VulnHub

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two significant vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog due to evidence that they are being actively exploited. One of the vulnerabilities, identified as CVE-2026-5430, is a path traversal flaw in WSO2 API Control Plane, which has a severity score of 9.8, indicating it's highly critical. The other vulnerability affects Adobe Commerce and Magento, although specific details about it were not provided in the article. Organizations using these platforms should be aware of the risks, as attackers may exploit these vulnerabilities to gain unauthorized access or control over systems. Immediate action is advised to mitigate potential threats from these vulnerabilities.

The Cybersecurity and Infrastructure Security Agency (CISA) has added two vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, indicating that they are being actively exploited. The first, CVE-2026-5430, affects multiple WSO2 products, presenting a path traversal vulnerability that could allow unauthorized access to sensitive files. The second, CVE-2026-71362, involves incorrect authorization in Adobe Commerce and Magento, which could enable attackers to gain unauthorized control over user accounts. These vulnerabilities pose significant risks, particularly to federal agencies, which are required to prioritize fixing high-risk vulnerabilities as per CISA's Binding Operational Directive 26-04. While the directive primarily targets federal agencies, CISA urges all organizations to adopt similar practices to enhance their security posture against these threats.

Adobe has addressed nine critical security flaws found in its Connect and AEM Forms products. These vulnerabilities could allow attackers to execute arbitrary code and escalate their privileges within affected systems. Users of these products are urged to apply the patches released by Adobe to protect against potential exploitation. The flaws present a significant risk, especially for organizations that rely on these tools for their operations. Keeping software up to date is essential to mitigate these risks and safeguard sensitive information.

The Cybersecurity and Infrastructure Security Agency (CISA) has added four new vulnerabilities to its Known Exploited Vulnerabilities Catalog, indicating that these flaws are actively being exploited in the wild. The vulnerabilities include CVE-2026-75650 affecting Adobe Commerce and Magento, CVE-2026-81963 and CVE-2026-85880 impacting Microsoft Windows, and CVE-2026-86218 concerning N-able N-central. These vulnerabilities are particularly concerning for federal agencies, as they could allow attackers to gain total control over compromised systems. CISA's Binding Operational Directive 26-04 emphasizes the need for federal agencies to promptly address high-risk vulnerabilities, and while it specifically applies to federal entities, CISA encourages all organizations to adopt similar practices for managing and mitigating risks associated with these vulnerabilities.

Adobe has issued urgent security patches for a serious vulnerability affecting Adobe Commerce and Magento Open Source, identified as CVE-2026-75650. This flaw has a maximum severity rating of 10.0 and has been actively exploited since September 4, 2026. Known as StyleSmuggler, the vulnerability allows attackers to deploy a Rust backdoor and a PHP web shell, posing significant risks to users of these platforms. Companies running affected versions need to apply the patches promptly to protect their systems from potential breaches. Failure to address this vulnerability could lead to unauthorized access and data compromise.

A new vulnerability in Magento Open Source and Adobe Commerce, identified by the Dutch security firm Sansec and named StyleSmuggler, is currently being exploited by attackers. This flaw allows malicious code to be executed on online store servers without requiring a login, which poses a significant risk to e-commerce platforms. Sansec reported that attacks began on September 4, 2023, just a day before the advisory was published. Online stores using these platforms are at risk of being backdoored, which can lead to unauthorized access and data breaches. Companies running affected systems need to take this threat seriously and implement necessary security measures to protect their customers and data.

Shortly after its public disclosure, hackers began exploiting a serious vulnerability in Adobe Commerce known as CVE-2026-71362, which has a CVSS score of 9.1. This flaw allows attackers to hijack customer accounts without needing authentication, potentially exposing sensitive user data. Businesses using Adobe Commerce should be particularly vigilant, as this vulnerability could lead to unauthorized access to customer information and significant privacy breaches. The urgency of the situation is heightened by the rapid targeting of the flaw by cybercriminals, making it critical for affected organizations to act quickly to safeguard their systems and user data.

Researchers have identified a critical vulnerability (CVE-2026-71362) in Adobe's Commerce and Magento e-commerce platforms that could allow hackers to take control of customer accounts. This flaw impacts businesses using these platforms, raising serious concerns for online retailers and their customers. Attackers could exploit this vulnerability to gain unauthorized access to sensitive user information, potentially leading to identity theft and financial fraud. As attempts to exploit this flaw have already been detected, it's crucial for affected users to take immediate action to secure their accounts. The situation underscores the ongoing risks faced by e-commerce platforms and the need for timely software updates.

Adobe has released important security updates to address multiple critical vulnerabilities affecting its ColdFusion, Commerce, and Campaign Classic products. Among these, the most serious is a command injection flaw in ColdFusion, identified as CVE-2026-48362, which has a maximum severity score of 10.0 on the CVSS scale. If exploited, this vulnerability could allow attackers to execute arbitrary code on affected systems, leading to potential privilege escalation. This is particularly concerning for organizations that rely on these Adobe products, as successful exploitation could compromise sensitive data and system integrity. Users are strongly advised to apply the latest patches to mitigate these risks.

Adobe has issued a warning for users of its ColdFusion and Campaign Classic products to address serious security flaws that could allow attackers to execute arbitrary code or cause denial-of-service attacks. These vulnerabilities pose significant risks, as they could let malicious actors take control of systems or disrupt services. Users of these applications are urged to prioritize patching to protect their data and ensure operational continuity. The company has not specified if these vulnerabilities are currently being exploited in the wild, but the urgency of the advisory indicates a pressing need for action. Patching is essential to mitigate the risks posed by these flaws.

A new campaign known as SMOKE#SCREEN has been identified by Securonix Threat Research, where attackers are using deceptive tactics to gain unauthorized remote access to systems. The attackers are distributing fake Zoom updates and other social engineering lures to install ScreenConnect, a remote management tool, on victims' devices. This allows them to maintain persistent access while evading security measures. The campaign is ongoing and utilizes various methods, including notices about Adobe software and system maintenance prompts, making it particularly insidious. Organizations and individuals should be vigilant about such fraudulent updates and take necessary precautions to protect their systems.

Russian hackers have reportedly hijacked hotel Wi-Fi networks to steal Microsoft 365 authentication tokens from unsuspecting users. This technique allows attackers to gain access to sensitive accounts without needing the users' passwords. The incident primarily affects travelers and guests using hotel Wi-Fi, who may unknowingly expose their credentials while accessing their Microsoft accounts. This type of attack raises significant concerns about the security of public internet connections and the potential for widespread account takeovers. Users should be cautious when connecting to hotel Wi-Fi and consider using a VPN to protect their data.