⚡ Weekly Recap: Linux Flaws, Defender 0-Days, Router Botnets, and Supply Chain Chaos
- CVEs
- CVE-2026-46333CVE-2026-41091CVE-2026-45498CVE-2026-9082CVE-2026-20223CVE-2026-45585CVE-2026-48172CVE-2026-34926CVE-2026-45584CVE-2026-2743CVE-2026-7301CVE-2026-7302CVE-2026-7304CVE-2026-29205CVE-2026-8178CVE-2026-8053CVE-2026-45829CVE-2026-8153CVE-2026-3102CVE-2026-9110CVE-2026-9111CVE-2026-8511CVE-2026-8522CVE-2026-45434CVE-2026-33000CVE-2026-34908CVE-2026-34909CVE-2026-34910CVE-2026-34911CVE-2026-45401CVE-2026-9256CVE-2026-20239CVE-2026-46376CVE-2026-35194
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-20223 | A vulnerability in the access validation of internal REST APIs of Cisco Secure Workload could allow an unauthenticated, remote attacker to access site… | 10.0 | <1% | ||
| CVE-2026-20239 | In Splunk Enterprise versions below 10.2.2 and 10.0.5, and Splunk Cloud Platform versions below 10.3.2512.8, 10.2.2510.11, 10.1.2507.21, and 10.0.2503.13, a… | 6.5 | <1% | ||
| CVE-2026-2743 | Arbitrary File Write via Path Traversal upload to Remote Code Execution in SeppMail User Web Interface | 10.0 | <1% | ||
| CVE-2026-29205 | Incorrect privileges management and insufficient path filtering allow to read arbitrary file on the server via the cpdavd attachment download endpoints | 8.6 | 8% | ||
| CVE-2026-3102 | A vulnerability was determined in exiftool up to 13.49 on macOS | 2.1 | 4% | PoC ×2 | |
CVE-2026-33000+1 related CVE | A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute… | 9.1 group max | 1% | ||
CVE-2026-34910+2 related CVEs | Unauthenticated Command Injection in Ubiquiti UniFi OS Devices | 10.0 | 90% | KEVPoC | KEV |
| CVE-2026-34926 | Directory Traversal in Trend Micro Apex One (On-Premise) Server | 6.7 | 13% | KEV | KEV |
| CVE-2026-35194 | Code injection in SQL code generation in Apache Flink 1.15.0 through 1.20.x and 2.0.0 through 2.x allows authenticated users with query submission privileges… | 8.1 | <1% | ||
CVE-2026-45498+1 related CVE | Denial-of-Service Vulnerability in Microsoft Defender Antimalware Platform | 7.5 group max | 63% | KEV | KEV |
| CVE-2026-45401 | Open WebUI: The validate_url() function in backend/open_webui/retrieval/web/utils.py only validates the initial URL submitted by the caller… | 8.5 | <1% | PoC | |
| CVE-2026-45434 | Improper Authentication in Apache OFBiz Enables Unauthenticated RCE | 9.8 | 22% | ||
| CVE-2026-45584 | Heap-based buffer overflow in Microsoft Defender allows an unauthorized attacker to execute code over a network | 8.1 | <1% | ||
| CVE-2026-45585 | Microsoft is aware of a security feature bypass vulnerability in Windows publicly referred to as "YellowKey" | 6.8 | 2% | PoC ×4 | |
| CVE-2026-45829 | A pre-authentication, code injection vulnerability in version 1.0.0 or later of the ChromaDB Python project allows an unauthenticated attacker to run arbitrary… | 10.0 | 12% | ||
| CVE-2026-46333 | Linux kernel: ptrace: slightly saner 'get_dumpable()' logic | 7.1 | 4% | PoC | |
| CVE-2026-46376 | FreePBX: Unauthenticated users may be able to access the User Control Panel (UCP) using hard-coded initial template credentials if these… | 9.3 | <1% | ||
| CVE-2026-48172 | Privilege Escalation (Possible Root) in LiteSpeed cPanel Plugin | 10.0 | 18% | KEV | KEV |
CVE-2026-7304+2 related CVEs | SGLangs multimodal generation runtime is vulnerable to unauthenticated remote code execution when the --enable-custom-logit-processor option is enabled, as… | 9.8 group max | <1% | ||
| CVE-2026-8053 | An issue in MongoDB Server's time-series collection implementation allows an authenticated user with database write privileges to trigger an out-of-bounds… | 8.7 | <1% | ||
| CVE-2026-8153 | OS command injection in Dashboard Server interface in Universal Robots PolyScope versions prior to 5.25.1 allows unauthenticated attacker to craft commands… | 9.8 | 2% | ||
| CVE-2026-8178 | An issue exists in Amazon Redshift JDBC Driver versions prior to 2.2.2 | 9.2 | <1% | ||
CVE-2026-8511+1 related CVE | Use after free in UI in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page | 9.6 group max | <1% | ||
| CVE-2026-9082 | Actively Exploited SQL Injection in Drupal Core | 9.8 | 89% | KEV | KEV |
CVE-2026-9111+1 related CVE | Use after free in WebRTC in Google Chrome on Linux prior to 148.0.7778.179 allowed a remote attacker to execute arbitrary code via a crafted HTML page | 8.8 group max | <1% | ||
| CVE-2026-9256 | NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module | 9.2 | 11% |
From the original article
13 min read at thehackernews.com
A sketchy dev tool got people pwned, old bugs came back from the dead, and security products somehow needed protecting from themselves. A bunch of companies spent the week checking old boxes and forgotten servers they should've patched years ago. Good times.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.