AX·NEWS
Sign in

CVE watch

CVEs of week 36, 2026 (31 Aug – 06 Sep)

33 vulnerabilities first quoted by the shared stories that week, most severe first.

RSS feedOn your SOC screen

  1. CVE-2026-83548 10.0 Exploited Attackers exploit zero-days in consistently besieged SonicWall product Sma8200v < 12.4.3-03526 · < 12.5.0-02952 3 outlets
  2. CVE-2026-82078 9.4 Exploited Attackers Exploit PaperCut Flaws to Steal Credentials From Schools and Universities PaperCut MF/NG < 24.1.10 · < 25.0.13 · < 26.0.5 3 outlets
  3. CVE-2026-19490 9.3 Exploited Critical NetScaler Vulnerability Exploited in Attacks NetScaler ADC ≤ 73.32 · ≤ 63.21 3 outlets
  4. CVE-2026-9586 9.3 Exploited Sangoma Switchvox Vulnerabilities Exploited in the Wild Sangoma Switchvox SMB Edition < 8.4.0.2 3 outlets
  5. CVE-2026-85046 8.8 Exploited Chinese Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy CLEANGULP Malware Google Chrome < 152.0.7977.82 5 outlets
  6. CVE-2026-81578 8.8 Exploited Attackers Exploit PaperCut Flaws to Steal Credentials From Schools and Universities PaperCut MF/NG < 24.1.10 · < 25.0.13 · < 26.0.5 3 outlets
  7. CVE-2026-0768 Critical Langflow flaw exploited to steal OpenAI and AWS keys 3 outlets
  8. CVE-2026-82329 Exploited Hackers exploit critical JFrog Artifactory flaw to forge admin tokens 3 outlets
  9. CVE-2017-5753 From Silicon to Boot Code: Extending Automated Program Repair to Firmware-Layer Security Workarounds 2 outlets
  10. CVE-2026-32475 Elementor Pro WordPress Plugin Vulnerability Exploited to Hack Sites 2 outlets
  11. CVE-2026-6471 PostgreSQL Fixes 12-Year-Old Logical Decoding Flaw Enabling Replication-Role Code Execution 2 outlets
  12. CVE-2026-83549 Exploited Attackers exploit zero-days in consistently besieged SonicWall product 2 outlets
  13. CVE-2017-5715 From Silicon to Boot Code: Extending Automated Program Repair to Firmware-Layer Security Workarounds 1 outlet
  14. CVE-2018-11235 Kubernetes v1.37: KubeletInUserNamespace (aka Rootless mode) Graduates to Beta 1 outlet
  15. CVE-2018-3630 From Silicon to Boot Code: Extending Automated Program Repair to Firmware-Layer Security Workarounds 1 outlet
  16. CVE-2019-19921 Kubernetes v1.37: KubeletInUserNamespace (aka Rootless mode) Graduates to Beta 1 outlet
  17. CVE-2021-31886 Researchers Use Claude to Port Pre-Auth RCE Exploit From One PLC Model to Another 1 outlet
  18. CVE-2022-0811 Kubernetes v1.37: KubeletInUserNamespace (aka Rootless mode) Graduates to Beta 1 outlet
  19. CVE-2023-27561 Kubernetes v1.37: KubeletInUserNamespace (aka Rootless mode) Graduates to Beta 1 outlet
  20. CVE-2024-10220 Kubernetes v1.37: KubeletInUserNamespace (aka Rootless mode) Graduates to Beta 1 outlet
  21. CVE-2025-0994 Exploited Recorded Future Announces Automated Signature Creation, Accelerating Vulnerability Prioritization 1 outlet
  22. CVE-2025-31133 Kubernetes v1.37: KubeletInUserNamespace (aka Rootless mode) Graduates to Beta 1 outlet
  23. CVE-2025-69248 Drishti: AI-Led Human-Directed Vulnerability Auditing for 5G Cores 1 outlet
  24. CVE-2026-14894 Over 440,000 Exploit Attempts Target Super Forms and Elementor Pro RCE Flaws 1 outlet
  25. CVE-2026-19478 Hackers Just Poisoned the Rust Supply Chain | Threat Wire 1 outlet
  26. CVE-2026-19949 Over 3 Million WordPress Sites Affected by Migration Plugin Vulnerability 1 outlet
  27. CVE-2026-20212 Critical Cisco Nexus 9000 Flaw Lets Unauthenticated Remote Attackers Run Code as Root 1 outlet
  28. CVE-2026-53488 Kubernetes v1.37: KubeletInUserNamespace (aka Rootless mode) Graduates to Beta 1 outlet
  29. CVE-2026-59346 Critical VMware Workstation and Fusion Flaw Lets VM Admins Execute Host Code 1 outlet
  30. CVE-2026-66066 Attackers Exploit Critical Langflow and Rails Flaws in Credential-Probing and C2 Activity 1 outlet
  31. CVE-2026-73749 HPE Patches Critical RCE Vulnerabilities in AOS-CX 1 outlet
  32. CVE-2026-84352 Two critical Chrome flaws put users at risk on malicious websites 1 outlet
  33. CVE-2026-84353 Two critical Chrome flaws put users at risk on malicious websites 1 outlet