Security news, decoded.

Citrix has issued a security update addressing two newly disclosed vulnerabilities in its NetScaler ADC and NetScaler Gateway products. The most severe flaw, CVE-2026-19490, allows unauthenticated remote attackers to bypass authentication mechanisms under specific configuration conditions, while CVE-2026-19489 permits denial-of-service attacks via a memory overflow when SIP ALG is enabled. Although there is no evidence of active exploitation yet, the vendor strongly recommends that administrators apply the relevant patches immediately to secure their environments.

Threat actors are actively leveraging an unauthenticated server-side request forgery (SSRF) flaw in MLflow, tracked as CVE-2026-64849, to exfiltrate cloud credentials and secrets. The vulnerability stems from the MLflow Tracking Server exposing model-registry webhook APIs without proper authentication, allowing attackers to bypass SSRF protections introduced in version 3.10.0 and directly access cloud metadata services. With a CVSS score of 9.3, this defect affects all MLflow versions prior to 3.15.0 and has been added to the CISA Known Exploited Vulnerabilities catalog, prompting urgent remediation across affected systems.

Cisco has issued security updates to address 15 vulnerabilities, highlighting critical defects in its Crosswork and Secure Workload platforms. The latest release for Crosswork resolves four high-severity issues, including CVE-2026-20030, CVE-2026-20357, and CVE-2026-20358, which enable risks such as SQL injection and remote code execution, alongside CVE-2026-20359 involving credential protection failures. Secure Workload versions 4.0.4.16 and 3.10.9.1 fix five similar critical-class vulnerabilities covering access control, command injection, and buffer overflow concerns. While no active exploitation has been reported, the vendor advises users to apply these patches promptly to mitigate potential unauthorized system access.

Security researchers have identified two denial-of-service vectors, collectively termed "CDN Tsunami," that exploit the conversion of HTTP/3 traffic to HTTP/1.1 by major content delivery networks. By leveraging mismatches in header compression and connection handling, attackers can amplify bandwidth or exhaust origin server connections, with factors reaching up to 350x on platforms like Alibaba, Baidu, and Tencent. Although no CVE has been assigned and no wild exploitation is currently reported, the study indicates significant potential for disruption across six prominent providers. Affected services include Cloudflare, Amazon CloudFront, and Fastly, prompting recommendations for stricter CDN-side limits on header sizes and backend connection multiplicity.

CISA has identified active real-world attacks targeting a critical server-side request forgery flaw in MLflow, tracked as CVE-2026-64849. This unauthenticated DNS-rebinding bypass affects the outbound webhook delivery mechanism and enables attackers to steal cloud credentials, such as AWS IAM keys, from internal services. The vulnerability is resolved in MLflow 3.15.0, and federal agencies have been ordered to apply the patch within two weeks under Binding Operational Directive 26-04.

Researchers at Cycode revealed that vulnerabilities in AIT-GUI, the browser-based console for NASA/JPL's AMMOS Instrument Toolkit, allowed unauthenticated actors to send arbitrary commands to spacecraft instruments. Identified as GHSA-p9r8-2q67-fp86 with a CVSS score of 9.4, the flaw impacted versions up to 2.5.1 because the server bound to all interfaces without requiring credentials or CSRF protection. Version 2.5.2 resolves these issues by restricting network bindings and enforcing origin checks on state-changing requests, though related records like CVE-2026-60112 highlight ongoing discrepancies regarding full authentication enforcement.

Cisco Talos has published analysis of a new cross-platform implant named SPECTRE, which is actively being deployed by the threat actor UAT-10147 against Windows and Linux environments. The malware integrates advanced capabilities including process injection, credential theft, and Bring Your Own Vulnerable Driver (BYOVD) techniques to neutralize endpoint detection and response solutions by exploiting known vulnerabilities such as CVE-2019-16098 and CVE-2021-21551. Notably, the research highlights emerging patterns in offensive security tooling, with indicators suggesting that UAT-10147 utilized AI-assisted workflows to develop parts of the SPECTRE implant and the associated Specter Linux rootkit. This evolution underscores the increasing sophistication of commodity intrusion tooling and its impact on modern enterprise defenses.

CERT Polska has confirmed that attackers are actively exploiting a critical remote code execution vulnerability identified as CVE-2026-73570 in the Zimbra Collaboration Suite. This flaw stems from insufficient input sanitization in the SNMP monitoring component, allowing unauthenticated users to execute arbitrary operating system commands when SNMP notifications are enabled. To remediate this issue, Zimbra released version 10.1.20 on July 20. Administrators should urgently apply this update and review system logs for signs of compromise, such as unexpected service restarts or unauthorized file creations within specific Jetty webapp directories.

Citrix has released security updates for NetScaler ADC and NetScaler Gateway to remediate two distinct vulnerabilities, the most severe being an authentication bypass tracked as CVE-2026-19490 with a CVSS score of 9.3. This critical flaw allows remote, unauthenticated attackers to circumvent access controls on gateways configured for SSL VPN, ICA Proxy, CVPN, RDP Proxy, or AAA services without any user interaction. A second high-severity issue, CVE-2026-19489, involves a memory overflow in SIP ALG configurations that can result in denial-of-service conditions. Organizations should urgently apply the fixes available in NetScaler versions 14.1-73.32, 13.1-63.21, and other specified builds, as Rapid7 predicts imminent exploitation attempts given the widespread deployment of these appliances in enterprise perimeters.

WatchTowr has confirmed that threat actors began actively exploiting CVE-2026-19478, a critical code injection flaw in GitLab Community Edition (CE) and Enterprise Edition (EE), just two days after its public disclosure. The vulnerability allows unauthenticated attackers to remotely manipulate public projects, including deleting repositories and forging merge records, without requiring any prior credentials. Users are urged to update to fixed versions 19.2.4, 19.1.6, 19.0.8, or 18.11.11, or mitigate risk by restricting access to the /api/graphql endpoint.

Researchers have identified a critical vulnerability in the Elementor Pro WordPress plugin that allows unauthenticated attackers to achieve remote code execution through file upload manipulation. Tracked as CVE-2026-32475 with a CVSS score of 9.0, the flaw exists in the Forms module's File Upload field, where discrepancies in extension checking and file handling permit the bypass of security restrictions. This issue affects all versions of Elementor Pro up to 4.2.1, but has been resolved in the recently released version 4.2.2.

Threat intelligence firm Hunt.io has identified a 35-day attack campaign dubbed CameraSwarm that compromised over 14,500 Dahua IP cameras, primarily in Ukraine and Russia. The operation utilized a combination of brute-force attacks against TCP port 37777, exploitation of CVE-2021-33044 and CVE-2021-33045 to install persistent backdoors, and unauthorized cloud-relay access via serial numbers. Researchers recovered extensive operational data, including source code and credentials, from an unprotected server directory left open by the attackers. Administrators are advised to check devices for the malicious 'p2pwn' account, apply firmware updates per Dahua SA-2021-0130, and disable P2P services when not in use.

A critical unauthenticated remote code execution vulnerability (CVE-2026-32475) affecting the Elementor Pro plugin for WordPress has been patched in version 4.2.2, following the release of a public proof-of-concept. The flaw resides in the Forms module's File Upload field, where a logic discrepancy between validation and processing loops allows attackers to bypass extension blocklists by submitting empty file entries alongside malicious PHP payloads. This issue enables unauthenticated visitors to place executable scripts in public directories if a form with an optional file upload is present, leading to full server compromise. Site administrators are urged to update immediately and review the wp-content/uploads/elementor/forms/ directory for any unexpected PHP files that may have been deployed prior to the patch.

Oracle has distributed its August 2026 Critical Patch Update, resolving a total of 943 security vulnerabilities across its portfolio. The release places significant emphasis on Oracle Fusion Middleware and Oracle Hyperion, each receiving 262 individual patches, while Oracle Database components addressed 17 specific issues. Notable high-severity fixes include CVE-2026-60782 and CVE-2026-70926 in Oracle E-Business Suite, both rated with a CVSS base score of 9.8 and permitting remote code execution without authentication. Administrators should prioritize deploying these updates to mitigate exposure in network-accessible services such as Oracle Siebel CRM and Oracle Commerce.

Researchers at Hunt.io identified a campaign dubbed Operation CameraSwarm that exploited over 14,500 Dahua devices between June and July 2026. The attackers utilized credential stuffing, the authentication bypass vulnerabilities CVE-2021-33044 and CVE-2021-33045, and peer-to-peer relay techniques to gain unauthorized access, with significant impacts reported in Ukraine and Russia. These flaws allow bypass of device identity checks and enable connections to devices behind NAT without initial authentication. Affected users are advised to apply firmware updates from Dahua’s official site, disable unnecessary P2P features, and audit credentials to mitigate these risks.

The Cl0p ransomware group has published the full names of over 40 organizations allegedly targeted through a campaign exploiting CVE-2026-12569, a critical vulnerability in PTC’s Windchill and FlexPLM product lifecycle management platforms. This improper input validation flaw allows unauthenticated remote attackers to execute arbitrary code, marking the first time a Windchill defect has been exploited in the wild. ReliaQuest noted that Cl0p deployed a custom implant to steal credentials and exfiltrate vast amounts of data, including engineering documents and databases, from victims such as Shell, Philips, and Fiserv.

CISA has updated its Known Exploited Vulnerabilities catalog to include four high-severity flaws currently being targeted by threat actors. These vulnerabilities affect Apple macOS (CVE-2026-65400), Microsoft SharePoint (CVE-2026-55040), VMware vCenter (CVE-2026-59310), and Microsoft IKE (CVE-2026-33824). Active attacks range from cryptocurrency mining via the macOS flaw to ransomware deployment through the vCenter path traversal bug, with victims reported across 47 countries. Federal agencies are required to apply the vendor-provided patches by August 21, 2026, to mitigate these risks.

CISA has mandated immediate remediation for four active vulnerabilities across Microsoft, VMware, and Apple systems, adding them to the Known Exploited Vulnerabilities catalog. The alert covers CVE-2026-33824 in Windows IKE, CVE-2026-55040 in SharePoint, CVE-2026-59310 in VMware vCenter, and CVE-2026-65400 in macOS Screen Sharing. Federal agencies are required to apply patches by August 21 to mitigate these in-the-wild threats.

FBI, CISA, and HHS have issued an updated joint advisory revealing that the Medusa ransomware group has compromised more than 500 organizations since 2021. The agencies report that victims span critical sectors including healthcare, defense, manufacturing, and finance, with many organizations affected through unpatched vulnerabilities in products such as ScreenConnect, Fortinet EMS, Fortra GoAnywhere, and BeyondTrust. Medusa operates via an affiliate model where operators deploy newly disclosed exploits within 24 hours of announcement rather than developing zero-days. To mitigate risk, defenders should immediately patch internet-facing systems, segment networks to restrict lateral movement, and block unauthorized remote access traffic.

CISA has confirmed that threat actors are actively exploiting a critical remote code execution vulnerability in the Windows IKE Service Extensions component, tracked as CVE-2026-33824. This double-free flaw affects all supported versions of Windows 10, Windows 11, and Windows Server, allowing unauthenticated attackers to achieve code execution by sending maliciously crafted packets over UDP ports 500 or 4500. Microsoft addressed the issue during the April 2026 Patch Tuesday cycle, and security teams should apply the relevant updates immediately or restrict inbound traffic on those UDP ports if immediate patching is not possible.

Google’s Mandiant unit revealed that its internal Agentic Vulnerability Discovery Harness (AVDH) leverages multiple AI agents to detect security issues in source code efficiently. During a specific incident involving stolen corporate repositories, the system successfully identified more than 100 verified, high-severity vulnerabilities within a 48-hour period. This rapid detection capability led to the assignment of twelve official Common Vulnerabilities and Exposures identifiers, notably CVE-2026-13242 and CVE-2026-55803, with further disclosures currently underway. The findings underscore the growing effectiveness of specialized agentic pipelines in automating complex code reviews compared to traditional scanning methods.

ReliaQuest researchers have identified a bespoke JavaServer Pages (JSP) web shell associated with the Clop ransomware operation, targeting PTC Windchill and FlexPLM servers. This implant exploits CVE-2026-12569, a critical vulnerability allowing remote code execution, to establish persistent access within the application. Unlike generic shells, this tool is specifically engineered to interact with PLM software, enabling attackers to decrypt administrative and LDAP credentials directly from the Windchill keystore. By leveraging the application's own database identities, the malware facilitates the rapid exfiltration of sensitive engineering data and product designs while evading standard signature-based detection.

GitLab has issued an out-of-band security update to address CVE-2026-19478, a critical code-injection vulnerability with a CVSS score of 9.4 that affects self-managed instances of GitLab Community Edition and Enterprise Edition. This flaw allows unauthenticated remote attackers to manipulate or delete public projects and user data via the platform's GraphQL interface without requiring any login credentials or user interaction. While GitLab.com and GitLab Dedicated users are already protected, organizations running self-hosted versions between 18.2 and prior 19.2.4 must immediately upgrade to fixed releases such as 18.11.11, 19.0.8, 19.1.6, or 19.2.4. The disclosure also includes a secondary CSRF bug, CVE-2026-19650, rated 7.1, which carries similar version constraints and can enable unauthorized changes via crafted requests.

Varonis Threat Labs disclosed a series of vulnerabilities in Microsoft Copilot Personal, collectively dubbed "CoSnitch," which enable threat actors to extract internal architectural details and exfiltrate sensitive data. The attack chain relies on a technique called "meta-hacking" to map the system's behavior, followed by the use of specially crafted URLs containing an undocumented ?autorun=1 parameter to trigger automatic prompt execution within a victim's authenticated session. This allows attackers to access connected services such as Gmail and Google Drive without further user interaction. Microsoft assigned the flaw as CVE-2026-24301, rating it 8.8 on CVSS 3.1, and deployed a patch on August 18, 2025. While enterprise customers are reportedly unaffected and no in-the-wild exploitation has been observed, researchers warn that personal instances linked to corporate accounts pose a significant risk.

CISA has added the actively exploited Windows vulnerability CVE-2026-68820 to its Known Exploited Vulnerabilities (KEV) catalog, enforcing strict remediation timelines under Binding Operational Directive 26-04. This use-after-free flaw in the Windows Ancillary Function Driver for WinSock (afd.sys) allows local privilege escalation to SYSTEM without user interaction, impacting both internal and internet-facing systems. Microsoft released fixes in cumulative updates KB5121003 and KB5120249 on August 11, 2026, but organizations must ensure affected endpoints are rebooted to complete remediation, as the vulnerable driver remains active until a restart occurs.

Varonis Threat Labs identified three vulnerabilities, dubbed CoSnitch, in Microsoft Copilot Personal that permit attackers to silently extract data from connected services through a single malicious link click. The flaws, tracked as CVE-2026-24301, exploit an undocumented URL parameter to execute prompts within the victim's authenticated session without user interaction. Although no evidence of real-world exploitation was found, the issue allowed access to emails, calendar entries, and file metadata linked to the user's account. Microsoft deployed patches on August 18, 2026, addressing these issues which included the ability to persistently inject instructions into the assistant's memory store.

Active exploitation has been observed against two distinct open-source platforms: MLflow, an AI lifecycle tool, and FUXA, a web-based SCADA/HMI solution for industrial automation. Threat actors are leveraging CVE-2026-64849 in MLflow versions prior to 3.15.0 to execute unauthenticated Server-Side Request Forgery attacks, allowing them to proxy requests to internal cloud metadata endpoints and exfiltrate sensitive credentials. Concurrently, vulnerabilities identified as CVE-2026-25895 in FUXA versions up to 1.2.9 are being scanned by attackers seeking to perform path traversal operations that could lead to remote code execution by overwriting critical system files.

ReliaQuest identified a custom-built Java web shell attributed to the Clop ransomware gang, specifically engineered for PTC Windchill and FlexPLM servers. This implant leverages the critical remote code execution vulnerability CVE-2026-12569 to decrypt stored credentials and exfiltrate files from application vaults. Because the tool integrates directly with Windchill's internal APIs, database queries run under the application's service identity, potentially evading standard detection methods. Organizations running affected versions are urged to apply patches immediately and investigate any unusual JSP files referencing the 'X-windchill-req' header.

GitLab released version 19.2.4, along with updates for older branches, to address two significant vulnerabilities in its GraphQL API. The primary issue, CVE-2026-19478, is a critical code injection flaw that enables unauthenticated attackers to modify or delete public project and user data by exploiting a specific directive. Additionally, CVE-2026-19650 allows cross-site request forgery attacks against logged-in users through improper validation of multiplexed queries. Self-managed instances running versions between 18.2 and 19.2 should upgrade immediately to the latest patched releases.

GitLab has deployed urgent fixes for two security issues affecting Community Edition and Enterprise Edition versions prior to specific release thresholds. The primary concern is a critical vulnerability identified as CVE-2026-19478, which enables unauthenticated remote attackers to execute code via a GraphQL directive, potentially compromising public project integrity and user data. A secondary high-severity flaw, CVE-2026-19650, involves cross-site request forgery risks within the GraphQL multiplex query handler. Self-managed instances must be updated immediately to versions 18.11.11, 19.0.8, 19.1.6, or 19.2.4 to mitigate these risks, while hosted GitLab.com and Dedicated environments are already protected.

Security researcher Defiant identified a critical remote code execution vulnerability, tracked as CVE-2026-15748, within the Forminator Forms plugin for WordPress. With a CVSS score of 9.8, this flaw allows unauthenticated users to execute arbitrary code by exploiting insufficient file type validation in the handlefileupload function. The issue stems from a combination of weaknesses that let attackers forge record configurations and bypass the plugin's dangerous extension blocklist using pipe-alternative MIME types. While default settings restrict PHP execution to protected directories, custom storage roots remain vulnerable, potentially leading to full site compromise via webshells. The plugin has over 600,000 installations, with approximately half running affected versions, leaving more than 300,000 websites at risk unless updated to version 1.56.2, which was released on July 31.

CISA has confirmed that ransomware groups are actively leveraging CVE-2025-60710, a high-severity privilege escalation flaw in the Windows Task Host component. This vulnerability, which stems from a link-following weakness, was patched by Microsoft in November 2025 but remained under active attack until CISA added it to the Known Exploited Vulnerabilities catalog on April 13. The bug impacts Windows 11 and Windows Server 2025 systems, allowing local attackers with basic user permissions to elevate their privileges to SYSTEM level. Agencies were directed to apply mitigations within two weeks to prevent further compromise.

GitLab has released urgent patches for two security flaws affecting recent versions of its platform, with the most severe being an unauthenticated code injection vulnerability identified as CVE-2026-19478. This critical defect, carrying a CVSS score of 9.4, permits attackers to modify or delete data through GraphQL directives without needing login credentials. Additionally, CVE-2026-19650 addresses a cross-site request forgery issue in the GraphQL multiplex query handler that could allow unauthorized mutations via GET requests. All self-managed instances of GitLab Community Edition and Enterprise Edition from versions 18.2, 19.0, 19.1, and 19.2 onward are impacted and should be updated immediately to versions 18.11.11, 19.0.8, 19.1.6, or 19.2.4. While GitLab.com and Dedicated users have already received automatic updates, administrators of self-hosted environments must act quickly to mitigate these risks.

CISA has added CVE-2025-62593 to its Known Exploited Vulnerabilities catalog after confirming active exploitation of a critical flaw in Ray. This vulnerability allows attackers to achieve remote code execution through browsers like Firefox and Safari by leveraging DNS rebinding attacks against unauthenticated endpoints. The issue primarily affects developers using Ray for testing or local environments, potentially exposing adjacent internal network instances if victims visit malicious sites. A fix for this high-severity weakness is available in version 2.52.0 of the Python package.

GitLab has issued an out-of-cycle security patch for Community Edition and Enterprise Edition to fix critical vulnerability CVE-2026-19478. Rated 9.4 by the vendor, this flaw allows unauthenticated attackers to remotely modify or delete public projects and user data through a specific GraphQL directive. Self-managed administrators should update immediately to versions 19.2.4, 19.1.6, 19.0.8, or 18.11.11, as GitLab.com and Dedicated customers are already protected. No active exploitation or public exploit code was detected at the time of the release.

Apple has issued security updates for iOS and macOS to remediate a broad set of vulnerabilities affecting multiple system components. The release addresses numerous flaws, including kernel memory corruption that could allow privilege escalation, WebKit bugs enabling data exfiltration or crashes, and ImageIO defects leading to arbitrary code execution. Key risks include potential remote exploitation through crafted web content or media files, as well as local sandbox escape vectors in frameworks like libc and MediaRemote. Users are advised to install the latest operating system updates to mitigate these threats.

Wordfence has disclosed a critical vulnerability, designated CVE-2026-15748, in the Forminator Forms WordPress plugin that allows unauthenticated attackers to achieve remote code execution. This flaw stems from insufficient file type validation in the handlefileupload() function, enabling malicious users to upload executable PHP files if specific form fields are present. The issue affects all versions prior to and including 1.56.1 and carries a CVSS score of 9.8. A separate authentication bypass vulnerability, CVE-2026-15826, was also identified in the User Profile Builder plugin, allowing unauthorized administrative access under certain configurations.

FortiGuard Labs has identified a new Mirai-derived Linux botnet named Evooo1Bot that is actively targeting internet-facing hardware from manufacturers including Alcatel, NETGEAR, Tenda, Mitsubishi Electric, Telesquare, and D-Link. The malware leverages a wide array of historical vulnerabilities, spanning from CVE-2007-3010 to CVE-2020-10987, to gain initial access and deploy a modular framework that goes far beyond standard DDoS attacks. Notably, the botnet includes an SSH brute-force scanner, credential sniffing capabilities, and a reverse SOCKS relay module that allows attackers to use compromised edge devices as stealthy proxies for further network infiltration. This evolution highlights the growing sophistication of Mirai-based threats, turning simple flood tools into comprehensive attack platforms that exploit even years-old unpatched software.

Researchers have made a proof-of-concept available for "Certighost" (CVE-2026-54121), a vulnerability in Microsoft Active Directory Certificate Services that enables privilege escalation. By exploiting a defect in the "chase" enrollment process, standard domain users can coerce an Enterprise CA into issuing valid authentication certificates for a Domain Controller, granting full control over the domain's identity infrastructure. Microsoft resolved this issue on July 14, 2026, assigning it a CVSS score of 8.8. Organizations are urged to apply the patch immediately and also review their default configuration, particularly by setting the MachineAccountQuota to zero, to mitigate further reliance on insecure defaults.