SonicWall's 2 September 2026 advisory SNWLID-2026-0016 (covered by SecurityWeek the same day) warns SMA1000 series secure remote access / SSL-VPN customers of two zero-days discovered and observed exploited internally. CVE-2026-83548 is a pre-authentication SSRF in the Appliance Work Place interface, rated CVSS 10. CVE-2026-83549 is an OS command injection in the Appliance Management Console (AMC), rated CVSS 7.8, that an authenticated attacker can use for arbitrary OS commands and potential RCE. SonicWall says both have been exploited and the pair can be chained for unauthenticated remote code execution. Affected models: SMA1000 6210, 7210 and 8200v. Hotfixes 12.4.3-03526, 12.5.0-02952 and higher patch both issues. SSL-VPN on SonicWall firewalls and SMA100 series products are not affected. CISA added both CVEs to the KEV catalog on 2 September 2026.
According to the CVE record published on 1 September 2026 (02:07 UTC; 10:07 am Perth; HackerOne CNA), CVE-2026-65643 is an eval injection (CWE-95) in cPanel 11.138.0.0 and earlier that allows remote authenticated users to execute arbitrary code as root. The record lists cPanel as affected before 11.110.0.141, from 11.112.0.0 before 11.134.0.53, from 11.136.0.0 before 11.136.0.37, from 11.138.0.0 before 11.138.0.2 and from 11.138.1.0 before 11.138.1.7, and rates it CVSS 4.0 8.7 High (CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N). CISA's enrichment of the record lists proof-of-concept exploitation, not active exploitation. cPanel's own advisory, linked here, returns 403 to this desk. This is not the April login bypass (CVE-2026-41940), which is already on the desk. Primary: CVE record (HackerOne CNA). Correction (27 Oct 2026): removed details that came only from cPanel's advisory, which this desk cannot read: the parked- and addon-domain file-creation mechanism, the WP Squared product name, the line that all supported versions are affected, and the advisory's statements on scoring and exploitation; the CVE record's CVSS 4.0 score is now given. The card date has moved from 27 August to 1 September 2026, the Perth date of the CVE record (1 September, 02:07 UTC; 10:07 am Perth (AWST)). (source: CVE.org)
SecurityWeek (2 September 2026) reports CVE-2026-84115 in Cleo Harmony file-transfer: improper privilege management in the JWT refresh token handler on /api/connections, where manipulating the Bearer argument can let a remote attacker elevate privileges. VulDB (listed as CNA-style record in public mirrors) says builds through 5.8.1.10 are affected, a public exploit exists, and upgrading to 5.8.1.11 fixes it. Cleo's Harmony 5.8.1 release notes list 5.8.1.11 as a 15 May 2026 limited/restricted build and do not expand on this CVE in the public notes SecurityWeek also noted thin vendor detail. WatchTowr (quoted by SecurityWeek) has reproduced the issue and flags Harmony as a frequent ransomware target historically. This desk does not invent a CVSS beyond what secondary reporting attributes; Cyber Security News cites 8.3 High for the same CVE. Patch to 5.8.1.11 or later; hunt anomalous /api/connections auth traffic.
UPDATE 17–19 October 2026: researcher Zach Main published the Plex2Shell write-up and proof-of-concept code on 16 October, showing how four of the flaws chain into unauthenticated remote code execution on Plex Media Server before 1.43.3.10861: the /player/timeline SSRF (CVE-2026-96652) is used to call searchOne (CVE-2026-96654) and obtain the owner's admin token, the transcoder SSRF (CVE-2026-96655) fetches an attacker-hosted file, and the Codecs path flaw (CVE-2026-96656) writes it as a shared object that Plex then runs. The fixes shipped in PMS 1.43.3.10861 on 3 August, after Zach Main reported the bugs to Plex on 27 July. Researcher boredhackerblog reported in-the-wild exploitation of a honeypot from the morning of 17 October, first from 45.194.92[.]222 and also from 91.92.40[.]202 and 176.65.139[.]228, which downloaded payloads from 217.60.194[.]116: an XMRig miner (seen as 'mylovelyminer', mining to ota.proxystream[.]st) and a Linux reverse-proxy backdoor called 'myawesomeproxy' (SHA-256 e546b10aee5edc754da4f9b0baace00392257121911f630145078eafad1e6bd9). Bitsight linked another proxystream[.]st subdomain to the AISURU DDoS and proxyware botnet in August. Plex users on Reddit report servers infected with the same miner, though it is not confirmed those infections came from Plex2Shell. Zach Main has published detection guidance and boredhackerblog has published packet captures. Plex had not commented by 19 October (The Hacker News). UPDATE 23–24 September 2026: NVD and CISA CSAF VA-26-266-01 (published 23 Sep 2026) assign five CVEs to Plex Media Server before 1.43.3.10861 — the build family covered by Plex’s 1 September 2026 forum security notice (PMS 1.43.3 / Desktop 1.115.0) that previously said CVEs were requested but withheld. CVE-2026-96656 (CVSS 3.1 7.2 High, AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H): admin can write arbitrary files via TranscoderH264Options appended to x264; .so files run at startup without signature checks. CVE-2026-96651 (6.5 Medium): path traversal on /system/agents/media/get can read files including PlexOnlineToken (account/server control) with a valid session token. CVE-2026-96654 (6.5): unauth URL injection via searchOne into other plugins. CVE-2026-96652 / CVE-2026-96655 (4.3): SSRF via /player/timeline and transcoder universal path. BleepingComputer reported on 9 September 2026 that Shadowserver said over 36,000 internet-exposed Plex Media Server instances were still unpatched against the flaws in v1.43.2 and earlier. Patch: PMS ≥1.43.3.10861 / Desktop ≥1.115.0; confirm auto-updates landed. UPDATE (22 Oct 2026): CISA added CVE-2026-96652, CVE-2026-96654, CVE-2026-96655 and CVE-2026-96656 to its Known Exploited Vulnerabilities catalog on 20 October 2026 (US federal due dates 23 October for -96654 and -96656, 3 November for -96652 and -96655). (source: CISA KEV catalog)
Manifold Security published GitSpawn research on 1 September 2026: several AI coding agents run git (status, diff and similar) to gather repo context at startup, in some products before a workspace-trust prompt or authentication. Those calls did not strip the repository's own git configuration. Git settings that name a helper program (including core.fsmonitor) then run as the developer, outside the agent sandbox, with no approval prompt. Manifold says clone, fetch or pull of a hostile URL does not carry this; the repository has to arrive as files with its .git directory already inside (zip, shared drive, USB). Named products and status at publication: Claude Code core.fsmonitor patched by 2.1.196 (confirmed on 2.1.193; reported 26 June, closed as duplicate); Claude Code ultrareview still unpatched on 2.1.252; Goose patched in 1.44.0 (CVE-2026-72718, maintainers 7.0); Hermes unpatched on 0.21.0 (CVE-2026-71963); Qwen Code unpatched on 0.22.3; Grok Build unpatched on 1.0.13; OpenAI Codex and Cursor patched (reports closed as duplicates). Manifold 1 September update says Codex and Cursor were also affected, reported, and have since been patched. Inspect .git/config before opening a received folder in an agent. This desk does not invent CVSS for the unpatched products. Correction (26 Oct 2026): a reference to the CVE numbering authority for CVE-2026-71963 has been removed. (source: Manifold Security)
GeoNetwork (OSGeo geospatial metadata catalog used behind many government and agency geoportals, including European INSPIRE backends) published advisories on 31 August 2026 for two flaws that chain to unauthenticated remote code execution. CVE-2026-63219 (CVSS 8.6 per The Hacker News citing the project) is a missing authorisation check on the formatter upload endpoint that lets an anonymous attacker write arbitrary .xsl or .zip formatter files. CVE-2026-58400 (CVSS 9.1 per the same reporting) is an unsafe Saxon XSLT configuration in the formatter engine that can call Runtime.exec / ProcessBuilder as the GeoNetwork process user once a malicious stylesheet is loaded. Fixes shipped earlier in 4.4.12 and 4.2.17 (8 July 2026); all 4.4.x through 4.4.11 and 4.2.x through 4.2.16 are affected. Vendor/project mitigations until patch: block write methods to /geonetwork/srv/api/formatters at the reverse proxy. Ethiack (Rafael Castilho) reported the chain and said it fingerprinted 121 internet-exposed affected instances across 39 countries, about 89% government/military/agency-related (exposure estimate, not confirmed compromises). The Hacker News (2 September) found no CISA KEV entry and no public in-wild exploitation reporting at disclosure. Primary advisories: GitHub GHSA-mh22-prqr-vf42 and GHSA-x898-729x-cc3r.
JFrog's 28 August 2026 advisory rates CVE-2026-82329 Critical (CVSS 3.1 9.8): under default configuration, an unauthenticated attacker with network access may obtain administrative privileges on self-managed Artifactory. watchTowr told SecurityWeek (1 Sep) and BleepingComputer / The Hacker News (2 Sep) it has seen exploitation — attackers minting admin tokens, enumerating users/groups/federated topologies, and in limited cases creating backdoor users — from a small set of IPs without evidence of mass scanning yet. watchTowr describes a 'phantom' join key on instances without an additional join key configured, abused via JFrog Access to forge administrator credentials. Self-hosted patches: 7.111.21, 7.117.28, 7.125.20, 7.133.29, 7.146.38, 7.161.20; JFrog says cloud was already fortified. Access tokens are independent credentials — upgrading the binary does not by itself revoke minted tokens, so rotate/revoke tokens and hunt anomalous admin activity after patching. CISA added CVE-2026-82329 to the KEV catalog on 2 September 2026. UPDATE 10–11 September 2026 (Wiz / THN): Wiz also saw CVE-2026-82329 abused in the wild alongside a separate 42018→42016 chain (15 Aug–8 Sep) that yields admin and drops Rust C2 / Groovy plugins — see desk cards cve-2026-42018 and cve-2026-42016. Distinct from cve-2026-66384.
JFrog security advisories (CVE-2026-82329, 28 Aug 2026)
Patchstack (28 August 2026) and CVE-2026-82222 describe an unauthenticated PHP object injection chain in GiveWP through 4.16.7.1 that reaches remote code execution. On 4.16.5.1 and below a default install with one published donation form and an active gateway is enough. On 4.16.6–4.16.7.1 reachability narrows but a legacy give_forms post without formBuilderSettings (including draft/trashed) re-arms the chain. The plugin's give_action=user_register path ignores WordPress users_can_register, so an attacker can obtain an account even when registration is disabled. Patchstack rates CVSS 10.0. Vendor fixed in GiveWP 4.16.7.2 (27 August 2026), which breaks the chain at several layers and migrates serialized object payloads already in the database. Patch to 4.16.7.2 or later.
WatchGuard PSIRT published a cluster of advisories on 27 August 2026 covering Fireware OS (iked / epm) and WatchGuard Dimension. Five issues are rated 9.3 on the vendor page: iked heap overflow CVE-2026-19313, iked stack overflow CVE-2026-19318 and iked type confusion CVE-2026-19315 (unauthenticated remote code execution via crafted traffic); epm stack overflow CVE-2026-13086 in the deprecated Mobile Security feature; and Dimension CVE-2026-78174, session-ID and CSRF token exposure that can let a low-privileged administrator take over a super-admin session. SecurityWeek (Ionut Arghire, 1 September) matches those five at CVSS 9.3. Patch to Fireware OS 2026.2.2, 12.12.2 or 12.5.20 and Dimension 2.3.1. WatchGuard also shipped additional high- and medium-severity fixes in the same wave (iked denial-of-service and Dimension SQL injection, CSRF, SSRF and related issues among them); this card does not list every CVE. The vendor is not aware of exploitation of these defects.
Palo Alto Networks advisory CVE-2026-0251 (published 13 May 2026, updated 27 August 2026 after a public PoC): multiple local privilege-escalation bugs in the GlobalProtect app (CWE-426 untrusted search path) let a local user reach NT AUTHORITY\SYSTEM on Windows and root on macOS and Linux, then run commands with administrative privileges. iOS, Android, Chrome OS and the GlobalProtect UWP app are not affected. No special configuration is required. Vendor CVSS-BT is 7.1 (CVSS 4.0); the same advisory lists CVSS-B 8.5. Exploit maturity is POC. Palo Alto Networks says it is not aware of malicious exploitation. Distinct from CVE-2026-0299 already on this desk.
ServiceNow's 27 August 2026 CVE record (CNA title: Sandbox Escape in ServiceNow AI Platform) says it remediated a sandbox-escape issue that could allow an unauthenticated user to execute arbitrary code within the ServiceNow AI Platform and gain more access than intended. ServiceNow scores it 10.0 (CVSS 4.0, CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H). Hosted instances received a vendor-deployed security update; partners and self-hosted customers were given the update. ServiceNow says it is not currently aware of malicious exploitation against ServiceNow instances. Self-hosted operators should apply the August 2026 CVE advisory updates (KB3152242). CNA-listed affected rows span Xanadu, Yokohama, Zurich and Australia patch families (including builds before Xanadu Patch 11 Hot Fix 7a, Yokohama Patch 12 Hot Fix 3b / Patch 13 Hot Fix 4, Zurich Patch 7b–12 hotfixes as listed, and Australia Patch 2–5 hotfixes as listed). Same-day desk cards cover the three CVSS 4.0 10.0 AI Platform issues (CVE-2026-18885, CVE-2026-18886, CVE-2026-74820). Correction (23 Oct 2026): this card said ServiceNow scored CVE-2026-6876 at 8.7 (CVSS 4.0) with a vector requiring low privileges and named the product Now Platform. ServiceNow's CVE record (last updated 1 September 2026) scores it 10.0 (CVSS 4.0) with no privileges required (PR:N) and names the product ServiceNow AI Platform. Updated 24 Oct 2026: the facts box now also shows the CVE record's product name and CVSS 4.0 vector. (source: CVE-2026-6876 record (cve.org))
ServiceNow's 27 August 2026 CVE record (CNA title: Unauthenticated Privilege Escalation via System Configuration Image Upload Processor) says it remediated an improper access control flaw in the ServiceNow AI Platform that could, in certain circumstances, let an unauthenticated user create or modify instance data beyond what was intended, resulting in privilege escalation. ServiceNow scored it 10.0 (CVSS 4.0). Hosted instances received a vendor-deployed security update; partners and self-hosted customers were given the update. ServiceNow says it is not currently aware of exploitation against ServiceNow instances. Self-hosted operators should apply the August 2026 CVE advisory updates (KB3152242). Affected CNA rows include Xanadu, Yokohama, Zurich and Australia patch families listed on the CVE record. Distinct from CVE-2026-74820 (SQL injection) and CVE-2026-18885 (code injection) on this desk.
