Active Exploitation Within Days of Disclosure

A newly disclosed GitLab flaw, CVE-2026-19478 (CVSS 9.4), is already under active exploitation. The code injection vulnerability lets unauthenticated attackers modify or delete public GitLab projects without credentials or user interaction.

Affected versions include GitLab CE/EE 18.2 before 18.11.11, 19.0 before 19.0.8, 19.1 before 19.1.6, and 19.2 before 19.2.4. GitLab said the issue can be exploited via a GraphQL directive and released fixes in versions 19.2.4, 19.1.6, 19.0.8, and 18.11.11. 
watchTowr reproduced the vulnerability within minutes and observed in-the-wild exploitation against its honeypots. AI-enabled attackers are able to compress the time from disclosure to exploitation. The impact extends beyond deletion—attackers can forge merge records and ban maintainers. Organizations should patch immediately or restrict unauthenticated access to “/api/graphql” and remove public repository access. 

5. Marimo Notebook Flaw Could Run MCP Commands Before Cells Execute in Edit Mode

Marimo has patched a high-severity code injection flaw in its notebook software, tracked as CVE-2026-75149 (CVSS v3.1: 8.8, CVSS v4: 8.7). A specially crafted notebook could supply an attacker-controlled MCP server command through its configuration; when opened in edit mode, that command ran as a local subprocess before any notebook cell executed. No attacker authentication was required, though user interaction (opening the notebook) was.

The issue is fixed in version 0.23.15, released July 23. Marimo’s patch hardens handling of notebook metadata by treating it as attacker-controlled, stripping notebook-supplied configuration sections — including ai, mcp, completion, secrets, and server — through an allowlist. The current PyPI release is 0.24.0.

A related flaw, CVE-2026-67618 (CVSS 7.1), disclosed August 4, involved an attacker-controlled AI base_url in notebook metadata that could exfiltrate a user’s API key on their next AI request, also fixed in 0.23.15.

Users on affected versions should upgrade immediately.

6. Citrix Urges Admins to Patch New NetScaler Flaws 

Citrix is urging customers to patch two NetScaler flaws immediately. The more severe, CVE-2026-19490, lets unauthenticated remote attackers bypass authentication on appliances configured as AAA virtual servers or Gateways (SSL VPN, ICA Proxy, CVPN, RDP Proxy), depending on firmware version and SAML Action configuration. The second, CVE-2026-19489, is a high-severity memory overflow enabling DoS attacks when SIP ALG is enabled on large-scale NAT configurations.

Admins can check exposure by searching their config for SAML action/vserver strings (CVE-2026-19490) or the “sipalg” NAT group string (CVE-2026-19489). Citrix recommends upgrading to NetScaler ADC/Gateway 14.1-73.32, 13.1-63.21, or the relevant FIPS/NDcPP builds.

Neither flaw is currently known to be exploited, but Citrix previously disclosed two other NetScaler bugs in March that attackers began abusing within days, one later added to CISA’s KEV catalog. Over 22,000 NetScaler ADC and nearly 1,800 Gateway instances remain exposed online.

08/12/2026-08/19/2026 Attackers Exploit MLflow SSRF Flaw, 16 Typosquatted RubyGems Packages, Actively Exploited Ray Flaw  And More.

1. Attackers Exploit MLflow SSRF Flaw to Steal Cloud Credentials and Secrets

Two severe vulnerabilities in MLflow and FUXA are under active exploitation. CVE-2026-64849 (CVSS 9.3) is an unauthenticated SSRF flaw in MLflow affecting versions below 3.15.0, allowing attackers to reach cloud metadata endpoints and steal credentials. Exploitation began within hours of disclosure on August 17, 2026, with attackers indiscriminately scanning for exposed instances. The flaw bypasses prior fixes by exploiting web redirect handling.

CVE-2026-25895 (CVSS 9.5) is a missing authentication and path traversal vulnerability in FUXA versions ≤1.2.9, enabling unauthenticated remote code execution via arbitrary file writes. Scanning started August 18, 2026, from a single IP targeting roughly 60 exposed FUXA installations. Attackers are overwriting main.js with junk data, though no RCE payloads have been observed yet.

Organizations should patch immediately, review logs for compromise, and check for exposed credentials.

2. 16 Typosquatted RubyGems Packages Steal Browser Credentials and Crypto Wallets

Cybersecurity researchers have uncovered a typosquatting campaign targeting RubyGems users with a Windows info-stealer dubbed StubMaker. Discovered on August 15, 2026, the campaign involved 16 malicious gems—including ubnuler, ri18nr, and brumdler—all clumsy typosquats of popular Ruby dependencies. The packages have since been yanked.

The malware harvests browser credentials, crypto wallets, seed phrases, and Telegram data. It exploits Ruby’s package name reuse and unvalidated author fields, allowing attackers to republish yanked gems under new accounts. The attack chain uses an “extconf.rb” hook to fetch a Rust-based loader from GitHub, which launches a Go-based stealer that bypasses Chrome’s app-bound encryption to extract data from Chromium browsers. Stolen information is uploaded to Gofile as a password-protected ZIP, with the link sent to the attacker over unencrypted HTTP.

The same actor also targeted npm with 37 typosquatted packages using postinstall hooks to deliver the identical payload. Researchers recommend isolating infected Windows hosts, rotating credentials, and removing malicious libraries.

3. CISA Flags Actively Exploited Ray Flaw That Can Trigger Browser-Based RCE

Ray, with 43,500 GitHub stars and over 7,900 forks, contains a critical vulnerability tracked as CVE-2025-62593 (CVSS 9.4) enabling remote code execution through DNS rebinding attacks in Firefox and Safari.

The flaw stems from Ray’s lack of authentication on critical endpoints, allowing attackers to execute arbitrary code against developers running Ray who visit malicious websites or view malicious ads. The attack can also target network-adjacent Ray instances inside private corporate networks, using the browser as an intermediary.

The vulnerability primarily affects development and testing environments. It was patched in version 2.52.0. Researchers Avi Lumelsky and Jonathan Leitschuh were credited with discovery.

Threat actors behind the RondoDox botnet incorporated the exploit two days before public disclosure on November 26, 2025. Unpatched instances have also been targeted in the ShadowRay 2.0 campaign, turning GPU clusters into cryptocurrency mining botnets. FCEB agencies must apply fixes by August 20, 2026.

4. SAP Commerce Cloud CVE-2026-58231 Targeted in Exploitation Attempts

A critical SAP Commerce Cloud vulnerability, CVE-2026-58231, is under active exploitation. Rated 10.0 on CVSS, it stems from insufficient authorization checks and input validation, allowing unauthenticated attackers to abuse a default authentication client and submit crafted input to vulnerable functions. Successful exploitation could enable arbitrary code execution and compromise internal components, severely impacting confidentiality, integrity, and availability.

Defused Cyber detected exploitation attempts on its honeypots just three days after the patch was released. KEVIntel independently confirmed two attempts on August 14 from a U.S.-based IP address.

Onapsis urges customers to patch immediately and rebuild/redeploy the fixed Commerce Cloud version. As a temporary measure, organizations can configure IP Filter Sets to restrict access to the vulnerable endpoint.

The attackers remain unidentified, though previous SAP flaws have been exploited by China-linked groups and ransomware actors.