08/12/2026-08/19/2026 Attackers Exploit MLflow SSRF Flaw, 16 Typosquatted RubyGems Packages, Actively Exploited Ray Flaw  And More.

1. Attackers Exploit MLflow SSRF Flaw to Steal Cloud Credentials and Secrets

Two severe vulnerabilities in MLflow and FUXA are under active exploitation. CVE-2026-64849 (CVSS 9.3) is an unauthenticated SSRF flaw in MLflow affecting versions below 3.15.0, allowing attackers to reach cloud metadata endpoints and steal credentials. Exploitation began within hours of disclosure on August 17, 2026, with attackers indiscriminately scanning for exposed instances. The flaw bypasses prior fixes by exploiting web redirect handling.

CVE-2026-25895 (CVSS 9.5) is a missing authentication and path traversal vulnerability in FUXA versions ≤1.2.9, enabling unauthenticated remote code execution via arbitrary file writes. Scanning started August 18, 2026, from a single IP targeting roughly 60 exposed FUXA installations. Attackers are overwriting main.js with junk data, though no RCE payloads have been observed yet.

Organizations should patch immediately, review logs for compromise, and check for exposed credentials.

2. 16 Typosquatted RubyGems Packages Steal Browser Credentials and Crypto Wallets

Cybersecurity researchers have uncovered a typosquatting campaign targeting RubyGems users with a Windows info-stealer dubbed StubMaker. Discovered on August 15, 2026, the campaign involved 16 malicious gems—including ubnuler, ri18nr, and brumdler—all clumsy typosquats of popular Ruby dependencies. The packages have since been yanked.

The malware harvests browser credentials, crypto wallets, seed phrases, and Telegram data. It exploits Ruby’s package name reuse and unvalidated author fields, allowing attackers to republish yanked gems under new accounts. The attack chain uses an “extconf.rb” hook to fetch a Rust-based loader from GitHub, which launches a Go-based stealer that bypasses Chrome’s app-bound encryption to extract data from Chromium browsers. Stolen information is uploaded to Gofile as a password-protected ZIP, with the link sent to the attacker over unencrypted HTTP.

The same actor also targeted npm with 37 typosquatted packages using postinstall hooks to deliver the identical payload. Researchers recommend isolating infected Windows hosts, rotating credentials, and removing malicious libraries.

3. CISA Flags Actively Exploited Ray Flaw That Can Trigger Browser-Based RCE

Ray, with 43,500 GitHub stars and over 7,900 forks, contains a critical vulnerability tracked as CVE-2025-62593 (CVSS 9.4) enabling remote code execution through DNS rebinding attacks in Firefox and Safari.

The flaw stems from Ray’s lack of authentication on critical endpoints, allowing attackers to execute arbitrary code against developers running Ray who visit malicious websites or view malicious ads. The attack can also target network-adjacent Ray instances inside private corporate networks, using the browser as an intermediary.

The vulnerability primarily affects development and testing environments. It was patched in version 2.52.0. Researchers Avi Lumelsky and Jonathan Leitschuh were credited with discovery.

Threat actors behind the RondoDox botnet incorporated the exploit two days before public disclosure on November 26, 2025. Unpatched instances have also been targeted in the ShadowRay 2.0 campaign, turning GPU clusters into cryptocurrency mining botnets. FCEB agencies must apply fixes by August 20, 2026.

4. SAP Commerce Cloud CVE-2026-58231 Targeted in Exploitation Attempts

A critical SAP Commerce Cloud vulnerability, CVE-2026-58231, is under active exploitation. Rated 10.0 on CVSS, it stems from insufficient authorization checks and input validation, allowing unauthenticated attackers to abuse a default authentication client and submit crafted input to vulnerable functions. Successful exploitation could enable arbitrary code execution and compromise internal components, severely impacting confidentiality, integrity, and availability.

Defused Cyber detected exploitation attempts on its honeypots just three days after the patch was released. KEVIntel independently confirmed two attempts on August 14 from a U.S.-based IP address.

Onapsis urges customers to patch immediately and rebuild/redeploy the fixed Commerce Cloud version. As a temporary measure, organizations can configure IP Filter Sets to restrict access to the vulnerable endpoint.

The attackers remain unidentified, though previous SAP flaws have been exploited by China-linked groups and ransomware actors.