Ray

Mentions · 7d0
Mentions · 30d0
All mentions3
First seenAug 18, 2026
Last mentionedSep 8, 2026

Timeline

3 articles · newest first

August 2026 CVE Landscape

Insikt Group catalogs 73 high-impact August 2026 CVEs (43 Very Critical), including PaperCut, Zimbra, and Metabase flaws actively exploited or weaponized.

Recorded FutureSep 8, 00:00 UTC · Sep 8, 2026VulnerabilityExploitedCVE-2025-62593 CVE-2026-72898 CVE-2026-9198+44 · 2 reads

U.S. CISA adds a Ray-Project Ray flaw to its Known Exploited Vulnerabilities catalog

CISA added actively exploited Ray RCE flaw CVE-2025-62593 (CVSS 9.4) to its KEV catalog, ordering federal agencies to patch by August 20, 2026.

Security AffairsAug 18, 08:02 UTC · Aug 18, 2026Exploit / PoCExploitedCVE-2025-625933

CISA Flags Actively Exploited Ray Flaw That Can Trigger Browser

CISA added actively exploited Ray flaw CVE-2025-62593 (CVSS 9.4) to its KEV catalog; the DNS rebinding RCE has powered crypto-mining and DDoS botnet campaigns.

The Hacker NewsAug 18, 06:34 UTC · Aug 18, 2026Exploit / PoCExploitedCVE-2025-625933

Related CVEs

by mentions

CVE-2025-6259360%9.4
Actively Exploited Browser-Based RCE in Ray AI Compute Engine
published Nov 26, 2025Ray-Project (Anyscale) RayKEVPoC
CVE-2026-7289899%10.0
Unauthenticated SQL Injection in Metabase Grants Admin Access
published Aug 10, 2026MetabaseKEVPoC ×3
CVE-2026-919829%9.8
Unauthenticated RCE Chain in IBM Langflow OSS 1.0.0-1.10.0
published Jul 17, 2026IBM Langflow OSSKEVPoC
CVE-2026-8207861%9.4
Unsafe Reflection RCE in PaperCut NG/MF, Chained with Auth Bypass in Attacks
published Aug 28, 2026PaperCut NGKEV
CVE-2026-8157884%8.8
Missing Authentication for Critical Function in PaperCut NG/MF Web Interface
published Aug 28, 2026PaperCut MFKEV
CVE-2026-598002%9.2
9Router before 0.4.44 contains an OS command injection vulnerability in the unauthenticated POST /api/tunnel/tailscale-install endpoint (this route is not…
published Jul 7, 2026
CVE-2026-33954%5.5
A flaw has been found in MaxSite CMS up to 109.1
published Mar 1, 2026max-3000 maxsite cms

Appears with

CISAvendor · 3
Metabaseproduct · 1
Metabasevendor · 1
Aviatrixvendor · 1
IBM Langflowproduct · 1
Zimbravendor · 1
PaperCut NG/MFproduct · 1
IBM Langflowvendor · 1
RondoDoxthreat actor · 1
Insikt Grouporganization · 1
DeepSeekai model · 1
PentestGPTai model · 1
Microsoft Windowsproduct · 1
Hermes Agentai model · 1
sudoproduct · 1
CISAorganization · 1

Entities are extracted by the model from each article. First seen Aug 18, 2026, last mentioned Sep 8, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.