Critical vulnerabilities, curated daily for security professionals
Archived Security Brief
Yesterday's disclosures were dominated by Microsoft Windows, which accounts for six of the ten highest-scored critical vulnerabilities, alongside a CVSS 10 flaw in Google's Agent Development Kit (ADK) for Python and a 9.9 in Eclipse aeriOS. The day produced 47 critical CVEs, up 34% from 35 the prior day, and 109 high-priority CVEs, up 35% from 81. Notable entries include CVE-2026-79696 (Google ADK for Python, CVSS 10), CVE-2026-86464 (Eclipse aeriOS, CVSS 9.9), and CVE-2026-69730 (Microsoft Windows, CVSS 9.8), with two further 9.8-rated Android issues in CVE-2026-49921 and CVE-2026-58822. AI application tooling features prominently: the ADK flaw is joined by actively exploited issues in BerriAI LiteLLM (CVE-2026-59822) and the Starlette web framework (CVE-2026-48710), and seven CVEs in total carry confirmed exploitation, including Adobe Commerce (CVE-2026-75650, CVSS 10), N-able N-central, and Google Chrome. Defenders should prioritize the Windows and Chrome updates across the fleet, review any internet-facing Adobe Commerce, N-central, LiteLLM, and Starlette deployments for exposure, and confirm fix status for each in the vendor advisory before assuming coverage.
Microsoft Windows leads the day with six of the ten highest-scored critical CVEs, all rated 9.8, plus two Windows CVEs with confirmed active exploitation
47 critical CVEs (CVSS 9.0+), up 34% from 35 the prior day
109 high-priority CVEs (CVSS 7.0-8.9), up 35% from 81 the prior day
AI application stack under pressure: CVSS 10 in Google Agent Development Kit for Python (CVE-2026-79696), with exploited flaws in BerriAI LiteLLM and Starlette
Check first: Windows endpoints and servers, Google Chrome, Android devices, Adobe Commerce storefronts, N-able N-central, and Eclipse aeriOS deployments
7 CVEs carry confirmed active exploitation, including Adobe Commerce (CVSS 10), N-able N-central, LiteLLM, Starlette, Chrome, and two Windows issues
Immediate action: Prioritize Microsoft Windows and Google Chrome updates across all managed endpoints, then assess exposure of internet-facing Adobe Commerce, N-able N-central, LiteLLM, and Starlette-based services, which all carry confirmed exploitation. Teams building on Google's Agent Development Kit for Python should treat CVE-2026-79696 as an immediate review item. Confirm fix status and affected versions for each product directly in the vendor advisory before closing the item.
How to read this brief
CVSS score (e.g. 9.1) — severity from 0–10. Red marks critical (9+), orange high (7–8.9).
Exploitability — how hard the flaw is to attack, read from the CVSS vector:
Network / Adjacent / Local / Physical — how close an attacker must get. Network means reachable over the internet.
No / Low / High privileges — the access they need first. No privileges means no login required.
No interaction / User interaction — whether a victim has to do something (open a file, click a link). No interaction means fully automatable.
The lower the bar on all three, the easier to exploit at scale — “Network · No privileges · No interaction” is the worst case: hit from anywhere, no credentials, no victim action.
🔴 Actively exploited — confirmed under attack in the wild (CISA’s Known Exploited Vulnerabilities catalog). Prioritize these regardless of score.
EPSS · Nth percentile — FIRST.org’s estimated chance a flaw is exploited within 30 days. We flag it only in the top 10% — a statistical signal it’s unusually likely to be targeted, separate from whether attacks are confirmed.
💡 Tip: Swipe CVE cards left to ⭐ star, right to ❌ remove
🔴 Actively exploited in the wildIn CISA KEV since September 8, 2026
N-able N-central is vulnerable to a pre-authentication remote code execution flaw via static code injection, allowing unauthenticated attackers to execute arbitrary code on the target system.
Network · No privileges · No interactionEPSS 98th percentile
🔴 Actively exploited in the wildIn CISA KEV since September 2, 2026
A critical HTTP request smuggling vulnerability exists in the Starlette framework due to improper validation of the Host header, allowing for security restriction bypasses.
🔴 Actively exploited in the wildIn CISA KEV since September 8, 2026
A link following vulnerability in the Windows Update Stack allows a local attacker with authorized access to elevate privileges on the affected system.
An unauthenticated remote code injection vulnerability exists in Google Cloud Agent Development Kit for Python, allowing arbitrary code execution via crafted test session replays.
A heap-based buffer overflow in the Windows Routing and Remote Access Service (RRAS) allows unauthenticated remote attackers to achieve code execution.
A heap-based buffer overflow in the Windows Compressed Folder component allows an unauthenticated, remote attacker to achieve arbitrary code execution.
A use after free vulnerability in the Windows Message Queuing service allows an unauthenticated remote attacker to execute arbitrary code on the target system.
A use after free vulnerability in Windows Internet Connection Sharing (ICS) allows an unauthenticated, remote attacker to execute arbitrary code on the target system.
A use after free vulnerability in the Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthenticated remote attacker to execute arbitrary code.
Disclosed Sep 3; published with a limited analysis after repeated re-checks found no further public detail.
Network · No privileges · No interaction
A missing authentication vulnerability in Microsoft Azure AI Language Authoring allows unauthorized attackers to perform privilege escalation over a network.
Disclosed Sep 3; published with a limited analysis after repeated re-checks found no further public detail.
Network · No privileges · No interaction
An authorization bypass vulnerability in Microsoft Azure Active Directory B2C allows an unauthorized attacker to perform privilege escalation over a network.
A missing permission check in the MicroXR Blobstore allows unauthenticated attackers to access files belonging to other applications, resulting in local escalation of privilege.
A missing permission check in PermissionsManager.java allows unauthenticated attackers to monitor sensitive device state data without user interaction.
Adobe Campaign Classic is vulnerable to OS Command Injection, allowing unauthenticated remote attackers to execute arbitrary code with elevated system privileges.
Adobe ColdFusion is vulnerable to Eval Injection, allowing low-privileged, authenticated attackers to achieve arbitrary remote code execution without user interaction.
A heap-based buffer overflow and integer overflow in the Microsoft Windows PDF library allow an unauthenticated attacker to achieve remote code execution over a network.
A flaw in the Hawtio operator allows users with edit access to mint arbitrary Service-CA-signed certificates, enabling impersonation of internal cluster services.
A deserialization of untrusted data vulnerability in Ivanti Neurons for ITSM allows a remote authenticated attacker to achieve arbitrary code execution on the server.
A missing authorization vulnerability in Ivanti Neurons for ITSM allows a remote authenticated attacker to execute arbitrary code on the underlying server.
A missing authorization flaw in Ivanti Neurons for ITSM allows a remote authenticated attacker to achieve remote code execution on the underlying server.
A missing authorization vulnerability in Ivanti Neurons for ITSM allows a remote authenticated attacker to achieve arbitrary code execution on the server.
The FireBox plugin for WordPress is vulnerable to Remote Code Execution via the value function due to inadequate sanitization and an ineffective blacklist, allowing authenticated attackers to execute code.
Disclosed Sep 8; held until the analysis firmed up on Sep 9.
Adjacent · No privileges · No interaction
A vulnerability in the nRF54H20 Direct XIP update strategy allows the main application to start other cores using an unauthenticated slot, bypassing secure boot mechanisms.
An authentication bypass vulnerability exists in the wp-module-data component used by multiple Newfold plugins, allowing unauthenticated attackers to gain administrative access via forged tokens.
A heap-based buffer overflow in the Microsoft Windows Remote Desktop Client allows an unauthenticated, remote attacker to achieve arbitrary code execution.
A heap-based buffer overflow in the Windows Routing and Remote Access Service (RRAS) allows an authenticated attacker to achieve remote code execution.
A heap-based buffer overflow in the Windows Routing and Remote Access Service (RRAS) allows an authenticated attacker to achieve remote code execution on the target system.
A use of uninitialized resource vulnerability in the Microsoft Windows Remote Desktop Client allows an authenticated attacker to achieve remote code execution over a network.
An integer underflow vulnerability in the Windows Remote Access Connection Manager allows an authenticated attacker to execute arbitrary code over a network.
The YITH WooCommerce Waitlist Premium plugin for WordPress is vulnerable to privilege escalation due to missing capability checks and insecure variable handling in the add_user_in_waiting_list function.
Adobe Acrobat and Reader are affected by an incorrect authorization vulnerability allowing low-privileged local attackers to achieve privilege escalation without user interaction.
A heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthenticated, remote attacker to execute arbitrary code on affected systems.
An insecure deserialization vulnerability in Microsoft Dynamics 365 (on-premises) allows an authenticated attacker to execute arbitrary code over the network.
An SQL injection vulnerability in Microsoft SQL Server allows an authenticated attacker to execute arbitrary SQL commands and elevate privileges over a network.
A heap-based buffer overflow vulnerability in Microsoft SQL Server allows an authenticated attacker to execute arbitrary code via a network connection.
A heap-based buffer overflow in the Windows Volume Manager Extension Driver allows an unauthenticated, remote attacker to execute arbitrary code on the target system.
A heap-based buffer overflow in the Windows URL Moniker component allows an unauthenticated attacker to achieve remote code execution via a network-based attack vector.
A heap-based buffer overflow in Microsoft .NET and Visual Studio allows an unauthorized attacker to perform a privilege escalation attack over the network.
A heap-based buffer overflow in the Windows Event Logging Service allows an unauthorized attacker to achieve remote code execution on the target system.
A heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthenticated remote attacker to execute arbitrary code via a malicious network-based payload.
A heap-based buffer overflow vulnerability in Microsoft Visual Studio and .NET allows an unauthenticated, remote attacker to achieve arbitrary code execution.
MicrosoftMicrosoft 365 Apps for Enterprise, Access, Office
Network · No privileges · User interaction
A heap-based buffer overflow in Microsoft Office Access allows an unauthenticated remote attacker to execute arbitrary code via a specially crafted file.
A heap-based buffer overflow in Microsoft Office Word allows an unauthenticated attacker to execute arbitrary code via a network-delivered malicious document.
A heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthenticated, remote attacker to execute arbitrary code on the target system.
A heap-based buffer overflow in the Microsoft Raw Image Extension allows an unauthenticated attacker to achieve remote code execution via a specially crafted image file.
A capture-replay vulnerability in the Windows Kerberos authentication mechanism allows an authenticated attacker to execute arbitrary code over the network.
A use after free vulnerability in the Windows Key Distribution Center allows an authenticated attacker to achieve remote code execution over a network.
An SQL injection vulnerability in Microsoft SharePoint Server Subscription Edition allows an authenticated attacker to elevate privileges over a network.
A heap-based buffer overflow in Microsoft Office Word allows an unauthenticated remote attacker to execute arbitrary code via a specially crafted document.
A use after free vulnerability in Windows Hello allows an authenticated local attacker to achieve privilege escalation on affected Windows operating systems.
A heap-based buffer overflow in the Windows Imaging Component can be triggered by an unauthorized attacker to achieve remote code execution via network-based vectors.
A heap-based buffer overflow in Windows Media Player allows an unauthenticated, remote attacker to execute arbitrary code on the host system via network-based exploitation.
A heap-based buffer overflow in Windows Media Player allows an unauthenticated remote attacker to execute arbitrary code via a malicious network-based file.
An out-of-bounds read vulnerability in Microsoft Windows Media Foundation allows an unauthenticated, remote attacker to execute arbitrary code on the target system.
A permissive cross-domain policy in the Microsoft Azure Arc SQL Server Extension allows an unauthenticated, remote attacker to elevate privileges over a network.
A privilege escalation vulnerability exists in Microsoft SQL Server due to insufficient access control granularity, allowing authenticated attackers to elevate their privileges over a network.
An improper link resolution vulnerability in Microsoft SQL Server allows an authenticated attacker to perform unauthorized file access and elevate privileges over a network.
An integer overflow vulnerability in the Windows DHCP Server component allows an unauthenticated, remote attacker to execute arbitrary code on the affected system.
An improper access control vulnerability in Microsoft SharePoint Server allows an authenticated attacker to achieve remote code execution over a network.
A flaw in Microsoft SharePoint Server Subscription Edition allows an authenticated attacker to achieve remote code execution via improper access control.
A privilege escalation vulnerability in Microsoft SharePoint Server Subscription Edition allows an authorized attacker to gain elevated privileges over the network.
A missing authorization flaw in Microsoft SharePoint Server Subscription Edition allows an authenticated attacker to execute arbitrary code over the network.
An integer overflow vulnerability in the Windows Imaging Component allows an unauthorized attacker to achieve remote code execution via a network-based attack vector.
A missing authorization vulnerability in Microsoft SharePoint Server allows an authenticated attacker to achieve remote code execution over the network.
An integer overflow vulnerability in Microsoft Office Publisher allows an unauthenticated remote attacker to execute arbitrary code via a specially crafted file.
An integer overflow in the Microsoft WebP Image Extension allows an unauthenticated attacker to achieve remote code execution via a specially crafted image file.
An improper access control vulnerability in various Fortinet FortiSandbox products allows unauthenticated attackers to access sensitive information via crafted HTTP requests.
Disclosed Sep 5 without a CVSS score; scored Sep 8, analysis completed Sep 8.
Network · No privileges · No interaction
An unauthenticated information exposure vulnerability in the JetFormBuilder plugin allows attackers to read sensitive metadata, including password hashes and private content, via unvalidated requests.
Disclosed Sep 4 without a CVSS score; scored Sep 8, analysis completed Sep 9.
Network · High privileges · No interaction
The Hummingbird Performance WordPress plugin allows an authenticated site administrator in a multisite network to execute arbitrary code across the entire network due to insufficient setting restrictions.
Disclosed Sep 4 without a CVSS score; scored Sep 8, analysis completed Sep 9.
Network · Low privileges · No interaction
The Classified Listing WordPress plugin contains an authorization bypass that allows authenticated users to delete or attach files to listings owned by other users.
Disclosed Sep 2 without a CVSS score; tracked by CVE Brief from Sep 3; scored Sep 8, analysis completed Sep 9.
Network · Low privileges · User interaction
Jenkins fails to rotate session cookies upon authentication via the remember me feature, allowing an attacker to hijack a session after a victim logs in.
A path traversal vulnerability in the ImsService of Samsung Mobile Devices allows unauthenticated remote attackers to create files with system server privileges.
Disclosed Sep 2 without a CVSS score; tracked by CVE Brief from Sep 3; scored Sep 8, analysis completed Sep 9.
Network · No privileges · No interaction
A deadlock vulnerability in the golang.org/x/crypto/ssh package allows unauthenticated remote peers to disrupt service availability by sending crafted messages.
A vulnerability in bubblewrap allows local attackers to escape the sandbox by following symlinks during setup, potentially writing files to the host filesystem with the privileges of the launching user.
Roo-Code contains an auto-approve bypass vulnerability in its shell command parsing logic that allows execution of denied commands via the bash pipe operator.
Roo-Code contains an auto-approve bypass vulnerability due to a shell parser word-boundary mismatch, allowing attackers to execute denied shell commands.