Monday, August 17, 2026 · generated · about 5 min read
Morning Brief
Patch today vendors with the most new CVEs today
- scriban 2 critical 15
- WordPress 1 critical 12
- Unknown 6
- Edimax 2 critical 5
- GL.iNet 5
- Open Asset Import Library 4
- opentofu 3
- stoatchat 3
Ranked by CVE count. Each vendor opens the CVE Feed filtered to that vendor and these dates.
Top developments ranked by cross-source trending
-
ShieldBreak bypasses Microsoft’s patch for earlier Defender flaw
Microsoft Defender’s latest patch bypass shows a familiar problem. A newly disclosed Microsoft Defender flaw called ShieldBreak shows that fixing one attack path doesn’t always close every route to the same result…
Also in CCCS Alerts & Advisories Bleeping Computer Cyber Security News +3
-
Hacker claims 3.6 million Azure account records stolen from major companies
A threat actor is selling employee databases allegedly stolen from the Microsoft Azure infrastructure of multiple Fortune 500 companies after gaining access using compromised credentials.
Also in Tenable Blog The Register Security SecurityWeek
-
Snowflake GitHub Actions Flaw Lets Crafted Issues Trigger Command Injection
Cybersecurity researchers at Wiz have disclosed a new GitHub Actions workflow injection vulnerability in Snowflake's public snowflakedb/snowflake-connector-net repository that it said could be exploited through a…
Also in Cyber Security News Bleeping Computer Wiz Research
-
Apple Patches iOS and macOS, (Mon, Aug 17th)
Apple today released updates for iOS/iPadOS (26 and 18) and macOS 26. This update fixes 108 vulnerabilities and comes about two weeks after the much smaller macOS update that addressed the single screen-sharing…
Also in CCCS Alerts & Advisories SANS Internet Storm Center Malwarebytes Labs
-
Video Call Exploit Chains Two Flaws in Unisoc Modems
Researchers found that by combining two vulnerabilities, they could take over an Android device by delivering a payload and getting the victim to answer their phone.
Also in The Hacker News Malwarebytes Labs
-
⚡ Weekly Recap: VMware Exploits, Windows 0-Day, MCP Attacks, Browser Hijacks and More
The expensive attacks are not always the clever ones. This week had plenty of proof. Exposed services got hit, old bugs found fresh use, browser sessions became attack paths, and supply-chain problems kept spreading…
Also in Microsoft Security Microsoft Security Cyber Security News
-
Critical SAP Commerce Cloud Vulnerability Exploited 3 Days After Disclosure
The vulnerability tracked as CVE-2026-58231 can be exploited to execute arbitrary code and compromise internal components.
Also in CCCS Alerts & Advisories
-
Forminator WordPress Flaw Can Enable Unauthenticated RCE via Malicious PHP Uploads
A critical security flaw has been disclosed in Forminator Forms, a WordPress plugin with more than 600,000 active installations, that could be exploited to achieve arbitrary code execution on susceptible sites. The…
Also in Infosecurity Magazine
-
Evooo1Bot Linux Botnet Exploits Known Flaws to Turn Edge Devices Into SOCKS5 Proxies
Cybersecurity researchers have flagged a previously undocumented Linux botnet family dubbed Evooo1Bot that derives its core functionality from the Mirai botnet source code and is equipped to turn internet-facing devices…
Also in Dark Reading
-
French tax authority data breach affects 678,000 individuals
The French Ministry of the Economy and Finance has disclosed a data breach after an attacker accessed the General Directorate of Public Finances (DGFiP) systems and stole data belonging to 678,000 individuals.
Also in SecurityWeek
Vulnerability watch what to look at, most urgent first
| Details | CVE | Product | Severity | CVSS | EPSS | KEV | Fix | In the news | |
|---|---|---|---|---|---|---|---|---|---|
| Highest scoring today 10new CVEs, highest CVSS first | |||||||||
| CVE-2026-19977 | ipTIME A3004TEFM | Critical | 10.0 | — | — | — | — | CVSS 10.0 | |
What it isA vulnerability was detected in EFM ipTIME A3004T 14.19.0. The affected element is the function httpcon_check_session_url of the component Session Validation. Performing a manipulation results in improper authentication. Remote exploitation… Attack
Exploitation
|
|||||||||
| CVE-2026-19959 | EW-7478APCEdimax | Critical | 9.9 | — | — | — | — | CVSS 9.9 | |
What it isA weakness has been identified in Edimax EW-7478APC 1.04. This affects the function formWanTcpipSetup of the file /goform/formWanTcpipSetup. This manipulation of the argument pppUserName causes stack-based buffer overflow. Remote exploitati… Attack
Exploitation
|
|||||||||
| CVE-2026-19961 | EW-7478APCEdimax | Critical | 9.9 | — | — | — | — | CVSS 9.9 | |
What it isA vulnerability was detected in Edimax EW-7478APC 1.04. Affected is the function formWlSiteSurvey of the file /goform/formWlSiteSurvey. Performing a manipulation of the argument selSSID results in buffer overflow. The attack is possible to … Attack
Exploitation
|
|||||||||
| CVE-2024-13784 | Contact Form, Survey, Quiz & Popup Form Builder – ARFormsWordPress | Critical | 9.8 | 0.5% | — | — | — | EPSS 0.5%CVSS 9.8 | |
What it isThe Contact Form, Survey, Quiz & Popup Form Builder – ARForms plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.8.5 via deserialization of untrusted input from form submissions. This makes it… Attack
Exploitation
|
|||||||||
| CVE-2026-73056 | siyuansiyuan-note | Critical | 9.8 | — | — | — | — | CVSS 9.8 | |
What it isSiYuan kernel versions before 3.7.4 contain an improper restriction of excessive authentication attempts vulnerability in the CheckAuth() middleware. The middleware accepts the API token (Conf.Api.Token) via an Authorization header (Token/B… Attack
Exploitation
|
|||||||||
| CVE-2026-73061 | scribanscriban | Critical | 9.8 | — | — | — | — | CVSS 9.8 | |
What it isScriban before 7.2.2 contains an access-modifier bypass vulnerability in TypedObjectAccessor that allows template code to write CLR object properties without setter-visibility checks. Attackers can modify properties with private, internal, … Attack
Exploitation
|
|||||||||
| CVE-2026-74790 | scribanscriban | Critical | 9.1 | — | — | — | — | CVSS 9.1 | |
What it isScriban before 7.0.0 caches TypedObjectAccessor by Type only without considering MemberFilter changes, allowing reused TemplateContext instances to expose members that should be hidden. Attackers can access filtered properties and fields by… Attack
Exploitation
|
|||||||||
| CVE-2026-74791 | scribanscriban | High | 8.6 | — | — | — | — | CVSS 8.6 | |
What it isScriban before 7.0.0 fails to clear the CachedTemplates dictionary when TemplateContext.Reset() is called, allowing cached templates to persist across reused contexts. Attackers can exploit request-dependent ITemplateLoader implementations … Attack
Exploitation
|
|||||||||
| CVE-2026-19979 | A1300GL.iNet | High | 8.3 | — | — | — | — | CVSS 8.3 | |
What it isA vulnerability was identified in GL.iNet A1300, AX1800, AXT1800, BE1400, BE3600, BE6500, BE9300, BE10000, E5800, MT2500, MT3000, MT3600BE, MT5000, MT6000, X2000, X3000 and XE3000 up to 4.8.x. Affected by this vulnerability is the function … Attack
Exploitation
|
|||||||||
| CVE-2026-19983 | A1300GL.iNet | High | 8.3 | — | — | — | — | CVSS 8.3 | |
What it isA vulnerability was detected in GL.iNet A1300, AX1800, AXT1800, MT2500, MT3000, MT6000, X3000 and XE3000 4.8.x. This issue affects some unknown processing of the file /usr/bin/gl_nas_sys of the component NAS Command Service. The manipulatio… Attack
Exploitation
|
|||||||||
Click a row, or press +, to expand it.EPSS is FIRST's estimated chance of exploitation in the next 30 days.Full CVE Feed
Assembled automatically, once a day, from data the Security Feed and CVE Feed already collect and score. No AI writes any of this, and every number traces back to something already published on those two tools.
Top developments come from the Security Feed's cross-source trending detection. Vulnerability watch comes from the CVE Feed's daily NVD and CISA KEV sync.