Weekly Exploit Roundup

Generated 2026-08-25T08:00:09.418592+00:00 (UTC)

1. Actively Exploited Oracle WebLogic Flaw Lets Unauthenticated Attackers Access Critical Data
   Source: The Hacker News | Published: 2026-08-25T06:12:35+00:00 | Score: 23.347
   The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a maximum-severity security flaw impacting Oracle HTTP Server and Oracle WebLogic Server to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation.

   The vulnerability, tracked as CVE-2026-21962 (CVSS score: 10.0), allows an unauthenticated attacker with network access via HTTP to

2. Attackers Exploit Zimbra SNMP Flaw for Unauthenticated Remote Code Execution
   Source: The Hacker News | Published: 2026-08-20T13:24:28+00:00 | Score: 22.189
   A now-patched security flaw impacting Zimbra Collaboration (ZCS) has come under active exploitation in the wild, according to the Polish Computer Emergency Response Team (CERT Polska).

   The vulnerability in question is CVE-2026-73570 (CVSS score: 8.9), which refers to a case of command injection that can lead to remote code execution.

   "A remote code execution vulnerability exists in Zimbra

3. CISA Adds One Known Exploited Vulnerability to Catalog
   Source: Alerts | Published: 2026-08-24T12:00:00+00:00 | Score: 19.205
   CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-21962 Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise. Binding Operational Directive (BOD) 26-04: Prioritizing Security Updates Based on Risk establishes vulnerability management requirements for Federal Civilian Executive Branch (FCEB) agencies. BOD 26-04 reinforces the importance of the KEV Catalog and requires federal agencies to prioritize rapid remediation of high-risk vulnerabilities, specifically those identified by Common Vulnerabilities and Exposures (CVEs) listed in CISA’s KEV Catalog on publicly exposed assets that grant total control of the asset post-exploitation, while deferring action for lower-risk vulnerabilities. BOD 26-04 further establishes ba
4. Critical macOS, SharePoint, vCenter, and Microsoft IKE Flaws Under Active Exploitation
   Source: The Hacker News | Published: 2026-08-19T11:01:48+00:00 | Score: 19.204
   The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added four critical vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, stating they are being exploited in the wild.

   The shortcomings added to the KEV catalog are listed below –

   CVE-2026-65400 (CVSS score: 9.8) – An improper authentication vulnerability impacting Apple macOS that could allow an

5. CISA Adds One Known Exploited Vulnerability to Catalog
   Source: Alerts | Published: 2026-08-21T12:00:00+00:00 | Score: 17.762
   CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-73570 Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise. Binding Operational Directive (BOD) 26-04: Prioritizing Security Updates Based on Risk establishes vulnerability management requirements for Federal Civilian Executive Branch (FCEB) agencies. BOD 26-04 reinforces the importance of the KEV Catalog and requires federal agencies to prioritize rapid remediation of high-risk vulnerabilities, specifically those identified by Common Vulnerabilities and Exposures (CVEs) listed in CISA’s KEV Catalog on publicly exposed assets that grant total control of the asset post-exploitation, while deferring action for lower-risk vulnerabilities. BOD 26-04 further establishes basic expectations for when agen
6. Elementor Pro Flaw Could Let Unauthenticated Attackers Upload PHP and Execute Code
   Source: The Hacker News | Published: 2026-08-20T06:04:34+00:00 | Score: 17.471
   Cybersecurity researchers have disclosed details of a critical flaw in the Elementor Pro WordPress plugin that, if successfully exploited, could lead to remote code execution.

   The vulnerability, tracked as CVE-2026-32475, carries a CVSS score of 9.0 out of 10.0. It has been described as a case of unrestricted upload of a file with a dangerous type.

   "The flaw lives in the Forms module's File

7. Critical Keycloak Password Reset Flaw Could Let Unauthenticated Attackers Take Over Any Account
   Source: The Hacker News | Published: 2026-08-24T11:56:34+00:00 | Score: 17.003
   Red Hat and the Keycloak project have released patches to address a critical security flaw in the open-source identity and access management server that could allow an unauthenticated remote attacker to take over any user account by forcing a password reset.

   The vulnerability, assigned the CVE identifier CVE-2026-18963, is rated 9.1 on the CVSS scoring system by Red Hat, which acts as

8. CISA Warns of Exploited Oracle WebLogic Vulnerability
   Source: SecurityWeek | Published: 2026-08-25T07:46:34+00:00 | Score: 16.793
   The vulnerability is tracked as CVE-2026-21962 and it has been widely exploited by threat actors against WebLogic servers. The post CISA Warns of Exploited Oracle WebLogic Vulnerability appeared first on SecurityWeek .
9. CISA Adds Four Known Exploited Vulnerabilities to Catalog
   Source: Alerts | Published: 2026-08-18T12:00:00+00:00 | Score: 16.719
   CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-33824 Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability CVE-2026-55040 Microsoft SharePoint Weak Authentication Vulnerability CVE-2026-59310 Broadcom VMware vCenter Path Traversal Vulnerability CVE-2026-65400 Apple macOS Improper Authentication Vulnerability These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risks to the federal enterprise. Binding Operational Directive (BOD) 26-04: Prioritizing Security Updates Based on Risk establishes vulnerability management requirements for Federal Civilian Executive Branch (FCEB) agencies. BOD 26-04 reinforces the importance of the KEV Catalog and requires federal agencies to prioritize rapid remediation of high-risk vulnerabilities, specifically those identified by Common Vulnerabilities and Exposures (CVEs) liste
10. GitLab CVE-2026-19478 Comes Under Active Exploitation Within Days of Disclosure
    Source: The Hacker News | Published: 2026-08-21T07:04:25+00:00 | Score: 16.715
    A newly disclosed security flaw in GitLab has come under active exploitation within days of public disclosure, according to watchTowr.

    The vulnerability in question is CVE-2026-19478 (CVSS score: 9.4), a case of code injection that allows an unauthenticated attacker to modify or delete publicly accessible GitLab projects and rewrite their data under certain conditions without requiring

End of report.