VulnHub

Real-time Cybersecurity News

Critical

⚡ Weekly Recap: AI Goes Rogue, Metabase 0-Day, MCP Supply-Chain Attacks, and Router Backdoors

The Hacker News
Actively Exploited
Zero-dayExploitVulnerabilityUpdate

Overview

This week saw a range of cybersecurity issues, including the resurgence of old vulnerabilities and concerns over supply chain attacks. Researchers pointed out that common actions like cloning repositories or trusting default settings continue to lead to significant security breaches. One notable incident involved a zero-day vulnerability in Metabase, which could allow unauthorized access to sensitive data. Additionally, there are reports of supply-chain attacks targeting MCP systems, raising concerns about the integrity of software and hardware components. These incidents serve as a reminder for organizations to remain vigilant about their security practices and to frequently update their systems to counteract these evolving threats.

Key Takeaways

  • Active Exploitation: This vulnerability is being actively exploited by attackers. Immediate action is recommended.
  • Affected Systems: Metabase, MCP systems
  • Action Required: Organizations should apply patches for Metabase as soon as they are available and review security configurations to mitigate risks from supply chain vulnerabilities.
  • Timeline: Newly disclosed

Original Article Summary

A lot of security problems still begin with someone doing a completely normal thing. Cloning a repo. Answering a call. Leaving a box exposed. Trusting the default. That pretty much covers the mood this week. Old bugs are back, supply chains are getting stranger, and some exploit paths are so short you wonder what was supposed to stop them in the first place. That’s only part of it. Here’s

Impact

Metabase, MCP systems

Exploitation Status

This vulnerability is confirmed to be actively exploited by attackers in real-world attacks. Organizations should prioritize patching or implementing workarounds immediately.

Timeline

Newly disclosed

Remediation

Organizations should apply patches for Metabase as soon as they are available and review security configurations to mitigate risks from supply chain vulnerabilities.

Additional Information

This threat intelligence is aggregated from trusted cybersecurity sources. For the most up-to-date information, technical details, and official vendor guidance, please refer to the original article linked below.

Related Topics: This incident relates to Zero-day, Exploit, Vulnerability, and 1 more.

Read Original Article

Related Coverage

Critical Citrix NetScaler auth bypass now leveraged in attacks

BleepingComputer

Attackers are now exploiting a significant vulnerability in Citrix NetScaler, identified as CVE-2026-19490, which allows for authentication bypass. This flaw poses a severe risk as it could enable unauthorized access to systems using affected versions of NetScaler. Companies that utilize Citrix NetScaler for application delivery or networking are particularly at risk, as this vulnerability can compromise their security posture. Security researchers from Previdian have reported that the flaw is actively being exploited in the wild, indicating an urgent need for users to assess their systems. Organizations should prioritize applying any available patches or implementing mitigation strategies to protect against potential breaches.

Sep 4, 2026

PostgreSQL Fixes 12-Year-Old Logical Decoding Flaw Enabling Replication-Role Code Execution

The Hacker News

PostgreSQL has issued updates to fix a serious security vulnerability, tracked as CVE-2026-6471, that has existed for 12 years. This flaw allows users with the REPLICATION attribute to execute arbitrary code as the operating system user running the database server. The vulnerability affects several versions of PostgreSQL, specifically those released before 18.6, 17.11, 16.15, 15.19, and 14.24. The potential for attackers to exploit this flaw poses a significant risk to database security, making it crucial for users to apply the updates promptly. The vulnerability was introduced with the logical decoding feature in PostgreSQL 9.4, highlighting the importance of regularly updating database systems to protect against long-standing vulnerabilities.

Sep 4, 2026

New Ted Backdoor Hides Inside Victims' Own HAProxy Builds to Intercept Web Traffic

The Hacker News

A new Linux toolkit, dubbed 'ted', has been discovered embedded within altered HAProxy load balancers used by two South Korean organizations. This malicious implant allows attackers to intercept web traffic and manipulate the pages seen by certain visitors. The presence of 'ted' in the HAProxy binaries indicates that it does not exploit a vulnerability in HAProxy itself; instead, it requires the attackers to execute code on the affected systems. This incident raises significant concerns as it demonstrates how attackers can compromise widely used software to conduct web traffic interception. Organizations using HAProxy should be vigilant and ensure their installations are secure to prevent such intrusions.

Sep 4, 2026

AI Is Ending the Era of Hidden Vulnerabilities — Are Vendors Ready?

darkreading

Software vendors are facing a surge in bug reports that are revealing serious flaws in their secure-by-design promises. This influx of reports is overwhelming companies, leading to delays in addressing and disclosing vulnerabilities. As developers rush to keep up, the risk of undiscovered vulnerabilities increases, which can leave users exposed to potential attacks. This situation raises concerns about the readiness of vendors to manage and respond to security issues effectively. The article emphasizes the need for better processes to handle the growing number of vulnerabilities in software products, suggesting that without improvements, significant security risks may persist.

Sep 4, 2026

G7 Urges Fast-Track on Quantum-Safe Cybersecurity Rules

Infosecurity Magazine

The G7 has called on its member countries to develop national strategies focused on transitioning to quantum-safe encryption methods. This push comes as concerns grow about the potential for quantum computing to break current encryption methods, which would jeopardize the security of sensitive data across various sectors. The G7's recommendation emphasizes the urgency for governments to prepare for a future where quantum computers could compromise existing cybersecurity measures. By adopting new encryption standards, countries aim to safeguard personal information, financial transactions, and national security. This initiative is crucial as it seeks to protect against future vulnerabilities that quantum technologies could exploit.

Sep 4, 2026

Over 440,000 Exploit Attempts Target Super Forms and Elementor Pro RCE Flaws

The Hacker News

Researchers from Wordfence have discovered that hackers are taking advantage of two serious vulnerabilities in popular WordPress plugins: Super Forms and Elementor Pro. The first vulnerability, identified as CVE-2026-14894, has a CVSS score of 9.8 and allows unauthenticated attackers to upload files of any type due to a lack of file type validation in the Super Forms plugin. This flaw has led to over 440,000 exploit attempts. The Elementor Pro plugin is also affected, although specific details about its vulnerabilities were not provided. This situation is alarming for website owners using these plugins, as successful exploitation can lead to unauthorized access and potential data breaches. Website administrators should take immediate action to secure their sites against these threats.

Sep 4, 2026