⚡ Weekly Recap: Cisco 0-Day, AI Agent RCE, ClickFix Attacks, ClickFix Surge, and Browser Hijacks
Weekly recap led by actively exploited Cisco ISE auth-bypass CVE-2026-76460 (CVSS 10.0), plus Plugin4Shell AI-agent RCE and KREMLIN banking malware.
Cisco warned that maximum-severity CVE-2026-76460 (CVSS 10.0), an authentication bypass in Identity Services Engine caused by insufficient authentication control on an API endpoint, is under active exploitation by unauthenticated remote attackers. Other stories include Hacktron using Claude Opus 5 to chain an OpenAI SSO misconfiguration with libheif RCE CVE-2026-32882 to access employee ChatGPT accounts and internal repositories (fixed in 14 hours), and Plugin4Shell, a zero-click RCE bypassing SHA-pinning verification in Claude Code, OpenAI Codex, GitHub Copilot, and Google Gemini CLI. Elastic also documented the KREMLIN Brazilian banking malware tracked as REF9334 using malicious Chrome/Edge extensions since May 2025, and US authorities seized two NightmareStresser DDoS-for-hire domains. OpenAI disclosed six new model misalignment incidents with a new reporting framework.
- Cisco ISE CVE-2026-76460 (CVSS 10.0) auth bypass actively exploited via crafted API requests
- Plugin4Shell zero-click RCE bypasses SHA pinning in Claude Code, Codex, Copilot, Gemini CLI
- KREMLIN banking malware REF9334 steals credentials via Chrome/Edge extensions since May 2025
- US seized two NightmareStresser domains tied to hundreds of thousands of DDoS attacks
- CVEs
- CVE-2026-76460CVE-2026-32882CVE-2026-58138CVE-2026-58704CVE-2026-90894CVE-2026-82079CVE-2026-89049CVE-2026-43502CVE-2026-80844CVE-2026-81000CVE-2026-68121CVE-2026-74469CVE-2026-70416CVE-2025-43936CVE-2026-68488CVE-2026-56711CVE-2026-73324CVE-2026-65638CVE-2026-85982CVE-2026-78626CVE-2026-78623CVE-2026-0310CVE-2026-85061CVE-2026-65812CVE-2026-80172CVE-2026-61410CVE-2026-80238CVE-2026-18851CVE-2026-91721CVE-2026-91749
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2026-70416+1 related CVE | Unauthenticated Deserialization RCE in Dell ObjectScale | 9.8 group max | — | ||
| CVE-2026-0310 | Buffer Overflow in PAN-OS XML Processing Enables Root RCE on PA-Series Firewalls | 7.2 | — | ||
| CVE-2026-18851 | Missing Authorization in Ivanti Endpoint Manager Mobile Allows Admin Privilege Escalation | 8.8 | 1% | ||
| CVE-2026-32882 | libheif is a HEIF and AVIF file format decoder and encoder | 7.1 | <1% | ||
| CVE-2026-43502 | Linux kernel: net/rds: handle zerocopy send cleanup before the message is queued | 7.8 | <1% | ||
CVE-2026-56711+1 related CVE | Heap buffer overflow in VLC media player via integer overflow in picture allocation | 7.3 group max | <1% | ||
| CVE-2026-58138 | Orkes Conductor 3.21.21 before 3.30.2 contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute arbitrary OS… | 9.3 | 9% | PoC | |
| CVE-2026-58704 | Permission Bypass in Google Pixel Cellular Modem Allows Proximal Privilege Escalation | 8.8 | <1% | KEV | KEV |
CVE-2026-61410+1 related CVE | Missing Authorization Allows Unauthenticated RCE in Dell Secure Connect Gateway 5.0 | 9.4 group max | 1% | ||
| CVE-2026-65638 | Unauthenticated shell command injection in ConfigServer Security & Firewall (CSF) | 9.2 | — | ||
| CVE-2026-65812 | Sensitive Information Disclosure in Microsoft Teams for Android | 6.8 | <1% | ||
| CVE-2026-68121 | Use-After-Free in Linux Kernel PPPoE Send Path Enables Local Root (PPPoEject) | 7.8 | <1% | PoC ×2 | |
| CVE-2026-68488 | TOCTOU Symlink Race in Plesk Allows Local Privilege Escalation to Root | 9.9 | — | ||
| CVE-2026-74469 | Linux kernel: sctp: prevent peer transport count overflow sctp_assoc_add_peer() increments the association's 16-bit… | 8.8 | <1% | ||
| CVE-2026-76460 | Unauthenticated Management Interface Bypass in Cisco ISE and ISE-PIC | 10.0 | 76% | KEVPoC | KEV |
CVE-2026-78623+1 related CVE | SQL Injection in Okta Access Gateway via Unsanitized SAML Assertion Values | 9.9 group max | <1% | ||
| CVE-2026-80172 | Unauthenticated Token Replay Flaw in Dell Secure Connect Gateway 5.0 | 9.8 | <1% | ||
| CVE-2026-80844 | Out-of-bounds memory access in Linux kernel AH6 (xfrm) enables local privilege escalation | — | <1% | PoC ×2 | |
| CVE-2026-81000 | Linux kernel TUN/TAP headroom integer underflow enables local memory corruption | 7.8 | <1% | PoC ×2 | |
| CVE-2026-82079 | Stack Buffer Overflow in Nintendo Switch Local Wireless Enables Nearby-Attacker RCE | 7.0 | — | ||
| CVE-2026-85061 | Sanitization Bypass (DOM XSS) in MapLibre GL JS Attribution Control | 10.0 | <1% | ||
| CVE-2026-85982 | Stored XSS in Auth0 AD/LDAP Connector Admin Panel | 9.0 | <1% | ||
| CVE-2026-89049 | SSRF in AWS Systems Manager Agent can expose instance IAM role credentials | 8.5 | — | ||
| CVE-2026-90894 | Local Root Privilege Escalation in Parallels Desktop via tar Argument Injection | 7.8 | — | ||
CVE-2026-91749+1 related CVE | Critical Use-After-Free in Google Chrome Workers Enables Sandbox Escape | 9.6 group max | — |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| domain | brevo.com | hours, the Worker injected a malicious script into pages of brevo.com and sibforms.com and into three JavaScript files that custo |
| domain | sibforms.com | ker injected a malicious script into pages of brevo.com and sibforms.com and into three JavaScript files that customers embed on the |
From the original article
11 min read at thehackernews.com
A browser. A plugin. A package.
thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.