09/23/2026-09/30/2026 MCP Python SDK OAuth Flaw; Malware Spread Through Terraform Providers; AI-Powered CARBONATO Botnet Steals Credentials And More

09/16/2026-09/23/2026 Critical Next.js ImageResponse Flaw; Malicious npm Package Poses as Twilio Bug-Bounty Probe; Docker Sandboxes Vulnerabilities And More

09/09/2026-09/16/2026 Red Heron Exploits Gitea RCE; GitLab CVE-2026-85706; CISA Adds 5 Actively Exploited Artifactory, ScreenConnect, and RouterOS Flaws to KEV