Weekly Vulnerability Report: Aug 31 – Sep 6, 2026
28 new CVEs were published, 18 of them rated critical or high. 10 were added to CISA's exploited list.
Between August 31, 2026 and September 6, 2026, 28 new vulnerabilities were published, 367% more than the previous week (6). 18 of them, or 64%, were rated high or critical. The busiest day was September 1, 2026, with 8 CVEs.
CISA confirmed active exploitation of 10 vulnerabilities during the week. These are listed first below because attackers are already using them. AMD had the most new CVEs (4), and improper neutralization of input during web page generation was the most common weakness type (4).
Confirmed exploited this week
- 9.8 Critical severity
PaperCut NG/MF Missing Authentication for Critical Function Exploited
An improper access control vulnerability exists in the web management interface of PaperCut MF and PaperCut NG. Under specific conditions, unauthenticated remote requests targeting administrative functions can trigger backend actions prior to the completion of
- 9.1 Critical severity
PaperCut NG/MF Unsafe Reflection Exploited
An unsafe dynamic class loading vulnerability exists in the database connection utilities of PaperCut MF and PaperCut NG. The application instantiates database driver classes based on configurable driver names without validating against an allowlist of approve
- 6.5 Medium severity
Kludex Starlette HTTP Request/Response Smuggling Exploited
Starlette is a lightweight ASGI framework/toolkit. Prior to version 1.0.1, the HTTP `Host` request header was not validated before being used to reconstruct `request.url`. Because the routing algorithm relies on the raw HTTP path while `request.url` is rebuilt
- 10.0 Critical severity
Kestra OSS OS Command Injection Exploited
Kestra is an open-source, event-driven orchestration platform. Prior to 1.0.45 and 1.3.21, AuthenticationFilter in Kestra OSS uses request.getPath().endsWith("/configs") to whitelist the public configuration endpoint from Basic Auth. Because the check is a suf
- 8.2 High severity
BerriAI LiteLLM Improper Authentication Exploited
LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.84.0, LiteLLM's MCP Streamable HTTP endpoint allowed an unauthenticated attacker to use a fabricated Authorization header to trigger an OAuth2 passthrough fallback
- 9.8 Critical severity
JFrog Artifactory Improper Authentication Exploited
JFrog Artifactory contains an authentication weakness that, under default configuration, may allow an unauthenticated attacker with network access to obtain administrative privileges.
- 10.0 Critical severity
SonicWall SMA1000 Appliances Server-Side Request Forgery Exploited
A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A remote unauthenticated attacker could potentially exploit this vulnerability to gain unauthorized access to sensitive fun
- 7.8 High severity
SonicWall SMA1000 Appliances OS Command Injection Exploited
Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) which in specific conditions could potentially enable a remote au
- 9.8 Critical severity
Sangoma Switchvox SQL Injection Exploited
An unauthenticated SQL injection vulnerability exists in Sangoma Switchvox SMB Edition 8.3 (104997). The /pa endpoint processes XML content beginning with <PolycomIPPhone> and directly concatenates the user-controlled PhoneIP value into PostgreSQL queries with
- 8.8 High severity
Google Chromium V8 Type Confusion Exploited
Type confusion in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
The 15 most important new vulnerabilities
- 10.0 Critical severity
SonicWall SMA1000 Appliances Server-Side Request Forgery Exploited
A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A remote unauthenticated attacker could potentially exploit this vulnerability to gain unauthorized access to sensitive fun
- 7.8 High severity
SonicWall SMA1000 Appliances OS Command Injection Exploited
Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) which in specific conditions could potentially enable a remote au
- 8.8 High severity
Google Chromium V8 Type Confusion Exploited
Type confusion in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
- 9.8 Critical severity
N-able N-central Static Code Injection Exploited
N-central is vulnerable to a pre-auth remote code execution This issue affects N-central: before 2026.3.1.14.
- 9.8 Critical severity
MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Exploited
RouterOS contains an argument-handling flaw in the SSH login path involving usernames that begin with a prohibited character, allowing for the trusted RouterOS policy mask to be changed, leading to privilege escalation. Exploitation requires an unauthenticated
- 8.2 High severity
MikroTik RouterOS Missing Authentication for Critical Function Exploited
RouterOS accepts a "related" btest connection before the corresponding primary session has completed authentication. An unauthenticated client can use this state to start an IPv4 UDP test. With "random-data=false", the sender transmits an uninitialized tail fr
- 6.5 Medium severity
Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Exploited
RouterOS SSH enters the connection protocol after a client-requested rekey even though user authentication was never attempted, allowing an unauthenticated client to open a session channel and send an exec request. On affected builds the server dispatches the
- 8.7 High severity
DataEdgePlatform DataMosaix™ Private Cloud: Use of Hard-coded Credentials
A data exposure vulnerability exists in the affected product. There are hardcoded links in the source code that lead to JSON files that can be reached without authentication. If exploited, a threat actor could view customer data.
- 8.7 High severity
DataEdgePlatform DataMosaix™ Private Cloud: Improper Access Control
A vulnerability exists in the affected products that allows a threat actor to create a project and become the administrator for it. If exploited, a threat actor could create, modify, and delete their own project.
- 7.1 High severity
Elastic Security: Improper Link Resolution Before File Access
A local vulnerability in the Winlogbeat Windows installer caused runtime files to be placed in a directory writable by unprivileged users. A low-privileged attacker with existing access to the system could pre-position malicious filesystem links, causing a sub
- 8.2 High severity
EcoStruxure™ OPC UA Server Expert: Allocation of Resources Without Limits or Throttling
CWE-770: Allocation of Resources Without Limits or Throttling vulnerability exists that could cause denial of service of the OPC UA communication platform when a large number of OPC UA requests are sent to the platform.
- 9.8 Critical severity
Proxmox Virtual Environment (VE): Missing Critical Step in Authentication
Proxmox Virtual Environment (VE) 7.0 through 8.0 contains an authentication bypass vulnerability in libpve-access-control before 8.0.4 that allows unauthenticated attackers to authenticate as any existing enabled user without a configured second factor by supp
- 9.8 Critical severity
Post Grid: Improper Control of Generation of Code
The Post Grid and Gutenberg Blocks – ComboBlocks plugin for WordPress is vulnerable to Unauthenticated Hook Injection in versions 2.2.32 to 2.3.1 via several functions in the ~/includes/blocks/form-wrap/function.php file. This makes it possible for unauthentic
- 7.7 High severity
AMD Ryzen™ 3000 Series Desktop Processors: Insufficient Verification of Data Authenticity
Insufficient Verification of Data Authenticity in AGESA™ may allow an attacker to update SPI ROM data potentially resulting in denial of service or privilege escalation.
- 7.6 High severity
DataMosaix™ Private Cloud: Improper Authentication
A vulnerability exists in the affected products that allows a threat actor to gain access to user’s projects. To exploit this vulnerability the threat actor must have basic user privileges. If exploited, the threat actor can modify and delete the project.
Vendors with the most new CVEs
Most common weakness types
Severity breakdown
| Severity | CVEs | Share |
|---|---|---|
| Critical | 5 | 18% |
| High | 13 | 46% |
| Medium | 7 | 25% |
| Low | 3 | 11% |
| Not yet scored | 0 | 0% |
This report is compiled from NVD, CISA KEV and CWE data for CVEs published in the week shown. Counts exclude rejected records.