60
60
60
60
Progress fixes critical RCE flaw in Telerik Report Server, upgrade ASAP! (CVE-2024-6327)
60
60
60
60
60
60
60
Progress Software Patches High-Severity LoadMaster Flaws Affecting Multiple Versions
60
Progress Software Releases Patches for 6 Flaws in WhatsUp Gold
60
60
60
Exploit Attempts Recorded Against New MOVEit Transfer Vulnerability
60
60
60
60
60
60
60
60
60
60
60
60
60
Amasty patches dozens of Magento extensions, 2 critical
Amasty patched dozens of Magento/Adobe Commerce extensions, including two critical flaws allowing unauthenticated web shell upload and remote code execution.
Extension vendor Amasty released fixes for a large batch of Magento and Adobe Commerce modules, with critical unauthenticated file upload flaws in Advanced Product Reviews and Gift Card that allow attackers to plant web shells and take full control of stores. Dozens of additional high-, medium- and low-severity extensions were also patched. The vendor says the release affects almost every Magento and Adobe Commerce store. A related Order Attributes flaw was previously exploited heavily, with Sansec Shield blocking over 12,000 attempts against 25% of Magento stores in three days.
75
August 2026 CVE Landscape
Insikt Group catalogs 73 high-impact August 2026 CVEs (43 Very Critical), including PaperCut, Zimbra, and Metabase flaws actively exploited or weaponized.
Recorded Future's Insikt Group identified 73 high-impact vulnerabilities in August 2026, 43 rated Very Critical, spanning 45 vendors with Microsoft accounting for roughly 11%. 31 vulnerabilities surfaced via CISA's KEV catalog, with others validated via open sources, vendor telemetry, and honeypot data. New Nuclei detection templates were released for CVE-2025-62593 (Ray), CVE-2026-72898 (Metabase), and CVE-2026-9198 (IBM Langflow). The report also highlights two AI-assisted operations: UAT-10147 exploited Zimbra, AjaxPro, Nacos, and Telerik servers before using DeepAudit and PentestGPT post-compromise, while a separate Chinese-speaking actor weaponized Hermes Agent and DeepSeek in a failed attempt.
68
Week in review: High severity WordPress vulnerabilities, fake OAuth IDs bypass sign-in logs
60
60
60
60
60
Microsoft Fixes 72 Flaws, Including Patch for Actively Exploited CLFS Vulnerability
60
60
60
Microsoft Patches 61 Flaws, Including Two Actively Exploited Zero
60
Week in review: Exploited Citrix Bleed vulnerability, Atlassian patches critical Confluence bug
60