⚡ Weekly Recap: New Linux Flaw, PAN-OS Exploit, AI
- CVEs
- CVE-2026-0257CVE-2026-8732CVE-2026-27771CVE-2026-45659CVE-2026-9090CVE-2026-9098CVE-2026-48800CVE-2026-48778CVE-2026-48770CVE-2026-40933CVE-2026-9872CVE-2026-9893CVE-2026-32996CVE-2026-32997CVE-2026-44962CVE-2026-4868CVE-2026-1402CVE-2026-6713CVE-2026-46840CVE-2026-46775CVE-2026-46839CVE-2026-2332CVE-2026-4480CVE-2025-59199CVE-2026-9560CVE-2026-9312CVE-2026-3593CVE-2026-5946CVE-2026-5947CVE-2026-47783CVE-2026-44930CVE-2026-9089CVE-2026-4115CVE-2026-48095
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2025-59199 | Improper access control in Software Protection Platform (SPP) allows an authorized attacker to elevate privileges locally | 7.8 | 4% | ||
| CVE-2026-0257 | Authentication Bypass in Palo Alto Networks PAN-OS GlobalProtect Portal and Gateway | 7.8 | 95% | KEVRansomware | KEV |
CVE-2026-4868+2 related CVEs | GitLab has remediated an issue in GitLab EE affecting all versions from 18.8 before 18.10.7, 18.11 before 18.11.4, and 19.0 before 19.0.1 that, under certain… | 8.2 group max | <1% | ||
| CVE-2026-2332 | In Eclipse Jetty, the HTTP/1.1 parser is vulnerable to request smuggling when chunk extensions are used, similar to the "funky chunks" techniques outlined here | 9.1 | 1% | PoC | |
| CVE-2026-27771 | Gitea versions up to and including 1.26.1 have insufficient permission checks for Composer package source links, which can expose private or internal package… | 8.2 | 1% | ||
| CVE-2026-32996 | This vulnerability in Veeam Agent for Microsoft Windows allows for Local Privilege Escalation | 7.3 | <1% | PoC | |
| CVE-2026-32997 | A vulnerability allowing an authenticated user with the Backup Administrator role to write arbitrary files on Linux-based Veeam Backup & Replication server | 8.6 | <1% | ||
CVE-2026-3593+2 related CVEs | A use-after-free vulnerability exists within the DNS-over-HTTPS implementation | 9.8 group max | 2% | ||
| CVE-2026-40933 | Flowise: Due to unsafe serialization of stdio commands in the MCP adapter, an authenticated attacker can add an MCP stdio server with an… | 9.9 | 12% | PoC | |
| CVE-2026-4115 | A vulnerability was detected in PuTTY 0.83 | 2.9 | <1% | PoC | |
| CVE-2026-4480 | Samba printing subsystem: Samba passes the client-controlled job description string to the command configured with the "print command" setting via the "%J"… | 9.0 | 14% | PoC ×2 | |
| CVE-2026-44930 | An LDAP injection vulnerability in the LDAP Certificate repository of the XKMS server in Apache CXF may allow an attacker to retrieve arbitrary certificates… | 9.8 | <1% | ||
| CVE-2026-44962 | Plesk contains an XPath injection vulnerability in the APS Application Catalog search functionality, where user-supplied input is interpolated into XPath… | 9.9 | <1% | ||
| CVE-2026-45659 | Authenticated Deserialization RCE in Microsoft SharePoint Server (Actively Exploited) | 8.8 | 80% | KEVRansomware | KEV |
CVE-2026-46840+2 related CVEs | Vulnerability in Oracle REST Data Services (component | 10.0 group max | <1% | ||
| CVE-2026-47783 | In memcached before 1.6.42, username data for SASL password database authentication has a timing side channel because a loop exits as soon as a valid username… | 8.1 | 1% | ||
| CVE-2026-48095 | 7-Zip: Versions 26.00 and prior contain a heap buffer overflow vulnerability caused by an under-allocation in the NTFS compressed stream… | 8.8 | 1% | PoC | |
CVE-2026-48778+2 related CVEs | Notepad++: The tag in config.xml is read by NppXml::value() (Parameters.cpp:6430) and stored in _nppGUI._commandLineInterpreter without any… | 7.8 group max | <1% | PoC | |
| CVE-2026-8732 | Unauthenticated Privilege Escalation (Admin Account Creation) in WP Maps Pro Plugin | 9.8 | 20% | PoC | |
| CVE-2026-9089 | The ConnectWise Automate™ Agent does not fully verify the authenticity of components obtained during plugin loading and self-update operations | 8.8 | <1% | ||
| CVE-2026-9090 | Casdoor versions 2.362.0 and earlier contain a vulnerability that allows an attacker to bypass authentication by supplying an arbitrary signing certificate | 9.1 | <1% | ||
| CVE-2026-9098 | In Casdoor versions 2.362.0 and earlier, the SAML callback handler in controllers/auth.go accepts any well-formed SAMLResponse sent to /api/acs without… | 9.1 | <1% | ||
| CVE-2026-9312 | A server-side request forgery (SSRF) vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to send crafted requests… | 9.2 | 7% | ||
| CVE-2026-9560 | Privilege escalation via background service of OpenVPN Connect 3.5.1 through 3.8.1 on macOS allows attackers to execute arbitrary commands with elevated… | 9.4 | <1% | ||
CVE-2026-9872+1 related CVE | Out of bounds write in GPU in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker to potentially perform a sandbox escape via a crafted… | 9.6 group max | <1% |
From the original article
12 min read at thehackernews.com
A busted auth path here, a repo-side faceplant there, some "patched-ish" thing already getting chewed on in the wild, and then the usual bonus round: poisoned dev tools, sketchy forum chatter, phishing kits pretending to be productivity, and AI lowering the bar for people who already thought 'curl | sh' had a personality. The vibe is simple: old bugs, new wrappers, faster abuse. Patch the obvious crap first.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.