Saturday, August 1, 2026 Archive

Archived Security Snapshot

Critical vulnerabilities, curated daily for security professionals

Archived Security Brief

Yesterday's disclosures were dominated by memory-safety flaws in Mozilla Firefox and remote code execution in pgAdmin 4, alongside a critical issue in WebPros cPanel that exposes hosting control planes. The day brought 24 critical vulnerabilities (down 41% from the prior day's 41) and 77 high-priority CVEs (up 4%), for 101 total. CVE-2026-17566 (CVSS 9.9) and CVE-2026-17349 (CVSS 9.6) both affect pgAdmin 4, four Firefox CVEs (CVE-2026-16365, CVE-2026-16366, CVE-2026-16371, CVE-2026-16372) each carry CVSS 9.8, and CVE-2026-58048 (CVSS 9.4) affects cPanel. Web application and hosting infrastructure remain the largest affected categories, with WordPress plugins (wpwax FormGent), PHP frameworks (CodeIgniter4), and commercial PHP scripts contributing additional critical entries. Vendor patch data was not available for these records at collection time, so track vendor advisories directly; three CVEs affecting Arista VeloCloud Orchestrator, Cisco Secure Firewall Management Center, and Fortinet FortiOS have confirmed active exploitation.

  • Mozilla Firefox accounts for four CVSS 9.8 vulnerabilities, and pgAdmin 4 contributes two criticals including CVE-2026-17566 at CVSS 9.9
  • 24 critical CVEs (CVSS 9.0+), down 41% from 41 the previous day
  • 77 high-priority CVEs (CVSS 7.0-8.9), up 4% from 74 the previous day
  • Remote code execution and authentication bypass dominate, affecting pgAdmin 4, WebPros cPanel, and CodeIgniter4
  • Patch availability recorded at 0% in collected data: verify status directly with Mozilla, pgAdmin, cPanel, and WordPress plugin vendors
  • Three vulnerabilities have confirmed active exploitation: Arista VeloCloud Orchestrator On-Prem, Cisco Secure Firewall Management Center, and Fortinet FortiOS (all CVSS 9.5)

Immediate action: Prioritize network edge and security appliances first: Arista VeloCloud Orchestrator On-Prem, Cisco Secure Firewall Management Center, and Fortinet FortiOS all have confirmed exploitation. Follow with Firefox browser updates across endpoints and pgAdmin 4, cPanel, and CodeIgniter4 installations exposed to untrusted input. Patch availability was not captured for these records, so check vendor advisories directly and apply mitigations or access restrictions where fixes are not yet published.

How to read this brief

CVSS score (e.g. 9.1) — severity from 0–10. Red marks critical (9+), orange high (7–8.9).

Exploitability — how hard the flaw is to attack, read from the CVSS vector:

  • Network / Adjacent / Local / Physical — how close an attacker must get. Network means reachable over the internet.
  • No / Low / High privileges — the access they need first. No privileges means no login required.
  • No interaction / User interaction — whether a victim has to do something (open a file, click a link). No interaction means fully automatable.

The lower the bar on all three, the easier to exploit at scale — “Network · No privileges · No interaction” is the worst case: hit from anywhere, no credentials, no victim action.

Actively exploited — confirmed under attack in the wild (CISA’s Known Exploited Vulnerabilities catalog). Prioritize these regardless of score.

EPSS · Nth percentile — FIRST.org’s estimated chance a flaw is exploited within 30 days. We flag it only in the top 10% — a statistical signal it’s unusually likely to be targeted, separate from whether attacks are confirmed.

💡 Tip: Swipe CVE cards left to ⭐ star, right to ❌ remove

Section Navigation