⚡ Weekly Recap: AI Goes Rogue, Metabase 0-Day, MCP Supply
- CVEs
- CVE-2026-34348CVE-2026-18497CVE-2026-63508CVE-2026-56162CVE-2026-65667CVE-2026-50515CVE-2026-62830CVE-2026-59115CVE-2026-50481CVE-2026-64638CVE-2026-64564CVE-2026-56181CVE-2026-63913CVE-2026-64561CVE-2026-20303CVE-2026-20304CVE-2026-20310CVE-2026-20267CVE-2026-20272CVE-2026-18830CVE-2026-18236CVE-2026-64650CVE-2026-64651CVE-2026-41679CVE-2026-58073CVE-2026-58072CVE-2026-16498CVE-2026-16496CVE-2026-14869CVE-2026-15307CVE-2026-64531CVE-2026-18577CVE-2026-18556CVE-2026-59774CVE-2026-58048CVE-2026-17583CVE-2026-8496CVE-2026-65400CVE-2026-19137CVE-2026-19149CVE-2026-19154CVE-2026-19157CVE-2026-19170CVE-2026-19172CVE-2013-3821CVE-2025-8943
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2025-8943 | Unauthenticated Remote Code Execution in Flowise AI Agent Builder | 9.8 | 75% | PoC | |
| CVE-2026-14869 | The terraform-mcp-server before version 1.1.0 is vulnerable to a server-side request forgery issue in the streamable-HTTP transport that may allow an… | 8.6 | <1% | ||
| CVE-2026-15307 | An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8 | 8.7 | <1% | ||
| CVE-2026-16496 | The terraform-mcp-server before version 1.1.0 is vulnerable to an authorization bypass in the streamable-HTTP stateful transport mode that may allow a user who… | 8.9 | <1% | ||
| CVE-2026-16498 | The terraform-mcp-server before version 1.1.0 is vulnerable to a cross-tenant credential reuse issue in the streamable-HTTP stateless transport mode that may… | 10.0 | <1% | ||
| CVE-2026-17583 | The affected Thermo Fisher Applied Biosystems Genetic Analyzers are vulnerable because .fsa/.hid output files can be edited | 8.3 | <1% | ||
| CVE-2026-18236 | A vulnerability in the Agent Development Kit (ADK) allows for continuation forgery in tool confirmations | 9.3 | <1% | ||
| CVE-2026-18497 | A heap-buffer-overflow vulnerability exists in the nothings stb TrueType library, up to version 1.26, that is used for parsing TrueType font files | 7.1 | <1% | ||
| CVE-2026-18556 | Authentication Bypass (Alternate Path/Channel) in N-able N-central | 8.2 | 8% | KEV | KEV |
| CVE-2026-18577 | Authentication Bypass and Account Takeover in N-able N-central (Incomplete Patch) | 8.2 | 15% | KEV | KEV |
| CVE-2026-18830 | Insufficient input validation in Amazon Bedrock AgentCore harness might allow an authenticated remote user to execute configured tools bypassing model… | 8.6 | <1% | ||
| CVE-2026-19149 | Use after free in Aura in Google Chrome on Linux prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML… | 9.6 group max | <1% | ||
CVE-2026-20272+1 related CVE | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive… | 9.8 group max | <1% | ||
CVE-2026-20303+2 related CVEs | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive… | 9.9 group max | <1% | ||
| CVE-2026-34348 | Protection mechanism failure in Windows Event Logging Service allows an authorized attacker to disclose information over a network | 6.5 | <1% | ||
| CVE-2026-41679 | Unauthenticated RCE in Paperclip before 2026.416.0 | 10.0 | 32% | PoC | |
| CVE-2026-50481 | Modification of assumed-immutable data (maid) in Azure Active Directory allows an authorized attacker to elevate privileges over a network | 9.9 | <1% | ||
| CVE-2026-50515 | Deserialization of untrusted data in Azure Service Bus allows an authorized attacker to execute code over a network | 9.9 | 1% | ||
| CVE-2026-56162 | Improper authentication in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network | 10.0 | <1% | ||
| CVE-2026-56181 | Origin validation error in Windows Network Address Translation (NAT) allows an unauthorized attacker to perform spoofing over an adjacent network | 8.3 | <1% | ||
| CVE-2026-58048 | Improper preservation of SQL mode when renaming databases in cPanel allows execution of SQL in root context | 9.4 | <1% | ||
| CVE-2026-58072 | A vulnerability in Veeam Service Provider Console allowing arbitrary file write on the management server, which can lead to remotecode execution | 9.0 | <1% | ||
| CVE-2026-58073 | A vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to impersonate a managed agent andobtain that agent's credentials | 9.5 | <1% | ||
| CVE-2026-59115 | '.../...//' in Microsoft Entra Provisioning Service (SyncFabric) allows an authorized attacker to elevate privileges over a network | 9.9 | <1% | ||
| CVE-2026-59774 | Unauthenticated file read via Org-mode in Gitea | 9.8 | 28% | PoC ×2 | |
| CVE-2026-62830 | Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network | 9.9 | <1% | ||
| CVE-2026-63508 | Missing authentication for critical function in Microsoft Planetary Computer Pro allows an unauthorized attacker to elevate privileges over a network | 10.0 | <1% | ||
| CVE-2026-63913 | Linux kernel: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check | 8.2 | <1% | ||
| CVE-2026-64531 | Linux kernel: net: openvswitch: reject oversized nested action attrs Open vSwitch stores generated flow actions as nlattrs… | 7.8 | <1% | ||
CVE-2026-64564+1 related CVE | Linux kernel: sctp: don't free the ASCONF's own transport in DEL-IP processing sctp_process_asconf() caches the transport… | 9.8 group max | 1% | ||
| CVE-2026-64638 | Pre-Auth Reflected XSS in WordPress Login Screen Can Escalate to RCE | 8.9 | 31% | ||
| CVE-2026-64650 | The `@ai-sdk/harness-opencode` tool is an HarnessV1 adapter backed by @openai/codex-sdk, which drives the codex command line interface | 6.3 | <1% | ||
| CVE-2026-64651 | The `@ai-sdk/harness-opencode` tool connects HarnessAgent to OpenCode through a sandboxed bridge | 6.3 | <1% | ||
| CVE-2026-65400 | Authentication Bypass in Apple macOS Screen Sharing | 9.8 | 2% | KEV | KEV |
| CVE-2026-65667 | Missing authorization in Microsoft Teams allows an unauthorized attacker to elevate privileges over a network | 10.0 | <1% | ||
| CVE-2026-8496 | A cross-site scripting (XSS) vulnerability exists in Alinto SOGo, version 5.12.7 | 6.1 | <1% |
From the original article
10 min read at thehackernews.com
A lot of security problems still begin with someone doing a completely normal thing. Cloning a repo. Answering a call.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.