Weekly Cybersecurity Newsletter Bulletin – Cisco and Android 0-Day, BragJack Attack, Claude Opus 5 Used to Hack OpenAI, and 20+ Stories
Actively exploited Cisco ISE and Pixel zero-days lead a week of critical flaws, PoCs, and AI-agent attacks.
Cisco disclosed CVE-2026-76460, a CVSS 10.0 authentication bypass in Identity Services Engine and ISE-PIC that is already exploited for unauthenticated root command execution; fixes are 3.1 Patch 12 through 3.5 Patch 4, while end-of-maintenance 3.0 stays exposed. Google confirmed limited targeted exploitation of Pixel modem CVE-2026-58704, patched in a September 2026 bulletin covering 110 vulnerabilities. The roundup also covers an unpatched Steam local SYSTEM proof of concept, Check Point CVE-2026-91843 (CVSS 9.8), WordPress Click2Shell fixed in 7.1.1, and Linux kernel CVE-2026-43502 (ZcopyReaper).
- CVE-2026-76460 in Cisco ISE is CVSS 10.0 and actively exploited for root access.
- Pixel modem CVE-2026-58704 sees limited targeted exploitation; September fixes 110 bugs.
- Unpatched Steam BrokenPipe PoC yields local SYSTEM via steamservice.exe.
- Check Point patched pre-auth root overflow CVE-2026-91843, CVSS 9.8.
- WordPress 7.1.1 fixes Click2Shell; Linux CVE-2026-43502 allows local root via RDS.
- ATT&CK
- T1190 Exploit Public-Facing ApplicationT1068 Exploitation for Privilege EscalationT1204.001 Malicious Link
- Vendors
- CiscoGoogleValveCheck Point
- Victims
- OpenAI
- Organizations
- OpenAI
- AI models
- Claude Opus 5
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-43502 | Linux kernel: net/rds: handle zerocopy send cleanup before the message is queued | 7.8 | <1% | ||
| CVE-2026-58704 | Permission Bypass in Google Pixel Cellular Modem Allows Proximal Privilege Escalation | 8.8 | <1% | KEV | KEV |
| CVE-2026-76460 | Unauthenticated Management Interface Bypass in Cisco ISE and ISE-PIC | 10.0 | 76% | KEVPoC | KEV |
| CVE-2026-91843 | Unauthenticated stack overflow gives root RCE in Check Point login process | 9.8 | <1% | PoC |
From the original article
11 min read at cybersecuritynews.com
This week’s roundup covers a maximum-severity Cisco ISE zero-day under active exploitation, an actively exploited Android modem flaw on Pixel devices, a browser-extension attack that hijacks AI agents across five browsers, and researchers using Claude Opus 5 to compromise OpenAI’s forum and reach its internal source code. Also inside: a WordPress one-click RCE chain, an […]
By Guru Baran · cybersecuritynews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.