0dayNews — Vulnerability & Exploit News
Known Exploited Vulnerabilities
Type confusion in Chrome V8 allows sandbox code execution
Type confusion in Chrome's V8 engine lets remote attackers run arbitrary code inside the browser sandbox via a crafted HTML page. Actively exploited; update to 152.0.7977.82.
Kludex Starlette HTTP Request/Response Smuggling Vulnerability
Kludex Starlette contains a HTTP request/response smuggling vulnerability that could allow attackers to inject paths into the host part, prepending the actual path leading to issues such as authentication bypass when the authentication depends on the reconstructed URL’s path. This vulnerability could be chaned with CVE-2026-42271.
Kestra OSS OS Command Injection Vulnerability
Kestra OSS contains an OS command injection vulnerability that could allow an unauthenticated remote attacker to create and execute arbitrary workflows without credentials.
BerriAI LiteLLM Improper Authentication Vulnerability
BerriAI LiteLLM contains an improper authentication vulnerability in the MCP Streamable HTTP endpoint that could allow an unauthenticated attacker to establish an authenticated MCP session using an arbitrary Bearer token.
Sangoma Switchvox SQL Injection Vulnerability
Sangoma Switchvox contains a SQL injection vulnerability which allows an unauthenticated remote attacker to execute arbitrary SQL statements against the backend PostgreSQL database using a single crafted request, including database operations and remote code execution.
Pre-auth SSRF in SonicWall SMA1000 Workplace Interface
Unauthenticated SSRF in the SMA1000 Workplace interface allows remote attackers to reach internal functionality via an unintended access path. Exploited in the wild; chains with CVE-2026-83549 for RCE.
From the desk
PostgreSQL Patches 12-Year-Old Logical Decoding RCE
PostgreSQL patches a 12-year-old flaw in its logical decoding subsystem. Accounts with the REPLICATION attribute could execute code on the underlying host.
Microsoft Patches Entra ID CVSS 9.1 Auth Bypass
A CVSS 9.1 auth bypass in Microsoft Entra ID lets unauthenticated attackers escalate privileges. Second critical Entra flaw in three weeks; patch available.
Citrix NetScaler Auth Bypass Now Exploited in Wild
Attackers are actively targeting CVE-2026-19490, a critical auth bypass in Citrix NetScaler ADC and Gateway. Patches have been available since August 19.
HPE Patches CVSS 9.8 RCE in ArubaOS-CX Switches
HPE's advisory for ArubaOS-CX covers 24 flaws, led by CVE-2026-73749 — an unauthenticated buffer overflow rated 9.8 that allows remote code execution on data center switches.
Chrome Patches Exploited V8 Zero-Day: Update Now
CVE-2026-85046 is a type confusion bug in Chrome's V8 engine, CVSS 8.8, actively exploited in the wild. Update to Chrome 152.0.7977.82 or later immediately.
All-in-One WP Migration Flaw Hits 3M WordPress Sites
Unauthenticated SQL injection in All-in-One WP Migration and Backup plugin (versions through 7.109) enables data theft and conditional RCE. Update immediately.