AX·NEWS
Sign in

CVE watch

CVEs of week 37, 2026 (07 Sep – 13 Sep)

34 vulnerabilities first quoted by the shared stories that week, most severe first.

RSS feedOn your SOC screen

  1. CVE-2026-20079 10.0 Exploited Cisco FMC Flaws Exploited to Steal Credentials and Deploy Qilin Ransomware Cisco Secure Firewall Management… 7.0.0 → 7.4.7 (72 versions) 4 outlets
  2. CVE-2026-75650 10.0 Exploited Adobe Patches Over 170 Vulnerabilities, Including Commerce Zero-Day Adobe Commerce ≤ 2.4.9-2026-aug 3 outlets
  3. CVE-2026-85706 10.0 Exploited GitLab’s critical flaw is already drawing internet-wide probes GitLab < 18.11.12 · < 19.0.9 · < 19.1.8 +2 3 outlets
  4. CVE-2026-87491 8.8 Exploited Chinese Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy CLEANGULP Malware Google Chrome < 153.0.8010.36 4 outlets
  5. CVE-2025-25249 8.1 Exploited Fortinet Code Execution Flaw Exploited in PivotC2 RAT Attacks Fortinet FortiSwitchManager ≤ 7.2.5 2 outlets
  6. CVE-2026-85880 7.8 Exploited Chinese Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy CLEANGULP Malware Windows 10 1607 < 10.0.14393.9512 5 outlets
  7. CVE-2026-81963 7.8 Exploited Microsoft fixes record 964 flaws, including 2 exploited zero-days Windows 11 23h2 < 10.0.22631.7582 4 outlets
  8. CVE-2026-42016 Exploited A Phone Call Can Now Spread a Zero-Click Worm | Threat Wire 2 outlets
  9. CVE-2026-69414 2026 Max Win11 Accumulative Update: Microsoft Defender Zero-Day Gap Exposure, Read Any System File 2 outlets
  10. CVE-2026-85102 Exploited Check Point warns of hackers exploiting Security Gateway VPN RCE flaw 2 outlets
  11. CVE-2026-85103 Dutch NCSC: Critical Check Point VPN flaws exploitation is imminent 2 outlets
  12. CVE-2026-86060 Exploited MikroTrick Chain Let Attackers Take Over MikroTik Routers Without a Password or SSH Key 2 outlets
  13. CVE-2015-3245 August 2026 CVE Landscape 1 outlet
  14. CVE-2015-3246 Exploited August 2026 CVE Landscape 1 outlet
  15. CVE-2015-5287 Exploited August 2026 CVE Landscape 1 outlet
  16. CVE-2017-0199 Exploited August 2026 CVE Landscape 1 outlet
  17. CVE-2019-1068 Exploited August 2026 CVE Landscape 1 outlet
  18. CVE-2019-18935 Exploited August 2026 CVE Landscape 1 outlet
  19. CVE-2020-0796 Exploited August 2026 CVE Landscape 1 outlet
  20. CVE-2020-1472 Exploited August 2026 CVE Landscape 1 outlet
  21. CVE-2025-62593 Exploited August 2026 CVE Landscape 1 outlet
  22. CVE-2026-20205 Researchers found that 1 in 5 MCP access policies came back broken or missing 1 outlet
  23. CVE-2026-3395 August 2026 CVE Landscape 1 outlet
  24. CVE-2026-44756 SAP Patches CVSS 10.0 Kernel Flaw Enabling Unauthenticated Remote Code Execution 1 outlet
  25. CVE-2026-51990 Hackers exploit Tencent app flaw to deploy GrayRabbit malware 1 outlet
  26. CVE-2026-59800 August 2026 CVE Landscape 1 outlet
  27. CVE-2026-67276 MikroTik router flaws allow takeover without a password 1 outlet
  28. CVE-2026-69730 Microsoft Plugs Nearly 1,000 Security Holes 1 outlet
  29. CVE-2026-69829 Microsoft Plugs Nearly 1,000 Security Holes 1 outlet
  30. CVE-2026-72898 Exploited August 2026 CVE Landscape 1 outlet
  31. CVE-2026-82079 Nintendo Switch Old Solids exposed to remote code implementation bugs and officially recommended that users update 23.0.0 version system to address 1 outlet
  32. CVE-2026-86218 Exploited N-able N-central Pre-Auth RCE Flaw Exploited in the Wild 1 outlet
  33. CVE-2026-87719 GitLab’s critical flaw is already drawing internet-wide probes 1 outlet
  34. CVE-2026-9198 Exploited August 2026 CVE Landscape 1 outlet